OSINT

Malware Analysis – djvu – 614fc2099e6a6f27944ece6715fd46d9

December 28, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 614fc2099e6a6f27944ece6715fd46d9SHA1: d69a68f031f5679d1b4672aefe21423b37d87b4dANALYSIS DATE: 2022-12-28T05:13:47ZTTPS: T1005, T1081, T1012, T1082, T1060, T1112,...

Malware Analysis – discovery – f62c3007eccf750d07e911fd219c2b1c

December 28, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, evasion, persistence, ransomware, spyware, stealer, trojanMD5: f62c3007eccf750d07e911fd219c2b1cSHA1: 5fe513b3d9db6a8f74613eaac7ee2ae6a75465e7ANALYSIS DATE: 2022-12-28T05:25:52ZTTPS: T1082, T1012, T1005, T1081, T1112,...

Malware Analysis – discovery – 4234902e03d0de35cfdf2e325804a4b0

December 28, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: 4234902e03d0de35cfdf2e325804a4b0SHA1: e339fc0e19bbc25c5e9c32b5dbaee48b54c92f2bANALYSIS DATE: 2022-12-28T04:31:59ZTTPS: T1060, T1112, T1012, T1082, T1130 ScoreMeaningExample10Known badA malware family...

Malware Analysis – – cd183f486dd18961805e9f4badecce69

December 28, 2022

Score: 6 MALWARE FAMILY: TAGS:MD5: cd183f486dd18961805e9f4badecce69SHA1: 55eadf655f975bc3652ed3f26d5424e53fd1d4d9ANALYSIS DATE: 2022-12-28T03:49:26ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Royal Ransomware Victim: www[.]buildersmutual[.]com

December 28, 2022

RoyalRansomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the...

Cobalt Stike Beacon Detected – 192[.]3[.]231[.]208:8443

December 28, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – evasion – 4b42f986dac108ed8b7751a17f402c12

December 28, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 4b42f986dac108ed8b7751a17f402c12SHA1: 8df669199a90dffb150033f2aa304932b4c56ce5ANALYSIS DATE: 2022-12-27T21:02:02ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – discovery – 0fb21645525fb3c81b329eb851f2764e

December 28, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: 0fb21645525fb3c81b329eb851f2764eSHA1: bb94e9d4f4b9ba4ef7598e1229896f40254b89eaANALYSIS DATE: 2022-12-27T21:03:25ZTTPS: T1012, T1082, T1112, T1042, T1060 ScoreMeaningExample10Known badA malware family...

Cobalt Stike Beacon Detected – 45[.]66[.]159[.]41:4445

December 28, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 5[.]188[.]86[.]196:80

December 28, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – evasion – fadd46a249a193e6611108d2b56332d4

December 28, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: fadd46a249a193e6611108d2b56332d4SHA1: 359eb590c8151019cba624e02c4fd914eca6c061ANALYSIS DATE: 2022-12-27T21:44:02ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Cobalt Stike Beacon Detected – 119[.]23[.]61[.]52:8090

December 28, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – f509a9c8b550834134c1dbcdd8a19850

December 28, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: f509a9c8b550834134c1dbcdd8a19850SHA1: affc52c4743a35846abbbca3253f35e1eb369690ANALYSIS DATE: 2022-12-27T22:03:10ZTTPS: T1130, T1112, T1060, T1222, T1082, T1053 ScoreMeaningExample10Known badA...

