OSINT

Malware Analysis – evasion – 9a4f70d1aed0c3e4cab2d565d8c2b2e3

February 15, 2023

Score: 8 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 9a4f70d1aed0c3e4cab2d565d8c2b2e3SHA1: 7ba0a92f77013b4b3df590399da28c181a423a94ANALYSIS DATE: 2023-02-15T05:00:36ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – djvu – f5d57b9e3fd125cf7eb642ef89e09d9b

February 15, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: f5d57b9e3fd125cf7eb642ef89e09d9bSHA1: 24cc19260eec4be76d219f81041e0eb2b5b5730cANALYSIS DATE: 2023-02-15T05:30:27ZTTPS: T1012, T1082, T1053, T1005,...

Malware Analysis – chaos – 1379c8d2a7758958c5f2ad789feef48e

February 15, 2023

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, evasion, ransomware, spyware, stealerMD5: 1379c8d2a7758958c5f2ad789feef48eSHA1: 24e960b51b156502b81c0e0deaeabca09b160a4eANALYSIS DATE: 2023-02-15T05:29:03ZTTPS: T1490, T1059, T1107, T1005, T1081, T1082, T1491,...

Malware Analysis – djvu – 0bd656fe319b787ae2a18e10f3f8cf27

February 15, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:rhadamanthys, family:smokeloader, backdoor, discovery, ransomware, spyware, stealer, trojan, vmprotectMD5: 0bd656fe319b787ae2a18e10f3f8cf27SHA1: 9d2a0bac3b07cb8a3d693a49cf1dc80b14b6032bANALYSIS DATE: 2023-02-15T05:40:33ZTTPS: T1012, T1120,...

Malware Analysis – djvu – e44143d2af9f4d889076c2862fd2e067

February 15, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: e44143d2af9f4d889076c2862fd2e067SHA1: 17f188c714e857674273f79ff1a33ec32ae62451ANALYSIS DATE: 2023-02-15T05:20:30ZTTPS: T1222, T1060, T1112, T1082,...

OSINT

Malware Analysis – evasion – 9a4f70d1aed0c3e4cab2d565d8c2b2e3

Malware Analysis – djvu – f5d57b9e3fd125cf7eb642ef89e09d9b

Malware Analysis – chaos – 1379c8d2a7758958c5f2ad789feef48e

Malware Analysis – djvu – 0bd656fe319b787ae2a18e10f3f8cf27

Malware Analysis – djvu – e44143d2af9f4d889076c2862fd2e067

Update Now: Microsoft Releases Patches for 3 Actively Exploited Windows Vulnerabilities

LockBit 3.0 Ransomware Victim: cassaragionieri[.]it

A CISOs Practical Guide to Storage and Backup Ransomware Resiliency

Chinese Hackers Targeting South American Diplomatic Entities with ShadowPad

Python Developers Beware: Clipper Malware Found in 450+ PyPI Packages!

Massive AdSense Fraud Campaign Uncovered – 10,000+ WordPress Sites Infected

LockBit 3.0 Ransomware Victim: gruppobeltrame[.]com

Cobalt Stike Beacon Detected – 120[.]46[.]192[.]64:80

Cobalt Stike Beacon Detected – 107[.]173[.]111[.]16:443

Cobalt Stike Beacon Detected – 1[.]117[.]117[.]162:443

Cobalt Stike Beacon Detected – 123[.]58[.]197[.]94:8080

Cobalt Stike Beacon Detected – 43[.]159[.]43[.]58:443

Cobalt Stike Beacon Detected – 23[.]94[.]240[.]207:443

Cobalt Stike Beacon Detected – 43[.]153[.]117[.]9:4433

Cobalt Stike Beacon Detected – 120[.]77[.]18[.]249:88

Cobalt Stike Beacon Detected – 176[.]113[.]115[.]44:443

Cobalt Stike Beacon Detected – 65[.]49[.]237[.]57:443

Cobalt Stike Beacon Detected – 103[.]30[.]17[.]40:443

CISA: Citrix Releases Security Updates for Workspace Apps, Virtual Apps and Desktops

CVE Alert: CVE-2025-53603

CVE Alert: CVE-2025-26850

CVE Alert: CVE-2025-53605

CVE Alert: CVE-2025-43711

CVE Alert: CVE-2025-53604

You may have missed