OSINT

Malware Analysis – evasion – 727b2d3ec84ce3139998a79342fa324b

May 8, 2023

Score: 6 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 727b2d3ec84ce3139998a79342fa324bSHA1: 503f4998eb0e88388e82dca578c411a2cfe6455aANALYSIS DATE: 2023-05-08T17:00:12ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – amadey – 0e71e6e602e6cfb38ea3567ac1130343

May 8, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, botnet:pub1, botnet:sprg, backdoor, discovery, ransomware, trojanMD5: 0e71e6e602e6cfb38ea3567ac1130343SHA1: 8c50ae1dcfafd674643af4814f7b96ed835ef22aANALYSIS DATE: 2023-05-08T16:02:22ZTTPS: T1012, T1120, T1082,...

Malware Analysis – djvu – bf3a2484532f79b9a300bda711005470

May 8, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:31c7719b5ee962fbde376b75e771360d, discovery, persistence, ransomware, spyware, stealerMD5: bf3a2484532f79b9a300bda711005470SHA1: 29e99330b4d07f80ff48a7d7c2c265262b8f1713ANALYSIS DATE: 2023-05-08T16:08:47ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – ransomware – 9634b28186b502eab4ead6119285f4d7

May 8, 2023

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 9634b28186b502eab4ead6119285f4d7SHA1: 62bcdb03dbd6bf9fc0383582b5108e8b8b0b04a3ANALYSIS DATE: 2023-05-08T17:48:51ZTTPS: T1005, T1081 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – banker – 14f1074238583c9afde262fb31782ac9

May 8, 2023

Score: 8 MALWARE FAMILY: bankerTAGS:banker, evasion, ransomwareMD5: 14f1074238583c9afde262fb31782ac9SHA1: b20c3d6ec14d707ae1da754810d63b8e0b8bbee0ANALYSIS DATE: 2023-05-08T17:45:43ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – dharma – 5c36e305d926e55ef98d392176890cd2

May 8, 2023

Score: 10 MALWARE FAMILY: dharmaTAGS:family:dharma, discovery, evasion, ransomwareMD5: 5c36e305d926e55ef98d392176890cd2SHA1: 64a15cdf89b6c8b85cba355b6944074614d810fdANALYSIS DATE: 2023-05-08T17:48:49ZTTPS: T1490, T1059, T1107, T1082, T1012, T1120, T1070, T1053,...

Malware Analysis – – 21d01fa87dfcaf971ff7b63a1a6fda94

May 8, 2023

Score: 1 MALWARE FAMILY: TAGS:MD5: 21d01fa87dfcaf971ff7b63a1a6fda94SHA1: f3caa9831fc715af4f47cd98803549902dffe30aANALYSIS DATE: 2023-05-08T17:48:48ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ouroboros – bfed6debcd8c3dbf8ea21655247ed3f0

May 8, 2023

Score: 10 MALWARE FAMILY: ouroborosTAGS:family:ouroboros, evasion, ransomwareMD5: bfed6debcd8c3dbf8ea21655247ed3f0SHA1: 2b05bc9c9a14e3f9db8e758b2f5fa060857499bfANALYSIS DATE: 2023-05-08T17:48:54ZTTPS: T1031 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – chaos – deb8f4311fd52319f6168c10b626c808

May 8, 2023

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, evasion, ransomware, spyware, stealerMD5: deb8f4311fd52319f6168c10b626c808SHA1: f4807d71a1048d05815a09b74997f338e26ba9ffANALYSIS DATE: 2023-05-08T17:48:55ZTTPS: T1490, T1059, T1107, T1012, T1491, T1112, T1005,...

