OSINT

Malware Analysis – djvu – 050660cb4580904a1d51df22d191898a

February 16, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 050660cb4580904a1d51df22d191898aSHA1: d2b2ae896fa4732ea75b273a08c9cb3117b589b5ANALYSIS DATE: 2023-02-15T23:12:00ZTTPS: T1005, T1081, T1222, T1012,...

Malware Analysis – djvu – 5dcede88c6f893797297dd8cb20ab23a

February 16, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:gozi, family:laplas, family:rhadamanthys, family:smokeloader, family:vidar, botnet:1001, botnet:19, backdoor, banker, clipper, collection, discovery, isfb, persistence, ransomware,...

Malware Analysis – discovery – a84d3f2f6abb56721bc93def5563aef7

February 16, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: a84d3f2f6abb56721bc93def5563aef7SHA1: 656ac878c2b3b46f83b7e0bcb6805f2b5f6bb199ANALYSIS DATE: 2023-02-15T22:48:55ZTTPS: T1112, T1082, T1057, T1012, T1060 ScoreMeaningExample10Known badA malware family...

North Korea’s APT37 Targeting Southern Counterpart with New M2RAT Malware

February 15, 2023

The North Korea-linked threat actor tracked as APT37 has been linked to a piece of new malware dubbed M2RAT in...

Webinar — A MythBusting Special: 9 Myths about File-based Threats

February 15, 2023

Bad actors love to deliver threats in files. Persistent and persuasive messages convince unsuspecting victims to accept and open files...

Financially Motivated Threat Actor Strikes with New Ransomware and Clipper Malware

February 15, 2023

A new financially motivated campaign that commenced in December 2022 has seen the unidentified threat actor behind it deploying a...

Experts Warn of ‘Beep’ – A New Evasive Malware That Can Fly Under the Radar

February 15, 2023

Cybersecurity researchers have unearthed a new piece of evasive malware dubbed Beep that's designed to fly under the radar and...

Regular Pen Testing Is Key to Resolving Conflict Between SecOps and DevOps

February 15, 2023

In an ideal world, security and development teams would be working together in perfect harmony. But we live in a...

LockBit 3.0 Ransomware Victim: richardsind[.]com

February 15, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the...

LockBit 3.0 Ransomware Victim: montibello[.]com

February 15, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the...

LockBit 3.0 Ransomware Victim: nationallocums[.]co[.]uk

February 15, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the...

LockBit 3.0 Ransomware Victim: vipar[.]com

February 15, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the...

Cobalt Stike Beacon Detected – 23[.]94[.]240[.]207:8443

February 15, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 154[.]39[.]157[.]8:80

February 15, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 147[.]78[.]47[.]135:80

February 15, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 120[.]46[.]185[.]86:80

February 15, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 185[.]143[.]223[.]38:443

February 15, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – smokeloader – e137a8d531e7def08ae705ee04f8089a

February 15, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: e137a8d531e7def08ae705ee04f8089aSHA1: b7f57f8d7d22ba40cfe834976583f6c054c121fcANALYSIS DATE: 2023-02-15T09:06:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 1f3fa4c1b46a4c543c5cfb65727ee66f

February 15, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:19, backdoor, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: 1f3fa4c1b46a4c543c5cfb65727ee66fSHA1: 3ef7cb7af6958c82b6fbba86765141f7b704aaefANALYSIS DATE: 2023-02-15T10:03:48ZTTPS:...

Cobalt Stike Beacon Detected – 199[.]195[.]249[.]113:80

February 15, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 47[.]100[.]215[.]156:443

February 15, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – – 2e3bdf628e9bfaa6fe04786c390bdc6e

February 15, 2023

Score: 8 MALWARE FAMILY: TAGS:MD5: 2e3bdf628e9bfaa6fe04786c390bdc6eSHA1: 09e783f6b97b7e84e0b736b8db308d25a8c22633ANALYSIS DATE: 2023-02-15T10:05:30ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – djvu – e57762afc5371e7b0c32ac6712c85e78

February 15, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: e57762afc5371e7b0c32ac6712c85e78SHA1: 348ad22c24a2c90b0067f524120eb5799d8b8c94ANALYSIS DATE: 2023-02-15T10:30:09ZTTPS: T1060, T1112, T1222, T1005,...

Malware Analysis – djvu – e6c4eb245ab9d0b8435986f7d0d3283e

February 15, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: e6c4eb245ab9d0b8435986f7d0d3283eSHA1: 7c790fd8289e60f5de7f54525d6fcddcd71cbca8ANALYSIS DATE: 2023-02-15T10:10:30ZTTPS: T1005, T1081, T1012, T1082,...

OSINT

Malware Analysis – djvu – 050660cb4580904a1d51df22d191898a

Malware Analysis – djvu – 5dcede88c6f893797297dd8cb20ab23a

Malware Analysis – discovery – a84d3f2f6abb56721bc93def5563aef7

North Korea’s APT37 Targeting Southern Counterpart with New M2RAT Malware

Webinar — A MythBusting Special: 9 Myths about File-based Threats

Financially Motivated Threat Actor Strikes with New Ransomware and Clipper Malware

Experts Warn of ‘Beep’ – A New Evasive Malware That Can Fly Under the Radar

Regular Pen Testing Is Key to Resolving Conflict Between SecOps and DevOps

LockBit 3.0 Ransomware Victim: richardsind[.]com

LockBit 3.0 Ransomware Victim: montibello[.]com

LockBit 3.0 Ransomware Victim: nationallocums[.]co[.]uk

LockBit 3.0 Ransomware Victim: vipar[.]com

Cobalt Stike Beacon Detected – 23[.]94[.]240[.]207:8443

Cobalt Stike Beacon Detected – 154[.]39[.]157[.]8:80

Cobalt Stike Beacon Detected – 147[.]78[.]47[.]135:80

Cobalt Stike Beacon Detected – 120[.]46[.]185[.]86:80

Cobalt Stike Beacon Detected – 185[.]143[.]223[.]38:443

Malware Analysis – smokeloader – e137a8d531e7def08ae705ee04f8089a

Malware Analysis – djvu – 1f3fa4c1b46a4c543c5cfb65727ee66f

Cobalt Stike Beacon Detected – 199[.]195[.]249[.]113:80

Cobalt Stike Beacon Detected – 47[.]100[.]215[.]156:443

Malware Analysis – – 2e3bdf628e9bfaa6fe04786c390bdc6e

Malware Analysis – djvu – e57762afc5371e7b0c32ac6712c85e78

Malware Analysis – djvu – e6c4eb245ab9d0b8435986f7d0d3283e

CVE Alert: CVE-2025-6350

CVE Alert: CVE-2024-39730

CVE Alert: CVE-2025-6379

CVE Alert: CVE-2025-36027

CVE Alert: CVE-2025-36026

You may have missed