OSINT

Malware Analysis – djvu – e2bea73993c9fa4a45dea11c7decd890

February 21, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: e2bea73993c9fa4a45dea11c7decd890SHA1: c22c715f915d04362567f28b6c08d843937a10edANALYSIS DATE: 2023-02-21T11:05:40ZTTPS: T1053, T1060, T1112, T1082,...

Malware Analysis – smokeloader – 00f4a48364a6b7dda4bf98e3847fd94c

February 21, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 00f4a48364a6b7dda4bf98e3847fd94cSHA1: f5287134ebc11785912f8c44a3c709233a8f7facANALYSIS DATE: 2023-02-21T11:16:05ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Cobalt Stike Beacon Detected – 47[.]97[.]166[.]155:8081

February 21, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 108[.]165[.]178[.]43:80

February 21, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 123[.]60[.]178[.]169:80

February 21, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 23[.]227[.]196[.]174:443

February 21, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – smokeloader – 4e1d3b852081588e65fa84fa25c24de3

February 21, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 4e1d3b852081588e65fa84fa25c24de3SHA1: 58b384db9659fc8f6aefb70a288addccc27da330ANALYSIS DATE: 2023-02-21T11:36:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – – 2075566e7855679d66705741dabe82b4

February 21, 2023

Score: 1 MALWARE FAMILY: TAGS:MD5: 2075566e7855679d66705741dabe82b4SHA1: 136443e2746558b403ae6fc9d9b40bfa92b23420ANALYSIS DATE: 2023-02-21T11:34:42ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – smokeloader – 46be31fc9c8e72c15148145e04694436

February 21, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 46be31fc9c8e72c15148145e04694436SHA1: a820d2e760fb9b5983ec4d40883be9daed9d9fbeANALYSIS DATE: 2023-02-21T11:21:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – persistence – eb5b75b1fad5aa53d127788b17d3b275

February 21, 2023

Score: 8 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: eb5b75b1fad5aa53d127788b17d3b275SHA1: cb59283379a2fc7e63faa713c637dd3e7dfc80fbANALYSIS DATE: 2023-02-21T11:44:58ZTTPS: T1060, T1112, T1005, T1081 ScoreMeaningExample10Known badA malware family...

Cobalt Stike Beacon Detected – 45[.]227[.]255[.]225:443

February 21, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 195[.]123[.]241[.]169:80

February 21, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 1[.]13[.]82[.]101:443

February 21, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 54[.]237[.]85[.]77:80

February 21, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – xorist – 55b1eeeb199b4210063c1bb7a77abb25

February 21, 2023

Score: 10 MALWARE FAMILY: xoristTAGS:family:xorist, persistence, ransomware, spyware, stealer, upxMD5: 55b1eeeb199b4210063c1bb7a77abb25SHA1: 35f1491934e585fdf2df1a8276d8aa303c4594bdANALYSIS DATE: 2023-02-21T11:48:30ZTTPS: T1005, T1081, T1060, T1112 ScoreMeaningExample10Known badA...

Malware Analysis – xorist – 1887e84a16365a8de7522804b86dac25

February 21, 2023

Score: 10 MALWARE FAMILY: xoristTAGS:family:xorist, persistence, ransomware, spyware, stealer, upxMD5: 1887e84a16365a8de7522804b86dac25SHA1: f2f6edd89efa30cf81ce77e7b5b6787ef5401824ANALYSIS DATE: 2023-02-21T11:47:28ZTTPS: T1060, T1112, T1005, T1081 ScoreMeaningExample10Known badA...

Malware Analysis – xorist – 80d330fd5fe1eb4229a0c0505cbad070

February 21, 2023

Score: 10 MALWARE FAMILY: xoristTAGS:family:xorist, persistence, ransomware, spyware, stealer, upxMD5: 80d330fd5fe1eb4229a0c0505cbad070SHA1: 872a0059726d7354d0197ba209733e195b16623bANALYSIS DATE: 2023-02-21T11:53:20ZTTPS: T1060, T1112, T1005, T1081 ScoreMeaningExample10Known badA...

Malware Analysis – persistence – 8a17c0c50660056bce6a0292d302ebbe

February 21, 2023

Score: 8 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 8a17c0c50660056bce6a0292d302ebbeSHA1: 57a42db01fd1ad220012f3bcb824181b1b275ce6ANALYSIS DATE: 2023-02-21T11:53:18ZTTPS: T1060, T1112, T1005, T1081 ScoreMeaningExample10Known badA malware family...

Malware Analysis – persistence – ad69026f0cf984eaef62389e9b8ab266

February 21, 2023

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: ad69026f0cf984eaef62389e9b8ab266SHA1: 29d3d01ce6827de4298c7bea23acd2b74053991dANALYSIS DATE: 2023-02-21T11:53:28ZTTPS: T1005, T1081, T1060, T1112 ScoreMeaningExample10Known badA malware family...

