OSINT

Malware Analysis – djvu – ae21cdf16306059d4349c2ca9b0407a0

December 26, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: ae21cdf16306059d4349c2ca9b0407a0SHA1: df213eeffe96661015e29338765459894978628aANALYSIS DATE: 2022-12-26T10:17:27ZTTPS: T1012, T1005, T1081, T1082, T1222, T1060,...

Malware Analysis – amadey – 4151aa03de133d36e235103956f5df73

December 26, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 4151aa03de133d36e235103956f5df73SHA1: 37c6a03bc2066e438cfb68d7ce46dbd0fd33d06fANALYSIS DATE: 2022-12-26T10:48:17ZTTPS: T1005,...

Cobalt Stike Beacon Detected – 47[.]242[.]74[.]51:7676

December 26, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 54[.]92[.]103[.]160:443

December 26, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – phobos – f8cd85837b695b2689a8f3dfb67d415b

December 26, 2022

Score: 10 MALWARE FAMILY: phobosTAGS:family:phobos, evasion, persistence, ransomware, spyware, stealerMD5: f8cd85837b695b2689a8f3dfb67d415bSHA1: fd12b0db64c9d92033e2fd44b7606b7c88a56ca9ANALYSIS DATE: 2022-12-26T10:58:55ZTTPS: T1490, T1059, T1107, T1005, T1081, T1060,...

Malware Analysis – evasion – d7a24de75b761cb98f580dafda4ba885

December 26, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: d7a24de75b761cb98f580dafda4ba885SHA1: 86dc51cfc817937f9525b8aa2fa71e918288a44dANALYSIS DATE: 2022-12-26T10:59:16ZTTPS: T1490, T1059, T1107, T1485, T1053, T1112, T1031, T1089,...

Malware Analysis – persistence – 40efcdc05f8d6151a51ae7ad769c6ee0

December 26, 2022

Score: 8 MALWARE FAMILY: persistenceTAGS:persistence, upxMD5: 40efcdc05f8d6151a51ae7ad769c6ee0SHA1: 42347d5677a5058d748749f08d09e0b4e4b78632ANALYSIS DATE: 2022-12-26T10:59:14ZTTPS: T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – ransomware – bdfbe890594ca1ec7385f0b8b06d4fd2

December 26, 2022

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: bdfbe890594ca1ec7385f0b8b06d4fd2SHA1: 01a310fc267a349d96984965ecbe835ce5536c04ANALYSIS DATE: 2022-12-26T11:06:59ZTTPS: T1491, T1112, T1130, T1005, T1081 ScoreMeaningExample10Known badA malware family...

Cobalt Stike Beacon Detected – 120[.]48[.]124[.]220:3333

December 26, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 170[.]64[.]248[.]225:443

December 26, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 195[.]189[.]99[.]114:9443

December 26, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 1[.]116[.]160[.]39:80

December 26, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – amadey – 80ae4d81fab8357a6d8145c0d081adac

December 26, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 80ae4d81fab8357a6d8145c0d081adacSHA1: c17aa63d8f090b08e05a0558fde91ca064b1e983ANALYSIS DATE: 2022-12-26T11:32:49ZTTPS: T1012,...

Malware Analysis – ransomware – fa2bac4ec3b4956d76019d84f32f742a

December 26, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: fa2bac4ec3b4956d76019d84f32f742aSHA1: de74a1b4d3f5b554da4c9f18f1dbda7b36bb50c8ANALYSIS DATE: 2022-12-26T11:07:03ZTTPS: T1005, T1081, T1491, T1112, T1107, T1490, T1130 ScoreMeaningExample10Known badA...

Malware Analysis – wannacry – da5eee93accd46fe8755b93a19ada407

December 26, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, ransomware, wormMD5: da5eee93accd46fe8755b93a19ada407SHA1: b85e778ccd3ce4248633c5954abefdd8816b5ac0ANALYSIS DATE: 2022-12-26T11:19:04ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – wannacry – 6e72ad805b4322612b9c9c7673a45635

December 26, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, ransomware, wormMD5: 6e72ad805b4322612b9c9c7673a45635SHA1: e3727e0d38ee247b654441df50aa1acdd328eb32ANALYSIS DATE: 2022-12-26T11:22:05ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Cobalt Stike Beacon Detected – 101[.]43[.]240[.]159:801

December 26, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 58[.]64[.]193[.]172:8800

December 26, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 5[.]181[.]86[.]249:443

December 26, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 1[.]116[.]160[.]60:80

December 26, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Daily Vulnerability Trends: Mon Dec 26 2022

December 26, 2022

Daily Vulnerability Trends (sourced from VulnMon) CVE NAMECVE DescriptionCVE-2022-32250net/netfilter/nf_tables_api.c in the Linux kernel through 5.18.1 allows a local user (able...

