OSINT

Malware Analysis – ransomware – 0ff10287b4c50e0d11ab998a28529415

November 27, 2022

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealer, upxMD5: 0ff10287b4c50e0d11ab998a28529415SHA1: d44462becb1770b6477e1f15d12f78d17f7f11b8ANALYSIS DATE: 2022-11-26T19:31:29ZTTPS: T1082, T1005, T1081, T1130, T1112 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – b8f9ddd71128dff0dbdc09b0e3eeeb96

November 27, 2022

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: b8f9ddd71128dff0dbdc09b0e3eeeb96SHA1: ffba5a304d0ea417f7faf8be3094b5f6f0e143c9ANALYSIS DATE: 2022-11-26T19:42:27ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Cobalt Stike Beacon Detected – 123[.]57[.]232[.]6:443

November 27, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 185[.]48[.]86[.]75:9301

November 27, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 142[.]93[.]213[.]188:80

November 27, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 173[.]199[.]70[.]153:443

November 27, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – evasion – c6f7172a85250e72cae1d1f91797b41b

November 27, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: c6f7172a85250e72cae1d1f91797b41bSHA1: eba651c68987069448561df00c61afa3c81b8fd5ANALYSIS DATE: 2022-11-26T19:42:48ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – ransomware – 431232b494d07b315f9b579590ebe0e8

November 27, 2022

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 431232b494d07b315f9b579590ebe0e8SHA1: e2634482c775d92034f2caec7bb40c86c5a2f92cANALYSIS DATE: 2022-11-26T19:51:11ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – eaa90d0307dc1ae0ecd3f56abd24b92b

November 27, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: eaa90d0307dc1ae0ecd3f56abd24b92bSHA1: 306ca9ce1a33f02e010f3db990f3bc75db330dbcANALYSIS DATE: 2022-11-27T09:31:48ZTTPS: T1082, T1005, T1081, T1060,...

Malware Analysis – evasion – 88926eab16184bf1d072494ac6fe1147

November 27, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 88926eab16184bf1d072494ac6fe1147SHA1: 724b53a3d7bf9e0feeafe8c379ff0f839e847e81ANALYSIS DATE: 2022-11-26T19:43:38ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Cobalt Stike Beacon Detected – 43[.]143[.]18[.]98:8082

November 27, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 101[.]34[.]36[.]50:1111

November 27, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 174[.]139[.]150[.]171:4443

November 27, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 101[.]42[.]89[.]186:2083

November 27, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – ransomware – 0d135cb286e9cd608263b7ec5ed84139

November 27, 2022

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 0d135cb286e9cd608263b7ec5ed84139SHA1: e9ff24f575246518e35a9ae318fbba3f0628d647ANALYSIS DATE: 2022-11-27T10:38:50ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – amadey – d6db545e136e684388761f4e16eef9af

November 27, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, backdoor, collection, discovery, persistence, ransomware, trojanMD5: d6db545e136e684388761f4e16eef9afSHA1: 54bd1905bf73ad54efc7d020a8dabe4068b278b4ANALYSIS DATE: 2022-11-27T09:44:19ZTTPS: T1114, T1082, T1053,...

Malware Analysis – amadey – b4e7936ca7f8a1513ac3c449757a30a2

November 27, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: b4e7936ca7f8a1513ac3c449757a30a2SHA1: ae341e99e81a07971d0abdb955c3a3e7463bb4f9ANALYSIS DATE:...

Bug Bounty

BugCrowd Bug Bounty Disclosure: – Impersonation via Broken Link Hijacking on https://sv.hellosign.com – By CoffeeAddict_exe

November 27, 2022

The below information is fully automated and the information is captured from the BugCrowd Disclosure website. The information was correct...

Bug Bounty

BugCrowd Bug Bounty Disclosure: – Panel access at https://news-push-88.op-mobile.opera.com/. – By rahul0x01

November 27, 2022

The below information is fully automated and the information is captured from the BugCrowd Disclosure website. The information was correct...

