OSINT

Malware Analysis – babuk – fe4843e07dc9b0a11223c5797052d64d

December 7, 2022

Score: 10 MALWARE FAMILY: babukTAGS:family:babuk, ransomwareMD5: fe4843e07dc9b0a11223c5797052d64dSHA1: f3458f864f9c96668900a133d90870ebb7f9e296ANALYSIS DATE: 2022-12-07T10:58:48ZTTPS: T1082, T1107, T1490, T1012, T1120 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – ransomware – 7bd827803187a8a6ca3c0780e7d8c3da

December 7, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 7bd827803187a8a6ca3c0780e7d8c3daSHA1: 8094a512e7d07141fc4713c80b2823a9388198aaANALYSIS DATE: 2022-12-07T11:02:15ZTTPS: T1082, T1107, T1490, T1012, T1120 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – babuk – 1f6ea1848c050a59782b67d4516b03a3

December 7, 2022

Score: 10 MALWARE FAMILY: babukTAGS:family:babuk, ransomwareMD5: 1f6ea1848c050a59782b67d4516b03a3SHA1: 96d57e583a660c1ea47ba653eb3e3223e97269f7ANALYSIS DATE: 2022-12-07T10:27:29ZTTPS: T1082, T1012, T1120, T1107, T1490 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – babuk – f1dd01a9e4b959e569250354d74e0423

December 7, 2022

Score: 10 MALWARE FAMILY: babukTAGS:family:babuk, ransomwareMD5: f1dd01a9e4b959e569250354d74e0423SHA1: 7e2e524fd33261449571f1334868b17ef46e550dANALYSIS DATE: 2022-12-07T11:03:13ZTTPS: T1012, T1082, T1107, T1490, T1120 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – ransomware – cfd31737ccacf6e9a0e2ac18cf3445ac

December 7, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: cfd31737ccacf6e9a0e2ac18cf3445acSHA1: 74c615ca54aaff3c5e6734efef04259290c357baANALYSIS DATE: 2022-12-07T11:02:47ZTTPS: T1005, T1081, T1107, T1490 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – ransomware – 7564bc9a4fa53eb68f6c2d2c701f94e6

December 7, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 7564bc9a4fa53eb68f6c2d2c701f94e6SHA1: edea9c96879f55d7b76b3b00f2215db846626e4dANALYSIS DATE: 2022-12-07T11:02:31ZTTPS: T1082, T1012, T1120, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ransomware – 5ddd2580815e79d108df5152c5e2bbcf

December 7, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 5ddd2580815e79d108df5152c5e2bbcfSHA1: 128722820bed682d650b51edf35ba76dd3377da3ANALYSIS DATE: 2022-12-07T11:02:59ZTTPS: T1082, T1107, T1490, T1012, T1120 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – snatch – f837a294b2fc311996a0a9f17cfac49c

December 7, 2022

Score: 10 MALWARE FAMILY: snatchTAGS:family:snatch, ransomware, spyware, stealerMD5: f837a294b2fc311996a0a9f17cfac49cSHA1: f16df5bc0d0e8a4283dbcc782bc8a7128784f673ANALYSIS DATE: 2022-12-07T11:03:28ZTTPS: T1005, T1081 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – evasion – 7bfcc0977c491a7e94898824064bd1b8

December 7, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 7bfcc0977c491a7e94898824064bd1b8SHA1: 38a9af9fcdd767dd47cc72a156d4b7212717be6eANALYSIS DATE: 2022-12-07T11:04:35ZTTPS: T1012, T1497, T1082, T1107, T1490, T1120 ScoreMeaningExample10Known badA malware family...

