OSINT

Malware Analysis – bootkit – 2dbb19618eb730077e80a26464602444

January 3, 2023

Score: 10 MALWARE FAMILY: bootkitTAGS:bootkit, discovery, evasion, exploit, persistence, trojanMD5: 2dbb19618eb730077e80a26464602444SHA1: f3b9459d2b8a37564b7c3c362eaad80eb52ce51cANALYSIS DATE: 2023-01-03T05:28:27ZTTPS: T1067, T1222, T1082, T1088, T1089, T1112...

Malware Analysis – djvu – c04760e74be54ca3cadb73334a12487b

January 3, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, stealerMD5: c04760e74be54ca3cadb73334a12487bSHA1: 36b66864b9302dcadca19d90d934654f579ff49bANALYSIS DATE: 2023-01-03T05:20:54ZTTPS: T1130, T1112, T1060, T1222, T1082...

OSINT

Malware Analysis – bootkit – 2dbb19618eb730077e80a26464602444

Malware Analysis – djvu – c04760e74be54ca3cadb73334a12487b

Cobalt Stike Beacon Detected – 139[.]180[.]208[.]67:443

Cobalt Stike Beacon Detected – 182[.]254[.]240[.]188:60001

Cobalt Stike Beacon Detected – 47[.]107[.]122[.]86:443

Cobalt Stike Beacon Detected – 93[.]95[.]229[.]225:443

Cobalt Stike Beacon Detected – 106[.]75[.]247[.]178:8443

Cobalt Stike Beacon Detected – 159[.]75[.]1[.]146:10001

Cobalt Stike Beacon Detected – 91[.]215[.]85[.]176:443

Cobalt Stike Beacon Detected – 91[.]223[.]236[.]115:443

Cobalt Stike Beacon Detected – 185[.]106[.]120[.]30:443

Cobalt Stike Beacon Detected – 195[.]178[.]120[.]47:8443

Cobalt Stike Beacon Detected – 62[.]204[.]41[.]237:80

Cobalt Stike Beacon Detected – 152[.]136[.]153[.]12:80

Cobalt Stike Beacon Detected – 101[.]43[.]109[.]197:80

Vice Society Ransomware Victim: Kujalleq Municipality

Vice Society Ransomware Victim: YMCA of Metropolitan Washington

Vice Society Ransomware Victim: Rooks Heath School

Vice Society Ransomware Victim: The Bishop of Hereford’s Bluecoat School

Vice Society Ransomware Victim: Jammal Trust Bank

Vice Society Ransomware Victim: Hartnell College

Vice Society Ransomware Victim: Unidad Medica Angloamericana

Vice Society Ransomware Victim: CR&R Environmental Services

Vice Society Ransomware Victim: Baysgarth School

CVE Alert: CVE-2025-5937

CVE Alert: CVE-2025-1991

CVE Alert: CVE-2025-6817

CVE Alert: CVE-2023-28908

CVE Alert: CVE-2023-28902

You may have missed