OSINT

Malware Analysis – evasion – c2924c77c7f3be5c416216e73f1270de

May 7, 2023

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealer, trojanMD5: c2924c77c7f3be5c416216e73f1270deSHA1: 4704ab63471d2e41bd90310bbf08b4c9bf092234ANALYSIS DATE: 2023-05-07T06:33:22ZTTPS: T1082, T1088, T1089, T1112, T1005, T1081,...

Malware Analysis – smokeloader – f5ae514a8d297bb487919929b612a0e8

May 7, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: f5ae514a8d297bb487919929b612a0e8SHA1: b4a66185558e9ecb7c705ab60d924fcbd5316948ANALYSIS DATE: 2023-05-07T06:33:41ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 6c8c5b32b25fcaabe3f3264e828ff0eb

May 7, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 6c8c5b32b25fcaabe3f3264e828ff0ebSHA1: dd19103ef348ed9d0d0b65a264f4a863ff4b2fc4ANALYSIS DATE: 2023-05-07T06:34:11ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 10cfadc7fce9b36a094de4ee45171061

May 7, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 10cfadc7fce9b36a094de4ee45171061SHA1: 236f5ab5a996629286836b8a849645cf3be60928ANALYSIS DATE: 2023-05-07T06:36:49ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – evasion – c4180c4cfdfccba5d63f4fc75d6709be

May 7, 2023

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealer, trojanMD5: c4180c4cfdfccba5d63f4fc75d6709beSHA1: 4ce33b3f47f0e7f3ca2868bceabb9c066558d846ANALYSIS DATE: 2023-05-07T06:36:33ZTTPS: T1060, T1112, T1158, T1082, T1088, T1089,...

Malware Analysis – smokeloader – a0d3a011965a2ca0151c4b65f5ba3d3f

May 7, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: a0d3a011965a2ca0151c4b65f5ba3d3fSHA1: 8b22773b7a1dae1864a6ace4ca233b06e339bddcANALYSIS DATE: 2023-05-07T06:36:15ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – evasion – c4708e907f986b5c917b5b4f3593ab4b

May 7, 2023

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealer, trojanMD5: c4708e907f986b5c917b5b4f3593ab4bSHA1: 2b34ffc0d72d2d580f0afa2266ae63dc75e5a4a3ANALYSIS DATE: 2023-05-07T06:37:18ZTTPS: T1060, T1112, T1158, T1088, T1089, T1082,...

Malware Analysis – evasion – c5edc184107f99d20acfc2973cc9c90a

May 7, 2023

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealer, trojanMD5: c5edc184107f99d20acfc2973cc9c90aSHA1: adac27efe8b7ddad00408974152c3902ecc6f687ANALYSIS DATE: 2023-05-07T06:40:49ZTTPS: T1060, T1112, T1088, T1089, T1012, T1082,...

Malware Analysis – smokeloader – 478b577f1c2f29eac6bf1c49bab3e999

May 7, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 478b577f1c2f29eac6bf1c49bab3e999SHA1: 9f6597e3d432fbe5882250853f86653702aa5296ANALYSIS DATE: 2023-05-07T06:40:01ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – cd096d02887b6a3148f993bcba8a3427

May 7, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: cd096d02887b6a3148f993bcba8a3427SHA1: 7d3f8c69d27304914f1d9645b697c6bce43b87c4ANALYSIS DATE: 2023-05-07T06:40:10ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – a246ea905cbe71069881a834e9c00906

May 7, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: a246ea905cbe71069881a834e9c00906SHA1: 90dc98abfcfd87a267b4af8fe9a0c7de66a9e815ANALYSIS DATE: 2023-05-07T06:48:57ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 6685c0985b2978f83376519abe42a3a0

May 7, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 6685c0985b2978f83376519abe42a3a0SHA1: e63a88f6bf1f942aa03100ef615b01e5c8c8ebe6ANALYSIS DATE: 2023-05-07T06:49:35ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 11561983e23e2633aaceb72caa4012ca

May 7, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 11561983e23e2633aaceb72caa4012caSHA1: ed56a045ba5ed331c24b297d9d3c618313ecb63aANALYSIS DATE: 2023-05-07T06:48:30ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 2e0df3db9d17ecd468164e82a5dce8fd

May 7, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 2e0df3db9d17ecd468164e82a5dce8fdSHA1: 9e15d3d9061102544db4f939518db2b7c689e17dANALYSIS DATE: 2023-05-07T06:40:51ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – a3a7a7f3f4bbc4835f8ac96635434f3b

May 7, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: a3a7a7f3f4bbc4835f8ac96635434f3bSHA1: 72b800b58a7a41eb892fc0af243dcfdd3c20a5ccANALYSIS DATE: 2023-05-07T06:53:23ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 461d6a95c78bf16d6c87b1a52e62a7db

May 7, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 461d6a95c78bf16d6c87b1a52e62a7dbSHA1: 905aa67c72110b33903d5f96d3c15c1006dc98a9ANALYSIS DATE: 2023-05-07T15:21:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – – 69d7da66b26f3fadf4b24c25afa3aa1d

May 7, 2023

Score: 1 MALWARE FAMILY: TAGS:MD5: 69d7da66b26f3fadf4b24c25afa3aa1dSHA1: 21935ccf77a975f7360346653ea099ab2bc94b55ANALYSIS DATE: 2023-05-07T15:58:12ZTTPS: T1012, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – djvu – 58681a17b88689ca140b9d4c6f05f661

May 7, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:31c7719b5ee962fbde376b75e771360d, discovery, persistence, ransomware, spyware, stealerMD5: 58681a17b88689ca140b9d4c6f05f661SHA1: d0c63bcee04b55ca873ac41fb5ae7fc192954e5bANALYSIS DATE: 2023-05-07T16:27:31ZTTPS: T1060, T1112, T1222, T1082,...

