OSINT

Malware Analysis – ransomware – 0ca54a12dfeb248b5c0c2400ec288266

December 19, 2022

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 0ca54a12dfeb248b5c0c2400ec288266SHA1: 9ef4d6cdc12fd7451dee17088de7adc85ffcc7caANALYSIS DATE: 2022-12-19T16:52:04ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – 6512331eb3bda65b6ae1205d0633a1e1

December 19, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 6512331eb3bda65b6ae1205d0633a1e1SHA1: 5ffe12c70577d58db50393b83599c3227c877282ANALYSIS DATE: 2022-12-19T17:05:50ZTTPS: T1005, T1081, T1222, T1082, T1012, T1053,...

Malware Analysis – evasion – fbb796cc4209793257bc08943e9bfa29

December 19, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomwareMD5: fbb796cc4209793257bc08943e9bfa29SHA1: 5200d89104d66cab7ee6418e1dc5eccc13bc5193ANALYSIS DATE: 2022-12-19T17:46:03ZTTPS: T1082, T1491, T1112, T1004, T1070, T1060, T1012, T1120, T1490...

Malware Analysis – djvu – 9228f870c82e0b331680b9fe90486722

December 19, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 9228f870c82e0b331680b9fe90486722SHA1: f91f48f62bff5b8291589ccc150c7e8339daf66eANALYSIS DATE: 2022-12-19T17:50:17ZTTPS: T1060, T1112, T1082, T1005, T1081, T1012,...

Malware Analysis – djvu – 4d0d3ce86f2f7edc9cf08d3393e516e3

December 19, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: 4d0d3ce86f2f7edc9cf08d3393e516e3SHA1: c1dcb2c412f0512adcd8e287ca332435e0672818ANALYSIS DATE: 2022-12-19T17:30:57ZTTPS: T1222, T1082, T1053, T1130, T1112, T1060 ScoreMeaningExample10Known badA...

Malware Analysis – persistence – e27b637abe523503b19e6b57b95489ea

December 19, 2022

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: e27b637abe523503b19e6b57b95489eaSHA1: 875c3af49522b74045c7ac5cc7f07308e6091b02ANALYSIS DATE: 2022-12-19T17:46:04ZTTPS: T1060, T1112, T1082, T1012, T1120 ScoreMeaningExample10Known badA malware family was...

LockBit 3.0 Ransomware Victim: senateshj[.]com

December 19, 2022

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

LockBit 3.0 Ransomware Victim: mercuryit[.]co[.]nz

December 19, 2022

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

LockBit 3.0 Ransomware Victim: polyflor[.]co[.]nz

December 19, 2022

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

LockBit 3.0 Ransomware Victim: Monte Cristalina S[.]A[.]

December 19, 2022

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

LockBit 3.0 Ransomware Victim: businesscentral[.]org[.]nz

December 19, 2022

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

LockBit 3.0 Ransomware Victim: rgvfirm[.]com

December 19, 2022

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

LockBit 3.0 Ransomware Victim: stmc[.]edu[.]hk

December 19, 2022

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

LockBit 3.0 Ransomware Victim: mayflowerdentalgroup[.]com

December 19, 2022

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

LockBit 3.0 Ransomware Victim: womgroup[.]com

December 19, 2022

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

LockBit 3.0 Ransomware Victim: jka[.]co[.]uk

December 19, 2022

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

LockBit 3.0 Ransomware Victim: agriobtentions[.]com

December 19, 2022

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Experts spotted a variant of the Agenda Ransomware written in Rust

December 19, 2022

Researchers spotted a new variant of the Agenda ransomware which is written in the cross-platform programming language Rust. Trend Micro...

LockBit 3.0 Ransomware Victim: accuro[.]co[.]nz

December 19, 2022

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

LockBit 3.0 Ransomware Victim: catalyst-group[.]co[.]nz

December 19, 2022

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

US Gov warns of BEC attacks to hijack shipments of food products

December 19, 2022

US government is warning of business email compromise (BEC) attacks aimed at hijacking shipments of food products and ingredients. The...

Shennina – Automating Host Exploitation With AI

December 19, 2022

Shennina is an automated host exploitation framework. The mission of the project is to fully automate the scanning, vulnerability scanning/analysis,...

Malware Analysis – smokeloader – f2c597e9fa52dd47f91af87220519dac

December 19, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: f2c597e9fa52dd47f91af87220519dacSHA1: ac1f095102f466d2672a4c3f71ab4f5479d639d5ANALYSIS DATE: 2022-12-19T09:20:06ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – chaos – b89623caba31b7994735f4f5bf437fcd

December 19, 2022

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, evasion, persistence, ransomware, spyware, stealerMD5: b89623caba31b7994735f4f5bf437fcdSHA1: 12687458b19ec21ba567ac2bc974434a55855b64ANALYSIS DATE: 2022-12-19T09:27:10ZTTPS: T1490, T1059, T1107, T1005, T1081, T1060,...

OSINT

Malware Analysis – ransomware – 0ca54a12dfeb248b5c0c2400ec288266

Malware Analysis – djvu – 6512331eb3bda65b6ae1205d0633a1e1

Malware Analysis – evasion – fbb796cc4209793257bc08943e9bfa29

Malware Analysis – djvu – 9228f870c82e0b331680b9fe90486722

Malware Analysis – djvu – 4d0d3ce86f2f7edc9cf08d3393e516e3

Malware Analysis – persistence – e27b637abe523503b19e6b57b95489ea

LockBit 3.0 Ransomware Victim: senateshj[.]com

LockBit 3.0 Ransomware Victim: mercuryit[.]co[.]nz

LockBit 3.0 Ransomware Victim: polyflor[.]co[.]nz

LockBit 3.0 Ransomware Victim: Monte Cristalina S[.]A[.]

LockBit 3.0 Ransomware Victim: businesscentral[.]org[.]nz

LockBit 3.0 Ransomware Victim: rgvfirm[.]com

LockBit 3.0 Ransomware Victim: stmc[.]edu[.]hk

LockBit 3.0 Ransomware Victim: mayflowerdentalgroup[.]com

LockBit 3.0 Ransomware Victim: womgroup[.]com

LockBit 3.0 Ransomware Victim: jka[.]co[.]uk

LockBit 3.0 Ransomware Victim: agriobtentions[.]com

Experts spotted a variant of the Agenda Ransomware written in Rust

LockBit 3.0 Ransomware Victim: accuro[.]co[.]nz

LockBit 3.0 Ransomware Victim: catalyst-group[.]co[.]nz

US Gov warns of BEC attacks to hijack shipments of food products

Shennina – Automating Host Exploitation With AI

Malware Analysis – smokeloader – f2c597e9fa52dd47f91af87220519dac

Malware Analysis – chaos – b89623caba31b7994735f4f5bf437fcd

CVE Alert: CVE-2025-6702

CVE Alert: CVE-2025-6700

CVE Alert: CVE-2025-6699

CVE Alert: CVE-2025-6701

CVE Alert: CVE-2025-52477

You may have missed