Malware Analysis – ransomware – 20eee122c6a5cf8537f5488d8bb3b37e

December 7, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 20eee122c6a5cf8537f5488d8bb3b37eSHA1: 0e0bf8188e7e143a15fcf95771b98502804198cbANALYSIS DATE: 2022-12-07T11:04:15ZTTPS: T1005, T1081, T1107, T1490 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – ransomware – 4b9eb7effc356c12d0f6f49593b0f85c

December 7, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 4b9eb7effc356c12d0f6f49593b0f85cSHA1: f7ffa9d3683b0952aecf8899a8a3137173e25023ANALYSIS DATE: 2022-12-07T11:03:53ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – a62132d1123af4e31d44171ab47046a9

December 7, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: a62132d1123af4e31d44171ab47046a9SHA1: 65344c174a79c30a4075455d106173ea2cefec3eANALYSIS DATE: 2022-12-07T11:13:13ZTTPS: T1060, T1112, T1222, T1082, T1012 ScoreMeaningExample10Known badA malware...

Malware Analysis – djvu – d00508b99c98be2802ac83a02f316c3f

December 7, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: d00508b99c98be2802ac83a02f316c3fSHA1: d574649b203bd71556b11f212816f1b5baf23b0fANALYSIS DATE: 2022-12-07T11:26:06ZTTPS: T1005, T1081, T1012, T1222,...

Malware Analysis – djvu – dd2193abb2f82d60a7c2bf612c7ad6a0

December 7, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: dd2193abb2f82d60a7c2bf612c7ad6a0SHA1: 3e6de2aae3aefd649d267c4ee43f9b0bce0db667ANALYSIS DATE: 2022-12-07T11:26:06ZTTPS: T1060, T1112, T1130, T1222,...

Malware Analysis – blackbasta – 2ec0c42040440cddd1ff99ebe2b7d94f

December 7, 2022

Score: 10 MALWARE FAMILY: blackbastaTAGS:family:blackbasta, ransomwareMD5: 2ec0c42040440cddd1ff99ebe2b7d94fSHA1: bb1f269fc9c136d6caeda579482b2b8548795625ANALYSIS DATE: 2022-12-07T11:50:00ZTTPS: T1107, T1490, T1491, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

OSINT

Malware Analysis – babuk – fe4843e07dc9b0a11223c5797052d64d

Malware Analysis – ransomware – 7bd827803187a8a6ca3c0780e7d8c3da

Malware Analysis – babuk – 1f6ea1848c050a59782b67d4516b03a3

Malware Analysis – babuk – f1dd01a9e4b959e569250354d74e0423

Malware Analysis – ransomware – cfd31737ccacf6e9a0e2ac18cf3445ac

Malware Analysis – ransomware – 7564bc9a4fa53eb68f6c2d2c701f94e6

Malware Analysis – ransomware – 5ddd2580815e79d108df5152c5e2bbcf

Malware Analysis – snatch – f837a294b2fc311996a0a9f17cfac49c

Malware Analysis – evasion – 7bfcc0977c491a7e94898824064bd1b8

Malware Analysis – ransomware – 20eee122c6a5cf8537f5488d8bb3b37e

Malware Analysis – ransomware – 4b9eb7effc356c12d0f6f49593b0f85c

Malware Analysis – djvu – a62132d1123af4e31d44171ab47046a9

Malware Analysis – djvu – d00508b99c98be2802ac83a02f316c3f

Malware Analysis – djvu – dd2193abb2f82d60a7c2bf612c7ad6a0

Malware Analysis – blackbasta – 2ec0c42040440cddd1ff99ebe2b7d94f

Daily Vulnerability Trends: Wed Dec 07 2022

Sophos fixed a critical flaw in its Sophos Firewall version 19.5

Main phishing and scamming trends and techniques

Royal Ransomware Victim: Adams-Friendship Area School District

LockBit 3.0 Ransomware Victim: g4s[.]com

LockBit 3.0 Ransomware Victim: myersontooth[.]com

Cobalt Stike Beacon Detected – 194[.]135[.]24[.]250:443

Cobalt Stike Beacon Detected – 31[.]172[.]83[.]154:80

Cobalt Stike Beacon Detected – 154[.]209[.]74[.]234:443

[QILIN] – Ransomware Victim: CMI

CVE Alert: CVE-2025-4378

CVE Alert: CVE-2025-23260

CVE Alert: CVE-2025-49147

CVE Alert: CVE-2024-56916

You may have missed