OSINT

Malware Analysis – evasion – 88c258e7f54080593bd257826ccd7d27

December 9, 2022

Score: 5 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 88c258e7f54080593bd257826ccd7d27SHA1: 7147e0ef1e081e8d4eb9eb928375d00b31ad9906ANALYSIS DATE: 2022-12-05T04:23:22ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – ransomware – 8263f3013b3913a2c3292aedb3c4baa9

December 9, 2022

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 8263f3013b3913a2c3292aedb3c4baa9SHA1: a25a808d2f536fdd769514eb310dd44ef26d7ae8ANALYSIS DATE: 2022-12-05T04:23:37ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – 842d42bb052a77759c8f55d46021b2e0

December 9, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 842d42bb052a77759c8f55d46021b2e0SHA1: 497403d1ba51ce198a46221395daf240c206bb36ANALYSIS DATE: 2022-12-09T04:53:11ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – ransomware – 11c17c954ac297bce8262d12dc3798ed

December 9, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 11c17c954ac297bce8262d12dc3798edSHA1: 5931fe6c12225dfc95469f705fd5d95052ffa44cANALYSIS DATE: 2022-12-09T05:32:04ZTTPS: T1130, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – djvu – 959911ee1e7389ad2370e5ae284354c4

December 9, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 959911ee1e7389ad2370e5ae284354c4SHA1: 65ad3123e945c23db42b5a3d2dac121ce15dedf4ANALYSIS DATE: 2022-12-09T03:20:14ZTTPS: T1060, T1112, T1130, T1012,...

Malware Analysis – globeimposter – 32bd793c65117c065f48115340d6d899

December 9, 2022

Score: 10 MALWARE FAMILY: globeimposterTAGS:family:globeimposter, persistence, ransomwareMD5: 32bd793c65117c065f48115340d6d899SHA1: be86049db96ed942e32f394c5ca55b1ce16fec77ANALYSIS DATE: 2022-12-09T05:08:24ZTTPS: T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – djvu – 6bcb11a9c59cb41aa9b01303313fbef2

December 9, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: 6bcb11a9c59cb41aa9b01303313fbef2SHA1: f843210f068149c8897c16d1bee001a0d72e4c9aANALYSIS DATE: 2022-12-09T05:36:43ZTTPS: T1053, T1060, T1112, T1222, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – venus – 8691dae21568faaeda49bcd640e1ad23

December 9, 2022

Score: 10 MALWARE FAMILY: venusTAGS:family:venus, persistence, ransomwareMD5: 8691dae21568faaeda49bcd640e1ad23SHA1: 524b589ef403ff21cf040ef33c21b1d6d8235febANALYSIS DATE: 2022-12-09T05:32:04ZTTPS: T1060, T1112, T1082, T1018, T1012, T1120 ScoreMeaningExample10Known badA malware...

Malware Analysis – djvu – 3a4f5417b5666b7e633850bf85345b89

December 9, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 3a4f5417b5666b7e633850bf85345b89SHA1: b446a25db27f090a4c0587a4a5aa297383765830ANALYSIS DATE: 2022-12-09T05:41:35ZTTPS:...

Malware Analysis – neshta – 3ac0d935228460fdc38bdab692d71b0c

December 9, 2022

Score: 10 MALWARE FAMILY: neshtaTAGS:family:neshta, family:venus, persistence, ransomware, spyware, stealerMD5: 3ac0d935228460fdc38bdab692d71b0cSHA1: d08f753af5b5d9be3352495189be6fd4914ad8e1ANALYSIS DATE: 2022-12-09T05:38:10ZTTPS: T1005, T1081, T1112, T1042, T1018, T1012,...

OSINT

Malware Analysis – evasion – 88c258e7f54080593bd257826ccd7d27

Malware Analysis – ransomware – 8263f3013b3913a2c3292aedb3c4baa9

Malware Analysis – ransomware – 842d42bb052a77759c8f55d46021b2e0

Malware Analysis – ransomware – 11c17c954ac297bce8262d12dc3798ed

Malware Analysis – djvu – 959911ee1e7389ad2370e5ae284354c4

Malware Analysis – globeimposter – 32bd793c65117c065f48115340d6d899

Malware Analysis – djvu – 6bcb11a9c59cb41aa9b01303313fbef2

Malware Analysis – venus – 8691dae21568faaeda49bcd640e1ad23

Malware Analysis – djvu – 3a4f5417b5666b7e633850bf85345b89

Malware Analysis – neshta – 3ac0d935228460fdc38bdab692d71b0c

Cobalt Stike Beacon Detected – 170[.]64[.]148[.]19:443

Cobalt Stike Beacon Detected – 194[.]135[.]24[.]245:443

Cobalt Stike Beacon Detected – 120[.]24[.]183[.]94:6666

Cobalt Stike Beacon Detected – 120[.]78[.]82[.]210:80

Cobalt Stike Beacon Detected – 179[.]43[.]142[.]47:10443

Cobalt Stike Beacon Detected – 5[.]199[.]168[.]212:8443

Cobalt Stike Beacon Detected – 35[.]220[.]227[.]124:81

Cobalt Stike Beacon Detected – 104[.]168[.]11[.]90:8443

Cobalt Stike Beacon Detected – 35[.]175[.]108[.]248:443

Cobalt Stike Beacon Detected – 47[.]93[.]212[.]101:9999

Cobalt Stike Beacon Detected – 3[.]70[.]239[.]217:443

Cobalt Stike Beacon Detected – 84[.]32[.]188[.]156:443

Cyber Insurance Policy Underwriting Explained

Zombinder APK binding service used in multiple malware attacks

CVE Alert: CVE-2025-5815

CVE Alert: CVE-2024-38822

CVE Alert: CVE-2025-5938

CVE Alert: CVE-2025-5282

CVE Alert: CVE-2025-22236

You may have missed