Malware Analysis – dcrat – 11def98517c93e2a955df827ed88a3a2

December 26, 2022

Score: 10 MALWARE FAMILY: dcratTAGS:family:dcrat, infostealer, rat, spyware, stealerMD5: 11def98517c93e2a955df827ed88a3a2SHA1: 12d175a93a7b161bd8d4d6b489e95f15e34ad283ANALYSIS DATE: 2022-12-25T20:57:58ZTTPS: T1005, T1081, T1082, T1053, T1130, T1112 ScoreMeaningExample10Known...

Malware Analysis – djvu – 011233d5915f5be50e2230f34741359a

December 26, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: 011233d5915f5be50e2230f34741359aSHA1: da8a2eee26fc9eef7bfdb96a3e6888e55ae11e25ANALYSIS DATE: 2022-12-25T21:33:43ZTTPS: T1082, T1053, T1130, T1112, T1060, T1222 ScoreMeaningExample10Known badA...

Malware Analysis – djvu – e6c155f10839a589cbbd3cd0b56bd8de

December 26, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: e6c155f10839a589cbbd3cd0b56bd8deSHA1: 5d2e4b74764ca85fead3b6e555657f2b609da3b4ANALYSIS DATE: 2022-12-25T21:07:21ZTTPS: T1053, T1130, T1112, T1060, T1222, T1082 ScoreMeaningExample10Known badA...

OSINT

Malware Analysis – djvu – ae21cdf16306059d4349c2ca9b0407a0

Malware Analysis – amadey – 4151aa03de133d36e235103956f5df73

Cobalt Stike Beacon Detected – 47[.]242[.]74[.]51:7676

Cobalt Stike Beacon Detected – 54[.]92[.]103[.]160:443

Malware Analysis – phobos – f8cd85837b695b2689a8f3dfb67d415b

Malware Analysis – evasion – d7a24de75b761cb98f580dafda4ba885

Malware Analysis – persistence – 40efcdc05f8d6151a51ae7ad769c6ee0

Malware Analysis – ransomware – bdfbe890594ca1ec7385f0b8b06d4fd2

Cobalt Stike Beacon Detected – 120[.]48[.]124[.]220:3333

Cobalt Stike Beacon Detected – 170[.]64[.]248[.]225:443

Cobalt Stike Beacon Detected – 195[.]189[.]99[.]114:9443

Cobalt Stike Beacon Detected – 1[.]116[.]160[.]39:80

Malware Analysis – amadey – 80ae4d81fab8357a6d8145c0d081adac

Malware Analysis – ransomware – fa2bac4ec3b4956d76019d84f32f742a

Malware Analysis – wannacry – da5eee93accd46fe8755b93a19ada407

Malware Analysis – wannacry – 6e72ad805b4322612b9c9c7673a45635

Cobalt Stike Beacon Detected – 101[.]43[.]240[.]159:801

Cobalt Stike Beacon Detected – 58[.]64[.]193[.]172:8800

Cobalt Stike Beacon Detected – 5[.]181[.]86[.]249:443

Cobalt Stike Beacon Detected – 1[.]116[.]160[.]60:80

Daily Vulnerability Trends: Mon Dec 26 2022

Malware Analysis – dcrat – 11def98517c93e2a955df827ed88a3a2

Malware Analysis – djvu – 011233d5915f5be50e2230f34741359a

Malware Analysis – djvu – e6c155f10839a589cbbd3cd0b56bd8de

[QILIN] – Ransomware Victim: www[.]afmco[.]jo

[FLOCKER] – Ransomware Victim: G*****n[.]com

[FLOCKER] – Ransomware Victim: H**u[.]i*v[.]tw

CVE Alert: CVE-2024-48916

CVE Alert: CVE-2025-8329

You may have missed