OSINT

Malware Analysis – banker – 0f690e45b5cc7cc38609727e682669fa

November 28, 2022

Score: 8 MALWARE FAMILY: bankerTAGS:banker, evasion, ransomwareMD5: 0f690e45b5cc7cc38609727e682669faSHA1: 5948c0f352f1120190d1ca4eaf5811ff6ee6db83ANALYSIS DATE: 2022-11-27T14:41:29ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – globeimposter – 350542a03ae2eab2f12f6f61abf925e2

November 28, 2022

Score: 10 MALWARE FAMILY: globeimposterTAGS:family:globeimposter, persistence, ransomwareMD5: 350542a03ae2eab2f12f6f61abf925e2SHA1: b943c338607b82fcf72d398ebb317731b5c267c1ANALYSIS DATE: 2022-11-28T09:12:32ZTTPS: T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – ransomware – 6700eeb54eed5cba522dcd4aa18c2249

November 28, 2022

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 6700eeb54eed5cba522dcd4aa18c2249SHA1: 0c1e59f8e5892b666cd6d4b8a63db328bf2b3ddcANALYSIS DATE: 2022-11-27T14:41:56ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – gandcrab – 0009656f547cdab5adf685370b43bbbc

November 28, 2022

Score: 10 MALWARE FAMILY: gandcrabTAGS:family:gandcrab, backdoor, persistence, ransomwareMD5: 0009656f547cdab5adf685370b43bbbcSHA1: 347f0144d0812e636d95f16c4bbba5bbbf689b89ANALYSIS DATE: 2022-11-28T11:11:11ZTTPS: T1012, T1120, T1082, T1060, T1112 ScoreMeaningExample10Known badA malware...

Malware Analysis – djvu – 1387797e5314aed354d31cd484b17cab

November 28, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 1387797e5314aed354d31cd484b17cabSHA1: 2db7368c890fb59dcf650efc336f878aad9685dcANALYSIS DATE: 2022-11-28T11:09:38ZTTPS: T1005, T1081, T1222, T1082,...

Malware Analysis – eternity – 3e639bb5f41c23fddca94836c44b88a6

November 28, 2022

Score: 10 MALWARE FAMILY: eternityTAGS:family:eternity, evasion, ransomwareMD5: 3e639bb5f41c23fddca94836c44b88a6SHA1: 799699566b60733bfc9429b63d63d6bff1d3225aANALYSIS DATE: 2022-11-28T11:31:34ZTTPS: T1018, T1053, T1107, T1490, T1082 ScoreMeaningExample10Known badA malware family...

Malware Analysis – amadey – d7f6af2b69482d6bd535c7727555f7c4

November 28, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:systembc, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: d7f6af2b69482d6bd535c7727555f7c4SHA1: d38415a5e022f65802b1d6da7ea3bc30a96e3861ANALYSIS...

Cobalt Stike Beacon Detected – 1[.]15[.]141[.]252:6666

November 28, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 216[.]120[.]201[.]102:80

November 28, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 110[.]41[.]131[.]105:9999

November 28, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 42[.]194[.]209[.]253:4321

November 28, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 107[.]175[.]142[.]55:9091

November 28, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 43[.]139[.]165[.]219:9999

November 28, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 120[.]78[.]155[.]193:80

November 28, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Bug Bounty

BugCrowd Bug Bounty Disclosure: – Impersonation via Broken Link Hijacking on https://sv.hellosign.com – By CoffeeAddict_exe

November 28, 2022

The below information is fully automated and the information is captured from the BugCrowd Disclosure website. The information was correct...

Bug Bounty

BugCrowd Bug Bounty Disclosure: – Panel access at https://news-push-88.op-mobile.opera.com/. – By rahul0x01

November 28, 2022

The below information is fully automated and the information is captured from the BugCrowd Disclosure website. The information was correct...

Cobalt Stike Beacon Detected – 77[.]73[.]131[.]6:80

November 28, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 124[.]221[.]208[.]64:99

November 28, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 1[.]15[.]223[.]31:80

November 28, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 51[.]91[.]115[.]161:444

November 28, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

LockBit 3.0 Ransomware Victim: bankseta[.]org[.]za

November 28, 2022

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

RansomBoggs Ransomware hit several Ukrainian entities, experts attribute it to Russia

November 28, 2022

Several Ukrainian organizations were hit by Russia-based RansomBoggs Ransomware in the last week, ESET reports. Researchers from ESET observed multiple...

Daily Vulnerability Trends: Mon Nov 28 2022

November 28, 2022

Daily Vulnerability Trends (sourced from VulnMon) CVE NAMECVE DescriptionCVE-2022-45919An issue was discovered in the Linux kernel through 6.0.10. In drivers/media/dvb-core/dvb_ca_en50221.c,...

Malware Analysis – ransomware – 06717f5348df0e5e3a879780b40b37ff

November 28, 2022

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 06717f5348df0e5e3a879780b40b37ffSHA1: d7de611c42a9037ae510e2527c288dd485397881ANALYSIS DATE: 2022-11-27T07:49:07ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

OSINT

Malware Analysis – banker – 0f690e45b5cc7cc38609727e682669fa

Malware Analysis – globeimposter – 350542a03ae2eab2f12f6f61abf925e2

Malware Analysis – ransomware – 6700eeb54eed5cba522dcd4aa18c2249

Malware Analysis – gandcrab – 0009656f547cdab5adf685370b43bbbc

Malware Analysis – djvu – 1387797e5314aed354d31cd484b17cab

Malware Analysis – eternity – 3e639bb5f41c23fddca94836c44b88a6

Malware Analysis – amadey – d7f6af2b69482d6bd535c7727555f7c4

Cobalt Stike Beacon Detected – 1[.]15[.]141[.]252:6666

Cobalt Stike Beacon Detected – 216[.]120[.]201[.]102:80

Cobalt Stike Beacon Detected – 110[.]41[.]131[.]105:9999

Cobalt Stike Beacon Detected – 42[.]194[.]209[.]253:4321

Cobalt Stike Beacon Detected – 107[.]175[.]142[.]55:9091

Cobalt Stike Beacon Detected – 43[.]139[.]165[.]219:9999

Cobalt Stike Beacon Detected – 120[.]78[.]155[.]193:80

BugCrowd Bug Bounty Disclosure: – Impersonation via Broken Link Hijacking on https://sv.hellosign.com – By CoffeeAddict_exe

BugCrowd Bug Bounty Disclosure: – Panel access at https://news-push-88.op-mobile.opera.com/. – By rahul0x01

Cobalt Stike Beacon Detected – 77[.]73[.]131[.]6:80

Cobalt Stike Beacon Detected – 124[.]221[.]208[.]64:99

Cobalt Stike Beacon Detected – 1[.]15[.]223[.]31:80

Cobalt Stike Beacon Detected – 51[.]91[.]115[.]161:444

LockBit 3.0 Ransomware Victim: bankseta[.]org[.]za

RansomBoggs Ransomware hit several Ukrainian entities, experts attribute it to Russia

Daily Vulnerability Trends: Mon Nov 28 2022

Malware Analysis – ransomware – 06717f5348df0e5e3a879780b40b37ff

CVE Alert: CVE-2025-5815

CVE Alert: CVE-2024-38822

CVE Alert: CVE-2025-5938

CVE Alert: CVE-2025-5282

CVE Alert: CVE-2025-22236

You may have missed