OSINT

Malware Analysis – djvu – 44080d162de67a9110817d62eacc222b

December 24, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 44080d162de67a9110817d62eacc222bSHA1: a5c04985805c04c3930bceeadc0ddb55a430ddf6ANALYSIS DATE: 2022-12-24T17:40:06ZTTPS: T1082, T1005, T1081, T1012, T1060, T1112,...

Malware Analysis – smokeloader – d3bffde4fa0e12abcbe5ecc10630f9ff

December 24, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: d3bffde4fa0e12abcbe5ecc10630f9ffSHA1: f36d4d840fe1cd3edab3148bdc89bfc7dcb243acANALYSIS DATE: 2022-12-24T17:34:05ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

LockBit 3.0 Ransomware Victim: aristopharma[.]com

December 24, 2022

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Malware Analysis – smokeloader – 647a46b2dfca464acac5fb0dc474c8a3

December 24, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 647a46b2dfca464acac5fb0dc474c8a3SHA1: b6e2894d8d071d3faff7cf227ff2f665e86518eaANALYSIS DATE: 2022-12-24T09:03:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 5df72ca427104352637a5ef056030e3b

December 24, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 5df72ca427104352637a5ef056030e3bSHA1: 626e79a6af439050ef99af38bc275d2116ee4e7aANALYSIS DATE: 2022-12-24T09:31:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 7d1c36a7f705e7ad6facd4e9621ee8b5

December 24, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 7d1c36a7f705e7ad6facd4e9621ee8b5SHA1: 848673dc5523002d241ee660ad3e592f4f52c652ANALYSIS DATE: 2022-12-24T09:13:30ZTTPS: T1012, T1082, T1005, T1081, T1060, T1112,...

Malware Analysis – evasion – 6e07363bcb0d53ab35788ca6355d4c9a

December 24, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealer, trojanMD5: 6e07363bcb0d53ab35788ca6355d4c9aSHA1: ff83f33d03f91f14896b6075f4c868b46ac192feANALYSIS DATE: 2022-12-24T09:28:23ZTTPS: T1031, T1053, T1107, T1490, T1112, T1088,...

Malware Analysis – bootkit – 3701dc535fb395d6a1fb557a3aeec5e9

December 24, 2022

Score: 10 MALWARE FAMILY: bootkitTAGS:bootkit, discovery, evasion, persistence, ransomware, spyware, stealer, trojanMD5: 3701dc535fb395d6a1fb557a3aeec5e9SHA1: ef517659229ddc6ecfc02481c3953ac9322dae35ANALYSIS DATE: 2022-12-24T09:47:02ZTTPS: T1060, T1112, T1012, T1082,...

Malware Analysis – djvu – ae54ef9519196ced8a45354ab938551f

December 24, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: ae54ef9519196ced8a45354ab938551fSHA1: 27d50e391bb3da764dd365fe53fbf538179b4d5cANALYSIS DATE: 2022-12-24T10:10:06ZTTPS: T1012, T1222, T1082, T1053, T1005, T1081,...

Cobalt Stike Beacon Detected – 43[.]139[.]225[.]176:443

December 24, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 47[.]114[.]151[.]215:8088

December 24, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – smokeloader – 53d8cc9b0d19488282cd39f464dddfc5

December 24, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 53d8cc9b0d19488282cd39f464dddfc5SHA1: 29faa33dc825038db12e1a883bb0f1fd3a946571ANALYSIS DATE: 2022-12-24T10:02:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 6febc6df81ab3b8f32c13a2dbe232676

December 24, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 6febc6df81ab3b8f32c13a2dbe232676SHA1: 50fec1c2b794a2663bfe0c1d189391e56c4061b5ANALYSIS DATE: 2022-12-24T10:33:08ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 4a9bff8242e34c49b4ac9380686ff219

December 24, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 4a9bff8242e34c49b4ac9380686ff219SHA1: 7d65d6a5ca3ef29cb4052a515b981e9e59f483fbANALYSIS DATE: 2022-12-24T10:27:18ZTTPS: T1053, T1005, T1081, T1012, T1082, T1222,...

