OSINT

Malware Analysis – ransomware – 46e1b93070ad0e0f816723b7197e80eb

May 1, 2023

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 46e1b93070ad0e0f816723b7197e80ebSHA1: 343519e8113ece30ae895fc898916756e46f9580ANALYSIS DATE: 2023-05-01T16:16:27ZTTPS: T1107, T1490, T1082, T1012, T1120 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – dcee6f7a3dcc70ee3c9eb67af55f24e1

May 1, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: dcee6f7a3dcc70ee3c9eb67af55f24e1SHA1: 9b389976a46aee50daf5437021cede7a961ea820ANALYSIS DATE: 2023-05-01T16:17:14ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 7af47d2bd6075227e4c96cfd3e2f773e

May 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5cb879265de0011bfc7588d5d251aee6, discovery, persistence, ransomware, spyware, stealerMD5: 7af47d2bd6075227e4c96cfd3e2f773eSHA1: 16426e4baf92b88ff1d36f0fb9295419c24e7c99ANALYSIS DATE: 2023-05-01T16:23:18ZTTPS: T1053, T1005, T1081, T1012,...

Malware Analysis – smokeloader – ad10926cb1ff6dffa5bb17e627b494e7

May 1, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: ad10926cb1ff6dffa5bb17e627b494e7SHA1: 8285f03213beae36dbf678232b4f09a330d384c3ANALYSIS DATE: 2023-05-01T16:21:57ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 0f8a92ef142701f5c7b3cc280ee5ee54

May 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:31c7719b5ee962fbde376b75e771360d, discovery, persistence, ransomware, spyware, stealerMD5: 0f8a92ef142701f5c7b3cc280ee5ee54SHA1: d915dcf9c86572e771e3a1da40e08dfbab4ea237ANALYSIS DATE: 2023-05-01T16:21:00ZTTPS: T1130, T1112, T1082, T1060,...

Malware Analysis – djvu – 816fe767af27de98d455306cd7e1f345

May 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:31c7719b5ee962fbde376b75e771360d, discovery, persistence, ransomware, spyware, stealerMD5: 816fe767af27de98d455306cd7e1f345SHA1: 55be8d88cf16a43168aa8c2c5228119f3b2141d4ANALYSIS DATE: 2023-05-01T16:22:37ZTTPS: T1130, T1112, T1005, T1081,...

Malware Analysis – djvu – 914f0ee6a51aece7b01fcecdc704c1a3

May 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:31c7719b5ee962fbde376b75e771360d, discovery, persistence, ransomware, stealerMD5: 914f0ee6a51aece7b01fcecdc704c1a3SHA1: bdfe039a62a91be638ec85010efef310e220870cANALYSIS DATE: 2023-05-01T16:25:08ZTTPS: T1130, T1112, T1060, T1222, T1082,...

Malware Analysis – smokeloader – 93771fbbc0900f187f831de1435c00ee

May 1, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 93771fbbc0900f187f831de1435c00eeSHA1: d0d65242f8d53f7b3b7b9c981708c85c1d2f69c4ANALYSIS DATE: 2023-05-01T16:31:50ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 0e5768e5106ad5956530ada9cbd08647

May 1, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 0e5768e5106ad5956530ada9cbd08647SHA1: 6d836c86a3dbbfb17ba25b013f6f395a37f271ffANALYSIS DATE: 2023-05-01T16:30:15ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 7dc6e15c9b692a35778bcbccb7ca5cd1

May 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, stealerMD5: 7dc6e15c9b692a35778bcbccb7ca5cd1SHA1: 2e29e05327d8d4a487afbe6545896aca7d8108cfANALYSIS DATE: 2023-05-01T16:26:10ZTTPS: T1222, T1082, T1130, T1112, T1053, T1060...

Malware Analysis – djvu – 4b4ee708db007a115d3612f82c9f8b45

May 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:31c7719b5ee962fbde376b75e771360d, discovery, persistence, ransomware, stealerMD5: 4b4ee708db007a115d3612f82c9f8b45SHA1: d5d4b3480f74045204986b7ba20253eabf62ed19ANALYSIS DATE: 2023-05-01T16:37:15ZTTPS: T1222, T1082, T1053, T1130, T1112,...

Malware Analysis – smokeloader – 70a45c99bd8172db1e99c8fc1764b53b

May 1, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 70a45c99bd8172db1e99c8fc1764b53bSHA1: 448488bbcf4377e0a6460a93a0331a32a2a0eec1ANALYSIS DATE: 2023-05-01T16:34:16ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – d286a50faa5f8d8bf0febacaa5df6289

May 1, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: d286a50faa5f8d8bf0febacaa5df6289SHA1: 9a0fd51d5960954439d7530f184c6addb4ad82f5ANALYSIS DATE: 2023-05-01T16:34:15ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – fd5168a3d3adb20b0eedfd5f43ee3626

May 1, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: fd5168a3d3adb20b0eedfd5f43ee3626SHA1: d0afe4c21b84f95df3ab25b832d8066c4f4974cbANALYSIS DATE: 2023-05-01T16:35:10ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 16223c0fc49917710f84e251285855b5

May 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:31c7719b5ee962fbde376b75e771360d, discovery, persistence, ransomware, stealerMD5: 16223c0fc49917710f84e251285855b5SHA1: 3c32f9bffd3f3f27cb24a1d75fa2b5c9094a8526ANALYSIS DATE: 2023-05-01T16:39:24ZTTPS: T1060, T1112, T1222, T1082, T1130,...

