OSINT

Malware Analysis – ransomware – 2706ddf9c7abaa877389ae566acf1fe8

March 7, 2023

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 2706ddf9c7abaa877389ae566acf1fe8SHA1: 7f3fb8d2a67f73f26e0b57fa6d5bed9c461c2b8fANALYSIS DATE: 2023-03-07T04:50:20ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – babadeda – aaa058858261d7c0e73fa1b8264a9a3d

March 7, 2023

Score: 10 MALWARE FAMILY: babadedaTAGS:family:babadeda, crypter, evasion, loader, trojanMD5: aaa058858261d7c0e73fa1b8264a9a3dSHA1: 1233af8c8377567b2b8ebf7642f0036c9797596bANALYSIS DATE: 2023-03-07T04:48:05ZTTPS: T1082, T1012 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – lockbit – a7637dfb6b9408fe020d9333d0ade6dc

March 7, 2023

Score: 10 MALWARE FAMILY: lockbitTAGS:family:lockbit, evasion, persistence, ransomwareMD5: a7637dfb6b9408fe020d9333d0ade6dcSHA1: 930c34743ab12c80512723db0aa7b8b4762fcc84ANALYSIS DATE: 2023-03-07T05:03:03ZTTPS: T1490, T1059, T1107, T1491, T1112, T1018, T1082, T1012,...

Malware Analysis – djvu – 8a5c81cb9f1cec2468a596a6cf81cd01

March 7, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: 8a5c81cb9f1cec2468a596a6cf81cd01SHA1: 912dee147a557b5e3be75f53e608c02d66e2498cANALYSIS DATE: 2023-03-07T05:26:07ZTTPS: T1222, T1060, T1112, T1082, T1012, T1053 ScoreMeaningExample10Known badA...

Malware Analysis – – 7c5cba9d017262c75c329d88203499d8

March 7, 2023

Score: 7 MALWARE FAMILY: TAGS:MD5: 7c5cba9d017262c75c329d88203499d8SHA1: 4e2b80cf9d2ec3ba458110456037e53f2b86bacdANALYSIS DATE: 2023-03-07T05:13:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – ransomware – d27a6fca4044aa663fee95587670ad30

March 7, 2023

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: d27a6fca4044aa663fee95587670ad30SHA1: affc479462c7756ee00c4cdf3e12459116223a1bANALYSIS DATE: 2023-03-07T05:08:34ZTTPS: T1005, T1081 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – djvu – e8ed2bad8460aeba1c043cc6dba5965a

March 7, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: e8ed2bad8460aeba1c043cc6dba5965aSHA1: c4f496d9855bc57fbd8a1ae5ca1693750e710e21ANALYSIS DATE: 2023-03-07T05:51:46ZTTPS: T1222, T1082, T1012, T1053, T1060, T1112 ScoreMeaningExample10Known badA...

Malware Analysis – djvu – e80ec3dc9b00399680eb7396815489ba

March 7, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: e80ec3dc9b00399680eb7396815489baSHA1: d6b23f8f2a225a45bfa3089d48116a801419bd96ANALYSIS DATE: 2023-03-07T05:30:09ZTTPS: T1082, T1012, T1053, T1222, T1060, T1112 ScoreMeaningExample10Known badA...

Malware Analysis – djvu – e227030d652d0435eca5602104fff392

March 7, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: e227030d652d0435eca5602104fff392SHA1: ec128acb345e8b29e8c80b3526aa01660c282478ANALYSIS DATE: 2023-03-07T05:33:22ZTTPS: T1060, T1112, T1222, T1082, T1053 ScoreMeaningExample10Known badA malware...

Malware Analysis – bootkit – 0c303ae1347c0395a96f3eb38d26d7ed

March 7, 2023

Score: 8 MALWARE FAMILY: bootkitTAGS:bootkit, evasion, persistence, ransomware, upxMD5: 0c303ae1347c0395a96f3eb38d26d7edSHA1: c8cf473a22fc86ddad00ec286e94422f4b7d5c59ANALYSIS DATE: 2023-03-07T05:58:42ZTTPS: T1112, T1082, T1067, T1491 ScoreMeaningExample10Known badA malware...

Eye4Fraud – 16,000,591 breached accounts

March 7, 2023

HIBP In February 2023, data alleged to have been taken from the fraud protection service Eye4Fraud was listed for sale...

iD Tech – 415,121 breached accounts

March 7, 2023

HIBP In February 2023, the tech camps for kids service iD Tech had almost 1M records posted to a popular...

