OSINT

Malware Analysis – – a321bfd6a861472a160fca2928eb51a6

November 30, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: a321bfd6a861472a160fca2928eb51a6SHA1: b99efdaf0046e1902be87fc9388288aa4edcd1faANALYSIS DATE: 2022-11-30T10:57:04ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – – bfabbee8c708860eb6dfea2265cd35c9

November 30, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: bfabbee8c708860eb6dfea2265cd35c9SHA1: 53e7468eb78e2387e7df6ae0a70c53bea692e151ANALYSIS DATE: 2022-11-30T10:58:04ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – – a33c505f1229865a7b9af6df243a3017

November 30, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: a33c505f1229865a7b9af6df243a3017SHA1: 3a79187c482a59c3c30cb2fef37141085dbd8b7eANALYSIS DATE: 2022-11-30T10:57:04ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Cobalt Stike Beacon Detected – 43[.]142[.]23[.]167:443

November 30, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 1[.]12[.]55[.]126:443

November 30, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 120[.]24[.]84[.]16:80

November 30, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Posh C2 Detected – 34[.]235[.]5[.]141:443

November 30, 2022

The Information provided at the time of posting was detected as "Posh C2". Depending on when you are viewing this...

ENC Security, the encryption provider for Sony and Lexar, leaked sensitive data for over a year

November 30, 2022

CyberNews experts discovered that ENC Security, a Netherlands software company, had been leaking critical business data since May 2021. Original...

Daily Vulnerability Trends: Wed Nov 30 2022

November 30, 2022

Daily Vulnerability Trends (sourced from VulnMon) CVE NAMECVE DescriptionCVE-2022-40684An authentication bypass using an alternate path or channel in Fortinet FortiOS...

Karakurt Ransomware Victim: LIBERTY PULTRUSIONS

November 30, 2022

KARAKURT RANSOMWARE NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of...

Malware Analysis – smokeloader – ed8ca6815d1d329d56119d23293c39c7

November 30, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: ed8ca6815d1d329d56119d23293c39c7SHA1: 062a04b195e54b0052f4fa075a19affa1a1f5bf7ANALYSIS DATE: 2022-11-30T03:18:41ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – xorist – ae52ae883b02a0c96aff6ebd68203589

November 30, 2022

Score: 10 MALWARE FAMILY: xoristTAGS:family:xorist, discovery, persistence, ransomware, spyware, stealer, upxMD5: ae52ae883b02a0c96aff6ebd68203589SHA1: f7d44b9fc385ff312e283e6259194da112024ed5ANALYSIS DATE: 2022-11-29T03:02:02ZTTPS: T1005, T1081, T1012, T1082, T1060,...

Malware Analysis – xorist – 846b3e30cd174661265a4c925cf73865

November 30, 2022

Score: 10 MALWARE FAMILY: xoristTAGS:family:xorist, persistence, ransomware, spyware, stealer, upxMD5: 846b3e30cd174661265a4c925cf73865SHA1: 78be287dfd593ec5e87b31ef20347bebb61abfcbANALYSIS DATE: 2022-11-29T04:08:13ZTTPS: T1060, T1112, T1005, T1081 ScoreMeaningExample10Known badA...

Malware Analysis – djvu – b640036fab21df416f292a9c540421e5

November 30, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: b640036fab21df416f292a9c540421e5SHA1: 49f30be1ad1181cf8decff8fd036ec0fa0b6e294ANALYSIS DATE: 2022-11-30T05:41:51ZTTPS: T1060, T1112, T1082, T1053,...

Malware Analysis – djvu – 8f1ffbd841ae305c5297476d38aeabf3

November 30, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 8f1ffbd841ae305c5297476d38aeabf3SHA1: ef06b7fc7740d78662fda0b9e2b7179a4a8ac782ANALYSIS DATE: 2022-11-30T04:05:01ZTTPS: T1222, T1082, T1053, T1005,...

Malware Analysis – amadey – ca94e554bf77b157d780d454e38afb80

November 30, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, backdoor, ransomware, spyware, stealer, trojanMD5: ca94e554bf77b157d780d454e38afb80SHA1: 860ef500c61be60f1a1514c5cf60447ce0c729bdANALYSIS DATE: 2022-11-30T04:22:11ZTTPS: T1012, T1082, T1053, T1005,...

Malware Analysis – djvu – 924cedaa60e2eba5624e7b2cb03f3ff2

November 30, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 924cedaa60e2eba5624e7b2cb03f3ff2SHA1: 34d61d5edf80b5dd7cdc7cccc4ca3dcf96115eb6ANALYSIS DATE: 2022-11-30T03:31:03ZTTPS: T1222, T1005, T1081, T1060,...