Cobalt Stike Beacon Detected – 180[.]76[.]115[.]62:8989

December 24, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – 74315c762fbc50c9e128e4736af6451e

December 24, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: 74315c762fbc50c9e128e4736af6451eSHA1: 9676acee4631cba43064fcbcc07d2e5e145ec9a5ANALYSIS DATE: 2022-12-24T11:15:19ZTTPS: T1053, T1060, T1112, T1222, T1082, T1130 ScoreMeaningExample10Known badA...

Malware Analysis – smokeloader – 5265d31c93441df607ce7b0dae3e680e

December 24, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 5265d31c93441df607ce7b0dae3e680eSHA1: 557ca000136c84344aadf189710c22b2dc5e13a0ANALYSIS DATE: 2022-12-24T11:31:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 9babcbfae5216b1f3db8282790438586

December 24, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: 9babcbfae5216b1f3db8282790438586SHA1: e7c8fcc78bdaacaad85cacea73b209897f42f33aANALYSIS DATE: 2022-12-24T11:15:10ZTTPS: T1053, T1130, T1112, T1060, T1222, T1082 ScoreMeaningExample10Known badA...

Malware Analysis – djvu – 9cf5b0996cdf6ba6b34d85abdb85c0f5

December 24, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 9cf5b0996cdf6ba6b34d85abdb85c0f5SHA1: ff3f3db3868f37453335c0aa4fc0df30813769f0ANALYSIS DATE: 2022-12-24T10:41:27ZTTPS: T1222, T1082, T1053, T1012, T1005, T1081,...

OSINT

Malware Analysis – djvu – 44080d162de67a9110817d62eacc222b

Malware Analysis – smokeloader – d3bffde4fa0e12abcbe5ecc10630f9ff

LockBit 3.0 Ransomware Victim: aristopharma[.]com

Malware Analysis – smokeloader – 647a46b2dfca464acac5fb0dc474c8a3

Malware Analysis – smokeloader – 5df72ca427104352637a5ef056030e3b

Malware Analysis – djvu – 7d1c36a7f705e7ad6facd4e9621ee8b5

Malware Analysis – evasion – 6e07363bcb0d53ab35788ca6355d4c9a

Malware Analysis – bootkit – 3701dc535fb395d6a1fb557a3aeec5e9

Malware Analysis – djvu – ae54ef9519196ced8a45354ab938551f

Cobalt Stike Beacon Detected – 43[.]139[.]225[.]176:443

Cobalt Stike Beacon Detected – 47[.]114[.]151[.]215:8088

Malware Analysis – smokeloader – 53d8cc9b0d19488282cd39f464dddfc5

Malware Analysis – smokeloader – 6febc6df81ab3b8f32c13a2dbe232676

Malware Analysis – djvu – 4a9bff8242e34c49b4ac9380686ff219

Cobalt Stike Beacon Detected – 180[.]76[.]115[.]62:8989

Malware Analysis – djvu – 74315c762fbc50c9e128e4736af6451e

Malware Analysis – smokeloader – 5265d31c93441df607ce7b0dae3e680e

Malware Analysis – djvu – 9babcbfae5216b1f3db8282790438586

Malware Analysis – djvu – 9cf5b0996cdf6ba6b34d85abdb85c0f5

Daily Vulnerability Trends: Sat Dec 24 2022

Cobalt Stike Beacon Detected – 121[.]5[.]150[.]180:8054

Cobalt Stike Beacon Detected – 179[.]43[.]187[.]247:80

Cobalt Stike Beacon Detected – 124[.]223[.]181[.]21:8080

Cobalt Stike Beacon Detected – 35[.]72[.]188[.]81:443

[EVEREST] – Ransomware Victim: Bitbox

[INCRANSOM] – Ransomware Victim: fsl[.]org

[GLOBAL] – Ransomware Victim: RUKU Tore – Türen

CVE Alert: CVE-2025-5038

CVE Alert: CVE-2025-5043

You may have missed