Malware Analysis – djvu – d20b21cd8a83f599a27b1d05b09672b7

November 27, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: d20b21cd8a83f599a27b1d05b09672b7SHA1: 7034892b37fd5da2ccbd5349228bd5b98a397a14ANALYSIS DATE: 2022-11-27T10:14:47ZTTPS: T1060, T1112, T1222, T1082,...

Daily Vulnerability Trends: Sun Nov 27 2022

November 27, 2022

Daily Vulnerability Trends (sourced from VulnMon) CVE NAMECVE DescriptionCVE-2022-3496A vulnerability was found in SourceCodester Human Resource Management System 1.0 and...

Malware Analysis – ransomware – c2c3ac16a1e1c3c24f11987532538ac0

November 27, 2022

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: c2c3ac16a1e1c3c24f11987532538ac0SHA1: 6765f5b4f00a7f1b72f12de32a2a0ed15eaefd10ANALYSIS DATE: 2022-11-26T13:32:54ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – 57f3565e95c4cf7199c98fbce4d42834

November 27, 2022

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 57f3565e95c4cf7199c98fbce4d42834SHA1: 0354747ebbf11cabf7d198982880bbcf4b984e7bANALYSIS DATE: 2022-11-26T13:33:07ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – 5243a5caccf928ee39fdc1e9fc93e15a

November 27, 2022

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 5243a5caccf928ee39fdc1e9fc93e15aSHA1: 0173d78a02cc5b08664fea18b7f28fa74b5ff5beANALYSIS DATE: 2022-11-26T13:33:01ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

OSINT

Malware Analysis – ransomware – 0ff10287b4c50e0d11ab998a28529415

Malware Analysis – ransomware – b8f9ddd71128dff0dbdc09b0e3eeeb96

Cobalt Stike Beacon Detected – 123[.]57[.]232[.]6:443

Cobalt Stike Beacon Detected – 185[.]48[.]86[.]75:9301

Cobalt Stike Beacon Detected – 142[.]93[.]213[.]188:80

Cobalt Stike Beacon Detected – 173[.]199[.]70[.]153:443

Malware Analysis – evasion – c6f7172a85250e72cae1d1f91797b41b

Malware Analysis – ransomware – 431232b494d07b315f9b579590ebe0e8

Malware Analysis – djvu – eaa90d0307dc1ae0ecd3f56abd24b92b

Malware Analysis – evasion – 88926eab16184bf1d072494ac6fe1147

Cobalt Stike Beacon Detected – 43[.]143[.]18[.]98:8082

Cobalt Stike Beacon Detected – 101[.]34[.]36[.]50:1111

Cobalt Stike Beacon Detected – 174[.]139[.]150[.]171:4443

Cobalt Stike Beacon Detected – 101[.]42[.]89[.]186:2083

Malware Analysis – ransomware – 0d135cb286e9cd608263b7ec5ed84139

Malware Analysis – amadey – d6db545e136e684388761f4e16eef9af

Malware Analysis – amadey – b4e7936ca7f8a1513ac3c449757a30a2

BugCrowd Bug Bounty Disclosure: – Impersonation via Broken Link Hijacking on https://sv.hellosign.com – By CoffeeAddict_exe

BugCrowd Bug Bounty Disclosure: – Panel access at https://news-push-88.op-mobile.opera.com/. – By rahul0x01

Malware Analysis – djvu – d20b21cd8a83f599a27b1d05b09672b7

Daily Vulnerability Trends: Sun Nov 27 2022

Malware Analysis – ransomware – c2c3ac16a1e1c3c24f11987532538ac0

Malware Analysis – ransomware – 57f3565e95c4cf7199c98fbce4d42834

Malware Analysis – ransomware – 5243a5caccf928ee39fdc1e9fc93e15a

CVE Alert: CVE-2025-5815

CVE Alert: CVE-2024-38822

CVE Alert: CVE-2025-5938

CVE Alert: CVE-2025-5282

CVE Alert: CVE-2025-22236

You may have missed