Malware Analysis – ransomware – 1022a2c4eaa199f75ebce324e214b9a2

November 30, 2022

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 1022a2c4eaa199f75ebce324e214b9a2SHA1: 199c72ebc27ab44a58ec70bfe7885189b8f8f522ANALYSIS DATE: 2022-11-28T14:31:11ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – b68602c4a39048ba6bf905198b7218b9

November 30, 2022

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: b68602c4a39048ba6bf905198b7218b9SHA1: 4571b54859801b5ed8d5d48d167eef5b327c2787ANALYSIS DATE: 2022-11-28T14:29:43ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – acff34e3eda63363b3355e2b539bdbbe

November 30, 2022

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: acff34e3eda63363b3355e2b539bdbbeSHA1: ab80245ba1abca5cb39c2c9208c2768f2ccde86aANALYSIS DATE: 2022-11-28T14:32:47ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – 5df8d7eca7c33d5f9aa8dc119d2b07d1

November 30, 2022

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 5df8d7eca7c33d5f9aa8dc119d2b07d1SHA1: 5ae9eef8144515f2f9722c5a989136a15d4c3c04ANALYSIS DATE: 2022-11-28T14:42:51ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – infostealer – 1f6ed14689884c7557ab769b1a2aac3d

November 30, 2022

Score: 7 MALWARE FAMILY: infostealerTAGS:infostealer, ransomwareMD5: 1f6ed14689884c7557ab769b1a2aac3dSHA1: 89ff7f3ef980c787cd5f9d46407be408b9c85ea8ANALYSIS DATE: 2022-11-28T14:42:25ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – ransomware – af52bfa60e2c02ce7fb034d5374b2b22

November 30, 2022

Score: 5 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: af52bfa60e2c02ce7fb034d5374b2b22SHA1: 5ce429e94bee8b16bf38c86bd25d693e1184583bANALYSIS DATE: 2022-11-28T14:40:14ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – 9256cc7069a19afe3abb130985481376

November 30, 2022

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 9256cc7069a19afe3abb130985481376SHA1: 854d245cbc6cb681e299299af76a2cf253a5d010ANALYSIS DATE: 2022-11-28T14:43:26ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

OSINT

Malware Analysis – – a321bfd6a861472a160fca2928eb51a6

Malware Analysis – – bfabbee8c708860eb6dfea2265cd35c9

Malware Analysis – – a33c505f1229865a7b9af6df243a3017

Cobalt Stike Beacon Detected – 43[.]142[.]23[.]167:443

Cobalt Stike Beacon Detected – 1[.]12[.]55[.]126:443

Cobalt Stike Beacon Detected – 120[.]24[.]84[.]16:80

Posh C2 Detected – 34[.]235[.]5[.]141:443

ENC Security, the encryption provider for Sony and Lexar, leaked sensitive data for over a year

Daily Vulnerability Trends: Wed Nov 30 2022

Karakurt Ransomware Victim: LIBERTY PULTRUSIONS

Malware Analysis – smokeloader – ed8ca6815d1d329d56119d23293c39c7

Malware Analysis – xorist – ae52ae883b02a0c96aff6ebd68203589

Malware Analysis – xorist – 846b3e30cd174661265a4c925cf73865

Malware Analysis – djvu – b640036fab21df416f292a9c540421e5

Malware Analysis – djvu – 8f1ffbd841ae305c5297476d38aeabf3

Malware Analysis – amadey – ca94e554bf77b157d780d454e38afb80

Malware Analysis – djvu – 924cedaa60e2eba5624e7b2cb03f3ff2

Malware Analysis – ransomware – 1022a2c4eaa199f75ebce324e214b9a2

Malware Analysis – ransomware – b68602c4a39048ba6bf905198b7218b9

Malware Analysis – ransomware – acff34e3eda63363b3355e2b539bdbbe

Malware Analysis – ransomware – 5df8d7eca7c33d5f9aa8dc119d2b07d1

Malware Analysis – infostealer – 1f6ed14689884c7557ab769b1a2aac3d

Malware Analysis – ransomware – af52bfa60e2c02ce7fb034d5374b2b22

Malware Analysis – ransomware – 9256cc7069a19afe3abb130985481376

CVE Alert: CVE-2025-5815

CVE Alert: CVE-2024-38822

CVE Alert: CVE-2025-5938

CVE Alert: CVE-2025-5282

CVE Alert: CVE-2025-22236

You may have missed