Malware Analysis – smokeloader – 405699bcfa799a906616ed0c0fa3e607

May 1, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 405699bcfa799a906616ed0c0fa3e607SHA1: bc6fdc3c7dde359e3d4debc205244abb6c094149ANALYSIS DATE: 2023-05-01T16:37:17ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 78c42210ada127cbd5a502f11203ae0f

May 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:31c7719b5ee962fbde376b75e771360d, discovery, persistence, ransomware, spyware, stealerMD5: 78c42210ada127cbd5a502f11203ae0fSHA1: af5389caa874ecee1448887a06f0e556eea0404bANALYSIS DATE: 2023-05-01T16:40:56ZTTPS: T1130, T1112, T1222, T1060,...

Malware Analysis – djvu – 589475b3eb19a163019f2e8bf3f1f7f1

May 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:31c7719b5ee962fbde376b75e771360d, discovery, persistence, ransomware, spyware, stealerMD5: 589475b3eb19a163019f2e8bf3f1f7f1SHA1: c5cc3e9cdec969c1f8d1f9fad57f08736216a8ffANALYSIS DATE: 2023-05-01T16:37:36ZTTPS: T1005, T1081, T1060, T1112,...

Malware Analysis – djvu – 21e69000c86cb6587d8b717a160cacbf

May 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:31c7719b5ee962fbde376b75e771360d, discovery, persistence, ransomware, spyware, stealerMD5: 21e69000c86cb6587d8b717a160cacbfSHA1: f8f5f808f7862770ea84fc2cdd57d2e6a3fe86aeANALYSIS DATE: 2023-05-01T16:46:28ZTTPS: T1082, T1053, T1060, T1112,...

Malware Analysis – djvu – 12fb84243368d000e3989b7932438314

May 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, ransomwareMD5: 12fb84243368d000e3989b7932438314SHA1: 6458cb1b8f3760529de74b3ed9570355d2540d83ANALYSIS DATE: 2023-05-01T16:43:45ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – smokeloader – 544ca3fb991856aada9cc5d7b83cfdba

May 1, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 544ca3fb991856aada9cc5d7b83cfdbaSHA1: 167168b7d5ddeb2e99fe13ffe9044c299eb3da9aANALYSIS DATE: 2023-05-01T16:46:44ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 2371db41ba66dd8a6ad9410edb59c558

May 1, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 2371db41ba66dd8a6ad9410edb59c558SHA1: 1ecc6699cf5fc000c243e7cc928447edb6534374ANALYSIS DATE: 2023-05-01T16:45:12ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 5dd6eaf0ad64284a1c5b2777adee3339

May 1, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 5dd6eaf0ad64284a1c5b2777adee3339SHA1: 2eb973333d9e6342d9e68796e2bc88c8efcde750ANALYSIS DATE: 2023-05-01T16:47:02ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – fabb956f14621c3088e1f31642be016a

May 1, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: fabb956f14621c3088e1f31642be016aSHA1: d07d919ce2c986b35e89b2652a710afc38d98c8eANALYSIS DATE: 2023-05-01T16:48:12ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

OSINT

Malware Analysis – ransomware – 46e1b93070ad0e0f816723b7197e80eb

Malware Analysis – smokeloader – dcee6f7a3dcc70ee3c9eb67af55f24e1

Malware Analysis – djvu – 7af47d2bd6075227e4c96cfd3e2f773e

Malware Analysis – smokeloader – ad10926cb1ff6dffa5bb17e627b494e7

Malware Analysis – djvu – 0f8a92ef142701f5c7b3cc280ee5ee54

Malware Analysis – djvu – 816fe767af27de98d455306cd7e1f345

Malware Analysis – djvu – 914f0ee6a51aece7b01fcecdc704c1a3

Malware Analysis – smokeloader – 93771fbbc0900f187f831de1435c00ee

Malware Analysis – smokeloader – 0e5768e5106ad5956530ada9cbd08647

Malware Analysis – djvu – 7dc6e15c9b692a35778bcbccb7ca5cd1

Malware Analysis – djvu – 4b4ee708db007a115d3612f82c9f8b45

Malware Analysis – smokeloader – 70a45c99bd8172db1e99c8fc1764b53b

Malware Analysis – smokeloader – d286a50faa5f8d8bf0febacaa5df6289

Malware Analysis – smokeloader – fd5168a3d3adb20b0eedfd5f43ee3626

Malware Analysis – djvu – 16223c0fc49917710f84e251285855b5

Malware Analysis – smokeloader – 405699bcfa799a906616ed0c0fa3e607

Malware Analysis – djvu – 78c42210ada127cbd5a502f11203ae0f

Malware Analysis – djvu – 589475b3eb19a163019f2e8bf3f1f7f1

Malware Analysis – djvu – 21e69000c86cb6587d8b717a160cacbf

Malware Analysis – djvu – 12fb84243368d000e3989b7932438314

Malware Analysis – smokeloader – 544ca3fb991856aada9cc5d7b83cfdba

Malware Analysis – smokeloader – 2371db41ba66dd8a6ad9410edb59c558

Malware Analysis – smokeloader – 5dd6eaf0ad64284a1c5b2777adee3339

Malware Analysis – smokeloader – fabb956f14621c3088e1f31642be016a

[DRAGONFORCE] – Ransomware Victim: GB Mail

[AKIRA] – Ransomware Victim: Mold In Graphic Systems

[STORMOUS] – Ransomware Victim: !

CVE Alert: CVE-2025-12863 – Red Hat – Red Hat Enterprise Linux 10

Cobalt Strike Beacon Detected – 8[.]153[.]205[.]30:8080

You may have missed