OSINT

Malware Analysis – ransomware – a55dd55e1534735a522f84a8cf6e54d2

February 15, 2023

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: a55dd55e1534735a522f84a8cf6e54d2SHA1: 31a49a4a744b0580f40fbd756ea0984fb2fd2fb9ANALYSIS DATE: 2023-02-15T04:47:41ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – 5ee1751c1b4d13cea1cb3225caa18ec0

February 15, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:laplas, family:rhadamanthys, family:smokeloader, family:vidar, botnet:19, backdoor, clipper, collection, discovery, evasion, persistence, ransomware, spyware, stealer, trojan,...

Malware Analysis – chaos – 1379c8d2a7758958c5f2ad789feef48e

February 15, 2023

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, evasion, ransomware, spyware, stealerMD5: 1379c8d2a7758958c5f2ad789feef48eSHA1: 24e960b51b156502b81c0e0deaeabca09b160a4eANALYSIS DATE: 2023-02-15T05:29:03ZTTPS: T1490, T1059, T1107, T1005, T1081, T1082, T1491,...

Malware Analysis – djvu – 0bd656fe319b787ae2a18e10f3f8cf27

February 15, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:rhadamanthys, family:smokeloader, backdoor, discovery, ransomware, spyware, stealer, trojan, vmprotectMD5: 0bd656fe319b787ae2a18e10f3f8cf27SHA1: 9d2a0bac3b07cb8a3d693a49cf1dc80b14b6032bANALYSIS DATE: 2023-02-15T05:40:33ZTTPS: T1012, T1120,...

Malware Analysis – djvu – e44143d2af9f4d889076c2862fd2e067

February 15, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: e44143d2af9f4d889076c2862fd2e067SHA1: 17f188c714e857674273f79ff1a33ec32ae62451ANALYSIS DATE: 2023-02-15T05:20:30ZTTPS: T1222, T1060, T1112, T1082,...

Malware Analysis – djvu – f5d57b9e3fd125cf7eb642ef89e09d9b

February 15, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: f5d57b9e3fd125cf7eb642ef89e09d9bSHA1: 24cc19260eec4be76d219f81041e0eb2b5b5730cANALYSIS DATE: 2023-02-15T05:30:27ZTTPS: T1012, T1082, T1053, T1005,...

OSINT

Malware Analysis – ransomware – a55dd55e1534735a522f84a8cf6e54d2

Malware Analysis – djvu – 5ee1751c1b4d13cea1cb3225caa18ec0

Malware Analysis – chaos – 1379c8d2a7758958c5f2ad789feef48e

Malware Analysis – djvu – 0bd656fe319b787ae2a18e10f3f8cf27

Malware Analysis – djvu – e44143d2af9f4d889076c2862fd2e067

Malware Analysis – djvu – f5d57b9e3fd125cf7eb642ef89e09d9b

Update Now: Microsoft Releases Patches for 3 Actively Exploited Windows Vulnerabilities

LockBit 3.0 Ransomware Victim: cassaragionieri[.]it

A CISOs Practical Guide to Storage and Backup Ransomware Resiliency

Chinese Hackers Targeting South American Diplomatic Entities with ShadowPad

Python Developers Beware: Clipper Malware Found in 450+ PyPI Packages!

Massive AdSense Fraud Campaign Uncovered – 10,000+ WordPress Sites Infected

LockBit 3.0 Ransomware Victim: gruppobeltrame[.]com

Cobalt Stike Beacon Detected – 120[.]46[.]192[.]64:80

Cobalt Stike Beacon Detected – 107[.]173[.]111[.]16:443

Cobalt Stike Beacon Detected – 1[.]117[.]117[.]162:443

Cobalt Stike Beacon Detected – 43[.]159[.]43[.]58:443

Cobalt Stike Beacon Detected – 123[.]58[.]197[.]94:8080

Cobalt Stike Beacon Detected – 23[.]94[.]240[.]207:443

Cobalt Stike Beacon Detected – 43[.]153[.]117[.]9:4433

Cobalt Stike Beacon Detected – 103[.]30[.]17[.]40:443

Cobalt Stike Beacon Detected – 120[.]77[.]18[.]249:88

Cobalt Stike Beacon Detected – 176[.]113[.]115[.]44:443

Cobalt Stike Beacon Detected – 65[.]49[.]237[.]57:443

CVE Alert: CVE-2025-54191

CVE Alert: CVE-2025-54190

CVE Alert: CVE-2025-54193

CVE Alert: CVE-2025-54189

CVE Alert: CVE-2025-54192

You may have missed