Core DoppelPaymer ransomware gang members targeted in Europol operation

March 7, 2023

Europol has announced that law enforcement in Germany and Ukraine targeted two individuals believed to be core members of the...

FTC to ban BetterHelp from sharing mental health data with advertisers

March 7, 2023

The Federal Trade Commission (FTC) has proposed to ban the online counseling service BetterHelp from sharing its customers’ sensitive mental...

How to prevent Microsoft OneNote files from infecting Windows with malware

March 7, 2023

The seemingly innocuous Microsoft OneNote file has become a popular file format used by hackers to spread malware and breach...

Sandbox blockchain game breached to send emails linking to malware

March 7, 2023

The Sandbox blockchain game is warnings its community that a security incident caused some users to receive fraudulent emails impersonating...

New malware infects business routers for data theft, surveillance

March 7, 2023

An ongoing hacking campaign called 'Hiatus' targets DrayTek Vigor router models 2960 and 3900 to steal data from victims and...

Proof-of-Concept released for critical Microsoft Word RCE bug

March 7, 2023

A proof-of-concept for CVE-2023-21716, a critical vulnerability in Microsoft Word that allows remote code execution, has been published over the...

Securing cloud workloads with Wazuh – an open source, SIEM and XDR platform

March 7, 2023

Organizations rapidly adopt the cloud as they rely heavily on data and technology to drive their businesses. These organizations utilize...

Old Windows ‘Mock Folders’ UAC bypass used to drop malware

March 7, 2023

A new phishing campaign targets organizations in Eastern European countries with the Remcos RAT malware with aid from an old...

Cobalt Stike Beacon Detected – 119[.]29[.]187[.]225:8084

March 7, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 121[.]40[.]133[.]193:8080

March 7, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – ransomware – fe10cd5cf0833d15d53c84b956561bdc

March 7, 2023

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: fe10cd5cf0833d15d53c84b956561bdcSHA1: 74221c41dbf8a41bea500be933fec7daf834517fANALYSIS DATE: 2023-03-06T21:14:49ZTTPS: T1158, T1082, T1491, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Cobalt Stike Beacon Detected – 120[.]79[.]64[.]164:9999

March 7, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

OSINT

Malware Analysis – ransomware – 2706ddf9c7abaa877389ae566acf1fe8

Malware Analysis – babadeda – aaa058858261d7c0e73fa1b8264a9a3d

Malware Analysis – lockbit – a7637dfb6b9408fe020d9333d0ade6dc

Malware Analysis – djvu – 8a5c81cb9f1cec2468a596a6cf81cd01

Malware Analysis – – 7c5cba9d017262c75c329d88203499d8

Malware Analysis – ransomware – d27a6fca4044aa663fee95587670ad30

Malware Analysis – djvu – e8ed2bad8460aeba1c043cc6dba5965a

Malware Analysis – djvu – e80ec3dc9b00399680eb7396815489ba

Malware Analysis – djvu – e227030d652d0435eca5602104fff392

Malware Analysis – bootkit – 0c303ae1347c0395a96f3eb38d26d7ed

Eye4Fraud – 16,000,591 breached accounts

iD Tech – 415,121 breached accounts

Core DoppelPaymer ransomware gang members targeted in Europol operation

FTC to ban BetterHelp from sharing mental health data with advertisers

How to prevent Microsoft OneNote files from infecting Windows with malware

Sandbox blockchain game breached to send emails linking to malware

New malware infects business routers for data theft, surveillance

Proof-of-Concept released for critical Microsoft Word RCE bug

Securing cloud workloads with Wazuh – an open source, SIEM and XDR platform

Old Windows ‘Mock Folders’ UAC bypass used to drop malware

Cobalt Stike Beacon Detected – 119[.]29[.]187[.]225:8084

Cobalt Stike Beacon Detected – 121[.]40[.]133[.]193:8080

Malware Analysis – ransomware – fe10cd5cf0833d15d53c84b956561bdc

Cobalt Stike Beacon Detected – 120[.]79[.]64[.]164:9999

CVE Alert: CVE-2025-2988

CVE Alert: CVE-2025-9153

CVE Alert: CVE-2025-55733

CVE Alert: CVE-2025-55306

CVE Alert: CVE-2025-9154

You may have missed