OSINT

Malware Analysis – djvu – 7d1c36a7f705e7ad6facd4e9621ee8b5

December 24, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 7d1c36a7f705e7ad6facd4e9621ee8b5SHA1: 848673dc5523002d241ee660ad3e592f4f52c652ANALYSIS DATE: 2022-12-24T09:13:30ZTTPS: T1012, T1082, T1005, T1081, T1060, T1112,...

Malware Analysis – evasion – 6e07363bcb0d53ab35788ca6355d4c9a

December 24, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealer, trojanMD5: 6e07363bcb0d53ab35788ca6355d4c9aSHA1: ff83f33d03f91f14896b6075f4c868b46ac192feANALYSIS DATE: 2022-12-24T09:28:23ZTTPS: T1031, T1053, T1107, T1490, T1112, T1088,...

Malware Analysis – bootkit – 3701dc535fb395d6a1fb557a3aeec5e9

December 24, 2022

Score: 10 MALWARE FAMILY: bootkitTAGS:bootkit, discovery, evasion, persistence, ransomware, spyware, stealer, trojanMD5: 3701dc535fb395d6a1fb557a3aeec5e9SHA1: ef517659229ddc6ecfc02481c3953ac9322dae35ANALYSIS DATE: 2022-12-24T09:47:02ZTTPS: T1060, T1112, T1012, T1082,...

Malware Analysis – smokeloader – 53d8cc9b0d19488282cd39f464dddfc5

December 24, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 53d8cc9b0d19488282cd39f464dddfc5SHA1: 29faa33dc825038db12e1a883bb0f1fd3a946571ANALYSIS DATE: 2022-12-24T10:02:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 6febc6df81ab3b8f32c13a2dbe232676

December 24, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 6febc6df81ab3b8f32c13a2dbe232676SHA1: 50fec1c2b794a2663bfe0c1d189391e56c4061b5ANALYSIS DATE: 2022-12-24T10:33:08ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 4a9bff8242e34c49b4ac9380686ff219

December 24, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 4a9bff8242e34c49b4ac9380686ff219SHA1: 7d65d6a5ca3ef29cb4052a515b981e9e59f483fbANALYSIS DATE: 2022-12-24T10:27:18ZTTPS: T1053, T1005, T1081, T1012, T1082, T1222,...

Cobalt Stike Beacon Detected – 180[.]76[.]115[.]62:8989

December 24, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – ae54ef9519196ced8a45354ab938551f

December 24, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: ae54ef9519196ced8a45354ab938551fSHA1: 27d50e391bb3da764dd365fe53fbf538179b4d5cANALYSIS DATE: 2022-12-24T10:10:06ZTTPS: T1012, T1222, T1082, T1053, T1005, T1081,...

Cobalt Stike Beacon Detected – 43[.]139[.]225[.]176:443

December 24, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 47[.]114[.]151[.]215:8088

December 24, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – 74315c762fbc50c9e128e4736af6451e

December 24, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: 74315c762fbc50c9e128e4736af6451eSHA1: 9676acee4631cba43064fcbcc07d2e5e145ec9a5ANALYSIS DATE: 2022-12-24T11:15:19ZTTPS: T1053, T1060, T1112, T1222, T1082, T1130 ScoreMeaningExample10Known badA...

Malware Analysis – smokeloader – 5265d31c93441df607ce7b0dae3e680e

December 24, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 5265d31c93441df607ce7b0dae3e680eSHA1: 557ca000136c84344aadf189710c22b2dc5e13a0ANALYSIS DATE: 2022-12-24T11:31:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 9babcbfae5216b1f3db8282790438586

December 24, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: 9babcbfae5216b1f3db8282790438586SHA1: e7c8fcc78bdaacaad85cacea73b209897f42f33aANALYSIS DATE: 2022-12-24T11:15:10ZTTPS: T1053, T1130, T1112, T1060, T1222, T1082 ScoreMeaningExample10Known badA...