Malware Analysis – chaos – 9eb958c38bd3d39c55b009f9a200f42f

May 8, 2023

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, ransomware, spyware, stealerMD5: 9eb958c38bd3d39c55b009f9a200f42fSHA1: b5ab794dd5821d08f7ecd860ba7975a6644dd46dANALYSIS DATE: 2023-05-08T17:48:53ZTTPS: T1491, T1112, T1082, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 9d44fd089264803ad86f41edd56aef4d

May 8, 2023

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 9d44fd089264803ad86f41edd56aef4dSHA1: 936787fa460b642d6d84e4edf0fc92d1751f8b35ANALYSIS DATE: 2023-05-08T17:48:53ZTTPS: T1005, T1081 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Bug Bounty

BugCrowd Bug Bounty Disclosure: – Bypass URL and IP Address Restrictions on analytics.starlink.com – By I4ENI

May 8, 2023

The below information is fully automated and the information is captured from the BugCrowd Disclosure website. The information was correct...

News

SideCopy Using Action RAT and AllaKore RAT to infiltrate Indian Organizations

May 8, 2023

The suspected Pakistan-aligned threat actor known as SideCopy has been observed leveraging themes related to the Indian military research organization...

News

MSI Data Breach: Private Code Signing Keys Leaked on the Dark Web

May 8, 2023

The threat actors behind the ransomware attack on Taiwanese PC maker MSI last month have leaked the company's private code...

Join Our Webinar: Learn How to Defeat Ransomware with Identity-Focused Protection

May 8, 2023

Are you concerned about ransomware attacks? You're not alone. In recent years, these attacks have become increasingly common and can...

News

OSINT

Malware Analysis – evasion – 727b2d3ec84ce3139998a79342fa324b

Malware Analysis – amadey – 0e71e6e602e6cfb38ea3567ac1130343

Malware Analysis – djvu – bf3a2484532f79b9a300bda711005470

Malware Analysis – ransomware – 9634b28186b502eab4ead6119285f4d7

Malware Analysis – banker – 14f1074238583c9afde262fb31782ac9

Malware Analysis – dharma – 5c36e305d926e55ef98d392176890cd2

Malware Analysis – – 21d01fa87dfcaf971ff7b63a1a6fda94

Malware Analysis – ouroboros – bfed6debcd8c3dbf8ea21655247ed3f0

Malware Analysis – chaos – deb8f4311fd52319f6168c10b626c808

Malware Analysis – chaos – 9eb958c38bd3d39c55b009f9a200f42f

Malware Analysis – ransomware – 9d44fd089264803ad86f41edd56aef4d

BugCrowd Bug Bounty Disclosure: – Bypass URL and IP Address Restrictions on analytics.starlink.com – By I4ENI

SideCopy Using Action RAT and AllaKore RAT to infiltrate Indian Organizations

MSI Data Breach: Private Code Signing Keys Leaked on the Dark Web

Join Our Webinar: Learn How to Defeat Ransomware with Identity-Focused Protection

Western Digital Confirms Customer Data Stolen by Hackers in March Breach

How to Set Up a Threat Hunting and Threat Intelligence Program

LockBit 3.0 Ransomware Victim: namibmills[.]com

LockBit 3.0 Ransomware Victim: astate[.]edu

LockBit 3.0 Ransomware Victim: stmarys[.]net

LockBit 3.0 Ransomware Victim: unity[.]edu

LockBit 3.0 Ransomware Victim: lssny[.]org

Cobalt Stike Beacon Detected – 172[.]86[.]75[.]75:443

Cobalt Stike Beacon Detected – 172[.]245[.]92[.]205:80

[MEDUSA] – Ransomware Victim: Simon Property Group

CVE Alert: CVE-2025-12399 – alexreservations – Alex Reservations: Smart Restaurant Booking

CVE Alert: CVE-2025-12099 – academylms – Academy LMS – WordPress LMS Plugin for Complete eLearning Solution

CVE Alert: CVE-2025-9334 – codesolz – Better Find and Replace – AI-Powered Suggestions

CVE Alert: CVE-2025-11967 – getwpfunnels – Mail Mint – Newsletters, Email Marketing, Automation, WooCommerce Emails, Post Notification, and more

You may have missed