Malware Analysis – evasion – 6018ee32726b6359a33b58aafc6102db

December 28, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 6018ee32726b6359a33b58aafc6102dbSHA1: 7c3a2b34f91af59f39cc8301852434c583a85379ANALYSIS DATE: 2022-12-27T21:57:35ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – ransomware – ac92e8ecd550b8078e7482534a3c1fb9

December 28, 2022

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: ac92e8ecd550b8078e7482534a3c1fb9SHA1: dd376d8bdeb08599192be67098824c874c260e2eANALYSIS DATE: 2022-12-27T21:54:22ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Cobalt Stike Beacon Detected – 185[.]216[.]71[.]178:8011

December 28, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 35[.]79[.]14[.]10:443

December 28, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 185[.]225[.]73[.]244:4433

December 28, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 8[.]134[.]96[.]195:443

December 28, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 43[.]128[.]72[.]129:80

December 28, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – evasion – b09be4c99c439a41bbc2b1a71169f695

December 28, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: b09be4c99c439a41bbc2b1a71169f695SHA1: 73143ca8bdcdc2dd1f5f2c04f1b7727684953afeANALYSIS DATE: 2022-12-27T23:34:03ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – evasion – 50448dd991e3a795303903da1a313e97

December 28, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 50448dd991e3a795303903da1a313e97SHA1: 8bc29df5fef20df7d8ada903aa6a8efba03d7c9eANALYSIS DATE: 2022-12-27T22:34:03ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – djvu – 8cd13cde3b9cad160fe35cd3f90450b6

December 28, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 8cd13cde3b9cad160fe35cd3f90450b6SHA1: 295ef7114c70dc757b3e77a3528ca0ce76216720ANALYSIS DATE: 2022-12-27T22:19:38ZTTPS: T1005, T1081, T1012, T1082, T1053, T1060,...

Malware Analysis – evasion – a4824e4321a0510726acc06230b22078

December 28, 2022

Score: 6 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: a4824e4321a0510726acc06230b22078SHA1: 3e5077ccb1ce88fcb496b82e15318382191a9747ANALYSIS DATE: 2022-12-27T22:12:02ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

OSINT

Malware Analysis – djvu – 614fc2099e6a6f27944ece6715fd46d9

Malware Analysis – discovery – f62c3007eccf750d07e911fd219c2b1c

Malware Analysis – discovery – 4234902e03d0de35cfdf2e325804a4b0

Malware Analysis – – cd183f486dd18961805e9f4badecce69

Royal Ransomware Victim: www[.]buildersmutual[.]com

Cobalt Stike Beacon Detected – 192[.]3[.]231[.]208:8443

Malware Analysis – evasion – 4b42f986dac108ed8b7751a17f402c12

Malware Analysis – discovery – 0fb21645525fb3c81b329eb851f2764e

Cobalt Stike Beacon Detected – 45[.]66[.]159[.]41:4445

Cobalt Stike Beacon Detected – 5[.]188[.]86[.]196:80

Malware Analysis – evasion – fadd46a249a193e6611108d2b56332d4

Cobalt Stike Beacon Detected – 119[.]23[.]61[.]52:8090

Malware Analysis – djvu – f509a9c8b550834134c1dbcdd8a19850

Malware Analysis – evasion – 6018ee32726b6359a33b58aafc6102db

Malware Analysis – ransomware – ac92e8ecd550b8078e7482534a3c1fb9

Cobalt Stike Beacon Detected – 185[.]216[.]71[.]178:8011

Cobalt Stike Beacon Detected – 35[.]79[.]14[.]10:443

Cobalt Stike Beacon Detected – 185[.]225[.]73[.]244:4433

Cobalt Stike Beacon Detected – 8[.]134[.]96[.]195:443

Cobalt Stike Beacon Detected – 43[.]128[.]72[.]129:80

Malware Analysis – evasion – b09be4c99c439a41bbc2b1a71169f695

Malware Analysis – evasion – 50448dd991e3a795303903da1a313e97

Malware Analysis – djvu – 8cd13cde3b9cad160fe35cd3f90450b6

Malware Analysis – evasion – a4824e4321a0510726acc06230b22078

CVE Alert: CVE-2025-5815

CVE Alert: CVE-2024-38822

CVE Alert: CVE-2025-5938

CVE Alert: CVE-2025-5282

CVE Alert: CVE-2025-22236

You may have missed