OSINT

Malware Analysis – bootkit – d2f9b86aded4ecd4b309d460d5ded850

January 17, 2023

Score: 10 MALWARE FAMILY: bootkitTAGS:bootkit, discovery, evasion, persistence, ransomware, trojanMD5: d2f9b86aded4ecd4b309d460d5ded850SHA1: 5d1d8f05d6bdc025f4edac3db52873779b8975a2ANALYSIS DATE: 2023-01-16T22:31:14ZTTPS: T1012, T1497, T1082, T1060, T1112, T1031,...

Malware Analysis – djvu – f0ed4abc044e5d3d555b9a7a567c3f68

January 17, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, stealerMD5: f0ed4abc044e5d3d555b9a7a567c3f68SHA1: 6cfc80ce713f433b764189611195df7ed2fa3d77ANALYSIS DATE: 2023-01-16T22:05:53ZTTPS: T1222, T1082, T1130, T1112, T1060...

Malware Analysis – djvu – 55602580c3b839262b5c51c02c784e33

January 17, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 55602580c3b839262b5c51c02c784e33SHA1: 1ca65ac61268be63416abe9034681f368fbf59eeANALYSIS DATE: 2023-01-16T23:11:51ZTTPS: T1012, T1082, T1005, T1081,...

Malware Analysis – djvu – d53ebb314c2c89b7057c4449b8356314

January 17, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: d53ebb314c2c89b7057c4449b8356314SHA1: c7daac2a127bc9672ca5fca6bd0177838e7b561eANALYSIS DATE: 2023-01-16T22:28:06ZTTPS: T1130, T1112, T1012, T1005,...

OSINT

Malware Analysis – bootkit – d2f9b86aded4ecd4b309d460d5ded850

Malware Analysis – djvu – f0ed4abc044e5d3d555b9a7a567c3f68

Malware Analysis – djvu – 55602580c3b839262b5c51c02c784e33

Malware Analysis – djvu – d53ebb314c2c89b7057c4449b8356314

Avast releases free BianLian ransomware decryptor

Datadog rotates RPM signing key exposed in CircleCI hack

Hackers exploit Cacti critical bug to install malware, open reverse shells

Malicious ‘Lolip0p’ PyPi packages install info-stealing malware

Vice Society ransomware leaks University of Duisburg-Essen’s data

Vice Society Ransomware Victim: TIMco

Vice Society Ransomware Victim: University of Duisburg-Essen

Royal Ransomware Victim: Westsächsische Hochschule Zwickau

LATMA – Lateral Movement Analyzer Tool

LockBit 3.0 Ransomware Victim: fulfilmentmatters[.]co[.]uk

LockBit 3.0 Ransomware Victim: atcuae[.]ae

LockBit 3.0 Ransomware Victim: ak[.]com[.]sa

LockBit 3.0 Ransomware Victim: politriz[.]ind[.]br

LockBit 3.0 Ransomware Victim: melody[.]com[.]tr

Cobalt Stike Beacon Detected – 84[.]32[.]131[.]35:443

Cobalt Stike Beacon Detected – 1[.]116[.]132[.]251:81

Cobalt Stike Beacon Detected – 47[.]99[.]188[.]174:8887

Cobalt Stike Beacon Detected – 49[.]233[.]62[.]180:8080

Cobalt Stike Beacon Detected – 45[.]148[.]120[.]196:80

Cobalt Stike Beacon Detected – 134[.]209[.]122[.]196:443

CVE Alert: CVE-2025-6915

CVE Alert: CVE-2025-45143

CVE Alert: CVE-2025-6917

CVE Alert: CVE-2025-6925

CVE Alert: CVE-2025-6916

You may have missed