OSINT

Malware Analysis – djvu – 23793d8263ed7779fb8415e966c4efee

January 21, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 23793d8263ed7779fb8415e966c4efeeSHA1: ec4f0d9147599c8a860ff5e3b770cbc908c5712eANALYSIS DATE: 2023-01-21T04:36:47ZTTPS: T1012, T1082, T1053, T1060,...

Royal Ransomware Victim: Cadmet

January 21, 2023

RoyalRansomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the...

Malware Analysis – discovery – d8ce0d9b7b430261c6d8fc6ca667ffb2

January 21, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, ransomwareMD5: d8ce0d9b7b430261c6d8fc6ca667ffb2SHA1: 5f25557368e50c362105e025e597364fc53b1eb8ANALYSIS DATE: 2023-01-20T20:56:18ZTTPS: T1082, T1057, T1012 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Cobalt Stike Beacon Detected – 20[.]119[.]67[.]107:4433

January 21, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 35[.]74[.]29[.]162:443

January 21, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 118[.]31[.]36[.]92:80

January 21, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 107[.]174[.]247[.]46:443

January 21, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – ransomware – 01381b09f42b937c26fecdc0f9ffbee1

January 21, 2023

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 01381b09f42b937c26fecdc0f9ffbee1SHA1: 12c0cd515fb3db1d3fd3941098748697543570a2ANALYSIS DATE: 2023-01-20T22:17:11ZTTPS: T1491, T1112, T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 57e25afb0160f18f4f70df2937ab9f9c

January 21, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 57e25afb0160f18f4f70df2937ab9f9cSHA1: 625041462fc634fd3b498cf140506b60fc0c7734ANALYSIS DATE: 2023-01-20T21:31:46ZTTPS: T1005, T1081, T1222, T1012,...

Malware Analysis – – 01ccead2e9497ce04ab0c2531320224d

January 21, 2023

Score: 7 MALWARE FAMILY: TAGS:MD5: 01ccead2e9497ce04ab0c2531320224dSHA1: 9b7ebc4d8f97b0e7463a382f3b748a4be48a06a1ANALYSIS DATE: 2023-01-20T21:08:45ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – 274168c05bfc3c620cf376b712e80fc5

January 21, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 274168c05bfc3c620cf376b712e80fc5SHA1: 0406d8a5dc4c3006a3f12c8c1e5e80bcf813baeaANALYSIS DATE: 2023-01-20T22:10:48ZTTPS: T1012, T1082, T1060, T1112,...

Malware Analysis – djvu – 832e24b46741fb33e811fdd3212f364e

January 21, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 832e24b46741fb33e811fdd3212f364eSHA1: b718d24c06c9e91ab49be33b71fd5b82ffaf08e8ANALYSIS DATE: 2023-01-20T23:30:50ZTTPS: T1060, T1112, T1053, T1005,...

Malware Analysis – ransomware – e442f142b98aaa8d318d590565ec78af

January 21, 2023

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: e442f142b98aaa8d318d590565ec78afSHA1: 1c419957108e356ab8ad834e1fd5e79f847c4a31ANALYSIS DATE: 2023-01-20T22:36:03ZTTPS: T1005, T1081 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

CISA: Drupal Releases Security Advisories to Address Multiple Vulnerabilities

January 21, 2023

Drupal Releases Security Advisories to Address Multiple Vulnerabilities Drupal has released security advisories to address vulnerabilities affecting multiple products. An...

Malware Analysis – djvu – 8d2cbb933bfe4cbbea3eed86095c59a4

January 21, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 8d2cbb933bfe4cbbea3eed86095c59a4SHA1: 0381cd29a98baa8bcb12e8b3dbc72cba96363b00ANALYSIS DATE: 2023-01-20T23:51:03ZTTPS: T1060, T1112, T1005, T1081,...