Malware Analysis – persistence – 13973e33f8be47f2d8fdc3f492ae2a3d

February 21, 2023

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 13973e33f8be47f2d8fdc3f492ae2a3dSHA1: 08415d3285d4a535d2b604c2831d5f181ec402c5ANALYSIS DATE: 2023-02-21T11:53:27ZTTPS: T1005, T1081, T1060, T1112 ScoreMeaningExample10Known badA malware family...

Malware Analysis – xorist – cb255677750b445152be5798a1382e38

February 21, 2023

Score: 10 MALWARE FAMILY: xoristTAGS:family:xorist, persistence, ransomware, spyware, stealer, upxMD5: cb255677750b445152be5798a1382e38SHA1: 498f445a465d22ab2c3cee7cdd36487068135569ANALYSIS DATE: 2023-02-21T11:53:25ZTTPS: T1060, T1112, T1012, T1005, T1081 ScoreMeaningExample10Known...

Malware Analysis – xorist – 0da42b36896f93a1a517f69c7fc19773

February 21, 2023

Score: 10 MALWARE FAMILY: xoristTAGS:family:xorist, persistence, ransomware, spyware, stealer, upxMD5: 0da42b36896f93a1a517f69c7fc19773SHA1: 2730de840fec2cb457db0329bb5d53794c48db6eANALYSIS DATE: 2023-02-21T11:53:23ZTTPS: T1005, T1081, T1060, T1112, T1091 ScoreMeaningExample10Known...

Malware Analysis – persistence – 08daf2314b45178ae2f161597f271958

February 21, 2023

Score: 8 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 08daf2314b45178ae2f161597f271958SHA1: 5b762a27cda5e435b7e2c7de7734eef8a744c226ANALYSIS DATE: 2023-02-21T11:53:37ZTTPS: T1005, T1081, T1060, T1112 ScoreMeaningExample10Known badA malware family...

Malware Analysis – neshta – 7c68b6a3494c0f2d1197d8bb5d787494

February 21, 2023

Score: 10 MALWARE FAMILY: neshtaTAGS:family:neshta, family:xorist, persistence, ransomware, spyware, stealer, upxMD5: 7c68b6a3494c0f2d1197d8bb5d787494SHA1: 15292934b45b68f367e3a868fb71a7fa2d8a77b9ANALYSIS DATE: 2023-02-21T11:53:29ZTTPS: T1112, T1042, T1005, T1081, T1082,...

OSINT

Malware Analysis – djvu – e2bea73993c9fa4a45dea11c7decd890

Malware Analysis – smokeloader – 00f4a48364a6b7dda4bf98e3847fd94c

Cobalt Stike Beacon Detected – 47[.]97[.]166[.]155:8081

Cobalt Stike Beacon Detected – 108[.]165[.]178[.]43:80

Cobalt Stike Beacon Detected – 123[.]60[.]178[.]169:80

Cobalt Stike Beacon Detected – 23[.]227[.]196[.]174:443

Malware Analysis – smokeloader – 4e1d3b852081588e65fa84fa25c24de3

Malware Analysis – – 2075566e7855679d66705741dabe82b4

Malware Analysis – smokeloader – 46be31fc9c8e72c15148145e04694436

Malware Analysis – persistence – eb5b75b1fad5aa53d127788b17d3b275

Cobalt Stike Beacon Detected – 45[.]227[.]255[.]225:443

Cobalt Stike Beacon Detected – 195[.]123[.]241[.]169:80

Cobalt Stike Beacon Detected – 1[.]13[.]82[.]101:443

Cobalt Stike Beacon Detected – 54[.]237[.]85[.]77:80

Malware Analysis – xorist – 55b1eeeb199b4210063c1bb7a77abb25

Malware Analysis – xorist – 1887e84a16365a8de7522804b86dac25

Malware Analysis – xorist – 80d330fd5fe1eb4229a0c0505cbad070

Malware Analysis – persistence – 8a17c0c50660056bce6a0292d302ebbe

Malware Analysis – persistence – ad69026f0cf984eaef62389e9b8ab266

Malware Analysis – persistence – 13973e33f8be47f2d8fdc3f492ae2a3d

Malware Analysis – xorist – cb255677750b445152be5798a1382e38

Malware Analysis – xorist – 0da42b36896f93a1a517f69c7fc19773

Malware Analysis – persistence – 08daf2314b45178ae2f161597f271958

Malware Analysis – neshta – 7c68b6a3494c0f2d1197d8bb5d787494

CVE Alert: CVE-2025-9060

CVE Alert: CVE-2025-55285

CVE Alert: CVE-2025-8996

CVE Alert: CVE-2025-8995

CVE Alert: CVE-2025-36088

You may have missed