OSINT

Malware Analysis – ransomware – f31d6529ff4ad98053f9a8a9832f95e3

February 9, 2023

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: f31d6529ff4ad98053f9a8a9832f95e3SHA1: abdd5ce48e2d11a4c82fc90d9e9beeb14b437ceeANALYSIS DATE: 2023-02-09T05:33:03ZTTPS: T1005, T1081, T1107, T1490 ScoreMeaningExample10Known badA malware family was...

Cobalt Stike Beacon Detected – 47[.]100[.]215[.]156:80

February 9, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 103[.]20[.]221[.]10:80

February 9, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 84[.]32[.]188[.]75:443

February 9, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 159[.]253[.]120[.]205:8443

February 9, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 159[.]253[.]120[.]205:443

February 9, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 42[.]192[.]195[.]250:4567

February 9, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 194[.]165[.]16[.]90:80

February 9, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 209[.]97[.]156[.]75:8080

February 9, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 106[.]75[.]227[.]134:443

February 9, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 69[.]49[.]245[.]179:443

February 9, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 45[.]151[.]144[.]159:81

February 9, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 47[.]90[.]244[.]75:80

February 9, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 143[.]42[.]19[.]99:80

February 9, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – evasion – 2280a8daff5f3edaaa91eaf2af3db70b

February 9, 2023

Score: 6 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 2280a8daff5f3edaaa91eaf2af3db70bSHA1: 1cc443d49aed25012ae43374c05e1633f5ae1ed4ANALYSIS DATE: 2023-02-08T21:11:03ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – djvu – 4cf9a9a6dd35e23a84488490eb10c9ff

February 9, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 4cf9a9a6dd35e23a84488490eb10c9ffSHA1: b709bf683b5d06c201379a3c1c10cb64496162d8ANALYSIS DATE: 2023-02-08T21:08:32ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – evasion – fc09aee634702b283fde4f76ecaf8427

February 9, 2023

Score: 6 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: fc09aee634702b283fde4f76ecaf8427SHA1: 169beecfca212d0886bf199e53b544915adba0b2ANALYSIS DATE: 2023-02-08T21:45:47ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Cobalt Stike Beacon Detected – 37[.]220[.]87[.]31:443

February 9, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 147[.]78[.]47[.]141:80

February 9, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 43[.]142[.]193[.]130:443

February 9, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 109[.]172[.]45[.]38:80

February 9, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – – 15e04e8d884d3a294f7c9094700e9149

February 9, 2023

Score: 1 MALWARE FAMILY: TAGS:MD5: 15e04e8d884d3a294f7c9094700e9149SHA1: d61e581e8276e639468b1edb204596975f454cafANALYSIS DATE: 2023-02-08T21:49:03ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – – a0b64b439b2cda9875093e89c4ef7d91

February 9, 2023

Score: 1 MALWARE FAMILY: TAGS:MD5: a0b64b439b2cda9875093e89c4ef7d91SHA1: 2522faf897df5be0bc16d486b4ead39f96bf647fANALYSIS DATE: 2023-02-08T21:59:22ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – persistence – 19ae6f2504c0cddeb4becaa8b9fc8024

February 9, 2023

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 19ae6f2504c0cddeb4becaa8b9fc8024SHA1: 744470131925e8a43889cbc1b23c0370b81fecedANALYSIS DATE: 2023-02-08T21:57:45ZTTPS: T1060, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

OSINT

Malware Analysis – ransomware – f31d6529ff4ad98053f9a8a9832f95e3

Cobalt Stike Beacon Detected – 47[.]100[.]215[.]156:80

Cobalt Stike Beacon Detected – 103[.]20[.]221[.]10:80

Cobalt Stike Beacon Detected – 84[.]32[.]188[.]75:443

Cobalt Stike Beacon Detected – 159[.]253[.]120[.]205:8443

Cobalt Stike Beacon Detected – 159[.]253[.]120[.]205:443

Cobalt Stike Beacon Detected – 42[.]192[.]195[.]250:4567

Cobalt Stike Beacon Detected – 194[.]165[.]16[.]90:80

Cobalt Stike Beacon Detected – 209[.]97[.]156[.]75:8080

Cobalt Stike Beacon Detected – 106[.]75[.]227[.]134:443

Cobalt Stike Beacon Detected – 69[.]49[.]245[.]179:443

Cobalt Stike Beacon Detected – 45[.]151[.]144[.]159:81

Cobalt Stike Beacon Detected – 47[.]90[.]244[.]75:80

Cobalt Stike Beacon Detected – 143[.]42[.]19[.]99:80

Malware Analysis – evasion – 2280a8daff5f3edaaa91eaf2af3db70b

Malware Analysis – djvu – 4cf9a9a6dd35e23a84488490eb10c9ff

Malware Analysis – evasion – fc09aee634702b283fde4f76ecaf8427

Cobalt Stike Beacon Detected – 37[.]220[.]87[.]31:443

Cobalt Stike Beacon Detected – 147[.]78[.]47[.]141:80

Cobalt Stike Beacon Detected – 43[.]142[.]193[.]130:443

Cobalt Stike Beacon Detected – 109[.]172[.]45[.]38:80

Malware Analysis – – 15e04e8d884d3a294f7c9094700e9149

Malware Analysis – – a0b64b439b2cda9875093e89c4ef7d91

Malware Analysis – persistence – 19ae6f2504c0cddeb4becaa8b9fc8024

CVE Alert: CVE-2025-53321

CVE Alert: CVE-2025-53318

CVE Alert: CVE-2025-53320

CVE Alert: CVE-2025-53310

CVE Alert: CVE-2025-53322

You may have missed