Malware Analysis – evasion – decf384d8c0a2a036abff47331d6ab98

January 21, 2023

Score: 8 MALWARE FAMILY: evasionTAGS:evasion, ransomware, stealth, trojanMD5: decf384d8c0a2a036abff47331d6ab98SHA1: c396327a2332bd6fbc771a97b5e0d4d1a43e8f72ANALYSIS DATE: 2023-01-20T23:48:18ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

CISA: Cisco Releases Security Advisory for Unified CM and Unified CM SME

January 20, 2023

Cisco Releases Security Advisory for Unified CM and Unified CM SME Cisco released a security advisory for a vulnerability affecting...

f99dfb1cc2ee845a855208fbace71f2de16fbd0240cdae24c81ae0be339e84b9

Ghauri – An Advanced Cross-Platform Tool That Automates The Process Of Detecting And Exploiting SQL Injection Security Flaws

January 20, 2023

An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws Requirements Python 3 Python...

Cobalt Stike Beacon Detected – 162[.]14[.]107[.]239:8443

January 20, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 185[.]62[.]58[.]53:443

January 20, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Phishing and ransomware amongst biggest threats to charity sector

January 20, 2023

Phishing and ransomware amongst biggest threats to charity sector A new threat report published today reveals why the charity sector...

Malware Analysis – ransomware – bff3bc6d526bee1844f08894b26c1c92

January 20, 2023

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: bff3bc6d526bee1844f08894b26c1c92SHA1: e703f5d5438d2dc0a06b6110305d21a4db804f9bANALYSIS DATE: 2023-01-20T09:40:04ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – banker – 9023dd6c78bdd6292590523d03c9aac2

January 20, 2023

Score: 8 MALWARE FAMILY: bankerTAGS:banker, evasion, ransomwareMD5: 9023dd6c78bdd6292590523d03c9aac2SHA1: 80dac26829e8ba29d51e37eb9a1ff26a37de949dANALYSIS DATE: 2023-01-20T09:06:27ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – djvu – ae87f11bfca2d4569ba605b0177ceeca

January 20, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: ae87f11bfca2d4569ba605b0177ceecaSHA1: 79f772b8ab8af8771b96fdc72e2409de2064ac03ANALYSIS DATE: 2023-01-20T09:44:54ZTTPS: T1012, T1082, T1005, T1081,...

OSINT

Malware Analysis – djvu – 23793d8263ed7779fb8415e966c4efee

Royal Ransomware Victim: Cadmet

Malware Analysis – discovery – d8ce0d9b7b430261c6d8fc6ca667ffb2

Cobalt Stike Beacon Detected – 20[.]119[.]67[.]107:4433

Cobalt Stike Beacon Detected – 35[.]74[.]29[.]162:443

Cobalt Stike Beacon Detected – 118[.]31[.]36[.]92:80

Cobalt Stike Beacon Detected – 107[.]174[.]247[.]46:443

Malware Analysis – ransomware – 01381b09f42b937c26fecdc0f9ffbee1

Malware Analysis – djvu – 57e25afb0160f18f4f70df2937ab9f9c

Malware Analysis – – 01ccead2e9497ce04ab0c2531320224d

Malware Analysis – djvu – 274168c05bfc3c620cf376b712e80fc5

Malware Analysis – djvu – 832e24b46741fb33e811fdd3212f364e

Malware Analysis – ransomware – e442f142b98aaa8d318d590565ec78af

CISA: Drupal Releases Security Advisories to Address Multiple Vulnerabilities

Malware Analysis – djvu – 8d2cbb933bfe4cbbea3eed86095c59a4

Malware Analysis – evasion – decf384d8c0a2a036abff47331d6ab98

CISA: Cisco Releases Security Advisory for Unified CM and Unified CM SME

Ghauri – An Advanced Cross-Platform Tool That Automates The Process Of Detecting And Exploiting SQL Injection Security Flaws

Cobalt Stike Beacon Detected – 162[.]14[.]107[.]239:8443

Cobalt Stike Beacon Detected – 185[.]62[.]58[.]53:443

Phishing and ransomware amongst biggest threats to charity sector

Malware Analysis – ransomware – bff3bc6d526bee1844f08894b26c1c92

Malware Analysis – banker – 9023dd6c78bdd6292590523d03c9aac2

Malware Analysis – djvu – ae87f11bfca2d4569ba605b0177ceeca

CVE Alert: CVE-2025-50952

CVE Alert: CVE-2025-55133

CVE Alert: CVE-2025-47188

CVE Alert: CVE-2025-55134

CVE Alert: CVE-2024-56339

You may have missed