Malware Analysis – evasion – 24c77144b5f15092fe61bbbb69b4114f

May 7, 2023

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 24c77144b5f15092fe61bbbb69b4114fSHA1: 5121a20a765cb6f73d6b8ac97cdf9f6a5ae36346ANALYSIS DATE: 2023-05-07T17:17:08ZTTPS: T1102 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – djvu – ce55fc139e9f28446e46a96444c3b900

May 7, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: ce55fc139e9f28446e46a96444c3b900SHA1: cdc015e0f8a3e69f145947685025905db3023ba6ANALYSIS DATE: 2023-05-07T17:06:31ZTTPS: T1060, T1112, T1222, T1082, T1012, T1053 ScoreMeaningExample10Known badA...

Malware Analysis – amadey – a43386ae734f0f09d4930dc1192d5d8c

May 7, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:vidar, botnet:pub1, botnet:sprg, backdoor, discovery, persistence, ransomware, stealer, trojanMD5: a43386ae734f0f09d4930dc1192d5d8cSHA1: 025ccc60022aa83f209a1afb9b5954a31df05da6ANALYSIS DATE: 2023-05-07T16:36:34ZTTPS:...

Malware Analysis – amadey – 5c37c783b72099932182cb19a370d67f

May 7, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, botnet:pub1, botnet:sprg, backdoor, discovery, persistence, ransomware, trojanMD5: 5c37c783b72099932182cb19a370d67fSHA1: cb93a67bc5dc5ac05cbe84cec2ce0fb2e5d93fcaANALYSIS DATE: 2023-05-07T17:00:34ZTTPS: T1222, T1060,...

LockBit 3.0 Ransomware Victim: marshallconstruction[.]co[.]uk

May 7, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Cobalt Stike Beacon Detected – 103[.]27[.]186[.]74:2087

May 7, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

OSINT

Malware Analysis – evasion – c2924c77c7f3be5c416216e73f1270de

Malware Analysis – smokeloader – f5ae514a8d297bb487919929b612a0e8

Malware Analysis – smokeloader – 6c8c5b32b25fcaabe3f3264e828ff0eb

Malware Analysis – smokeloader – 10cfadc7fce9b36a094de4ee45171061

Malware Analysis – evasion – c4180c4cfdfccba5d63f4fc75d6709be

Malware Analysis – smokeloader – a0d3a011965a2ca0151c4b65f5ba3d3f

Malware Analysis – evasion – c4708e907f986b5c917b5b4f3593ab4b

Malware Analysis – evasion – c5edc184107f99d20acfc2973cc9c90a

Malware Analysis – smokeloader – 478b577f1c2f29eac6bf1c49bab3e999

Malware Analysis – smokeloader – cd096d02887b6a3148f993bcba8a3427

Malware Analysis – smokeloader – a246ea905cbe71069881a834e9c00906

Malware Analysis – smokeloader – 6685c0985b2978f83376519abe42a3a0

Malware Analysis – smokeloader – 11561983e23e2633aaceb72caa4012ca

Malware Analysis – smokeloader – 2e0df3db9d17ecd468164e82a5dce8fd

Malware Analysis – smokeloader – a3a7a7f3f4bbc4835f8ac96635434f3b

Malware Analysis – smokeloader – 461d6a95c78bf16d6c87b1a52e62a7db

Malware Analysis – – 69d7da66b26f3fadf4b24c25afa3aa1d

Malware Analysis – djvu – 58681a17b88689ca140b9d4c6f05f661

Malware Analysis – evasion – 24c77144b5f15092fe61bbbb69b4114f

Malware Analysis – djvu – ce55fc139e9f28446e46a96444c3b900

Malware Analysis – amadey – a43386ae734f0f09d4930dc1192d5d8c

Malware Analysis – amadey – 5c37c783b72099932182cb19a370d67f

LockBit 3.0 Ransomware Victim: marshallconstruction[.]co[.]uk

Cobalt Stike Beacon Detected – 103[.]27[.]186[.]74:2087

[MEDUSA] – Ransomware Victim: Simon Property Group

CVE Alert: CVE-2025-12399 – alexreservations – Alex Reservations: Smart Restaurant Booking

CVE Alert: CVE-2025-12099 – academylms – Academy LMS – WordPress LMS Plugin for Complete eLearning Solution

CVE Alert: CVE-2025-9334 – codesolz – Better Find and Replace – AI-Powered Suggestions

CVE Alert: CVE-2025-11967 – getwpfunnels – Mail Mint – Newsletters, Email Marketing, Automation, WooCommerce Emails, Post Notification, and more

You may have missed