Malware Analysis – djvu – 9cf5b0996cdf6ba6b34d85abdb85c0f5

December 24, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 9cf5b0996cdf6ba6b34d85abdb85c0f5SHA1: ff3f3db3868f37453335c0aa4fc0df30813769f0ANALYSIS DATE: 2022-12-24T10:41:27ZTTPS: T1222, T1082, T1053, T1012, T1005, T1081,...

Daily Vulnerability Trends: Sat Dec 24 2022

December 24, 2022

Daily Vulnerability Trends (sourced from VulnMon) CVE NAMECVE DescriptionCVE-2022-46169Cacti is an open source platform which provides a robust and extensible...

Cobalt Stike Beacon Detected – 121[.]5[.]150[.]180:8054

December 24, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 179[.]43[.]187[.]247:80

December 24, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 124[.]223[.]181[.]21:8080

December 24, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 35[.]72[.]188[.]81:443

December 24, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 84[.]32[.]128[.]150:443

December 24, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 77[.]73[.]133[.]84:443

December 24, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 218[.]11[.]133[.]33:8806

December 24, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – smokeloader – 4492a6791a3e53bca0c5b050e3d395c1

December 24, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 4492a6791a3e53bca0c5b050e3d395c1SHA1: fda6d847dcef6a872c1ea5a03d4b712eade80597ANALYSIS DATE: 2022-12-23T21:01:06ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – e2e90686080b3a73208ab9bb1f62cb8b

December 24, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: e2e90686080b3a73208ab9bb1f62cb8bSHA1: c6ad315e0d676332960cab1e604baeabeb7c25f1ANALYSIS DATE: 2022-12-23T22:01:05ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

OSINT

Malware Analysis – djvu – 7d1c36a7f705e7ad6facd4e9621ee8b5

Malware Analysis – evasion – 6e07363bcb0d53ab35788ca6355d4c9a

Malware Analysis – bootkit – 3701dc535fb395d6a1fb557a3aeec5e9

Malware Analysis – smokeloader – 53d8cc9b0d19488282cd39f464dddfc5

Malware Analysis – smokeloader – 6febc6df81ab3b8f32c13a2dbe232676

Malware Analysis – djvu – 4a9bff8242e34c49b4ac9380686ff219

Cobalt Stike Beacon Detected – 180[.]76[.]115[.]62:8989

Malware Analysis – djvu – ae54ef9519196ced8a45354ab938551f

Cobalt Stike Beacon Detected – 43[.]139[.]225[.]176:443

Cobalt Stike Beacon Detected – 47[.]114[.]151[.]215:8088

Malware Analysis – djvu – 74315c762fbc50c9e128e4736af6451e

Malware Analysis – smokeloader – 5265d31c93441df607ce7b0dae3e680e

Malware Analysis – djvu – 9babcbfae5216b1f3db8282790438586

Malware Analysis – djvu – 9cf5b0996cdf6ba6b34d85abdb85c0f5

Daily Vulnerability Trends: Sat Dec 24 2022

Cobalt Stike Beacon Detected – 121[.]5[.]150[.]180:8054

Cobalt Stike Beacon Detected – 179[.]43[.]187[.]247:80

Cobalt Stike Beacon Detected – 124[.]223[.]181[.]21:8080

Cobalt Stike Beacon Detected – 35[.]72[.]188[.]81:443

Cobalt Stike Beacon Detected – 84[.]32[.]128[.]150:443

Cobalt Stike Beacon Detected – 77[.]73[.]133[.]84:443

Cobalt Stike Beacon Detected – 218[.]11[.]133[.]33:8806

Malware Analysis – smokeloader – 4492a6791a3e53bca0c5b050e3d395c1

Malware Analysis – smokeloader – e2e90686080b3a73208ab9bb1f62cb8b

CVE Alert: CVE-2025-6772

CVE Alert: CVE-2025-6773

CVE Alert: CVE-2025-6775

CVE Alert: CVE-2025-6774

CVE Alert: CVE-2025-6776

You may have missed