OSINT

Malware Analysis – amadey – ea0d0b9ace17fa512a03d29b7ced82d7

November 14, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:redline, family:smokeloader, family:vidar, botnet:123, botnet:517, botnet:@redlinevip cloud (tg: @fatherofcarders), botnet:boy, botnet:mario23_10, backdoor, collection, discovery,...

Malware Analysis – wannacry – 5e05425b6e422dbaf6965fef2d259190

November 14, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, persistence, ransomware, spyware, stealer, wormMD5: 5e05425b6e422dbaf6965fef2d259190SHA1: 8eea22f7bd1d14a510d90cd145b9af58889fbaf1ANALYSIS DATE: 2022-11-14T17:41:52ZTTPS: T1107, T1490, T1060, T1112, T1158,...

Massive Black hat SEO campaign used +15K WordPress sites

November 14, 2022

Experts warn of a malicious SEO campaign that has compromised over 15,000 WordPress websites to redirect visitors to fake Q&A portals....

KmsdBot, a new evasive bot for cryptomining activity and DDoS attacks

November 14, 2022

Researchers spotted a new evasive malware, tracked as KmsdBot, that infects systems via an SSH connection that uses weak credentials....

Unblob – Extract Files From Any Kind Of Container Formats

November 14, 2022

Download Unblob If you like the site, please consider joining the telegram channel or supporting us on Patreon using the...

Cobalt Stike Beacon Detected – 172[.]104[.]240[.]104:443

November 14, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 124[.]71[.]145[.]63:4433

November 14, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 180[.]76[.]105[.]82:8443

November 14, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 43[.]143[.]119[.]212:443

November 14, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 45[.]55[.]56[.]183:443

November 14, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 5[.]199[.]168[.]128:443

November 14, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 193[.]233[.]203[.]214:443

November 14, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Bug Bounty

BugCrowd Bug Bounty Disclosure: – Panel access at https://news-push-88.op-mobile.opera.com/. – By rahul0x01

November 14, 2022

The below information is fully automated and the information is captured from the BugCrowd Disclosure website. The information was correct...

Cobalt Stike Beacon Detected – 179[.]43[.]142[.]230:443

November 14, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 152[.]70[.]102[.]188:9998

November 14, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 120[.]79[.]72[.]3:9999

November 14, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 119[.]28[.]246[.]221:6666

November 14, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – smokeloader – b6fbb0dd67c9fd58bf9c7e60aeb3e9b8

November 14, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: b6fbb0dd67c9fd58bf9c7e60aeb3e9b8SHA1: 2d30a2db0ac43921dfdf0228f738c0884bf0bd83ANALYSIS DATE: 2022-11-14T09:30:39ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Cobalt Stike Beacon Detected – 43[.]142[.]190[.]164:9999

November 14, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 5[.]44[.]42[.]44:443

November 14, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 192[.]74[.]250[.]144:9999

November 14, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 47[.]107[.]122[.]86:80

November 14, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – evasion – ffc6b559c24b8d82afcb5c01bb5619d9

November 14, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: ffc6b559c24b8d82afcb5c01bb5619d9SHA1: 8e068e9c486769716d9685f85687b531ab3a88cfANALYSIS DATE: 2022-11-14T10:03:03ZTTPS: T1490, T1059, T1107, T1082, T1012, T1120, T1485 ScoreMeaningExample10Known badA malware...

Malware Analysis – smokeloader – 3f6b1c1cd133937bbe3781b9a28c91af

November 14, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 3f6b1c1cd133937bbe3781b9a28c91afSHA1: a56615cffbaef08aa53712dbb5b1f66f177cf097ANALYSIS DATE: 2022-11-14T09:38:24ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

OSINT

Malware Analysis – amadey – ea0d0b9ace17fa512a03d29b7ced82d7

Malware Analysis – wannacry – 5e05425b6e422dbaf6965fef2d259190

Massive Black hat SEO campaign used +15K WordPress sites

KmsdBot, a new evasive bot for cryptomining activity and DDoS attacks

Unblob – Extract Files From Any Kind Of Container Formats

Cobalt Stike Beacon Detected – 172[.]104[.]240[.]104:443

Cobalt Stike Beacon Detected – 124[.]71[.]145[.]63:4433

Cobalt Stike Beacon Detected – 180[.]76[.]105[.]82:8443

Cobalt Stike Beacon Detected – 43[.]143[.]119[.]212:443

Cobalt Stike Beacon Detected – 45[.]55[.]56[.]183:443

Cobalt Stike Beacon Detected – 5[.]199[.]168[.]128:443

Cobalt Stike Beacon Detected – 193[.]233[.]203[.]214:443

BugCrowd Bug Bounty Disclosure: – Panel access at https://news-push-88.op-mobile.opera.com/. – By rahul0x01

Cobalt Stike Beacon Detected – 179[.]43[.]142[.]230:443

Cobalt Stike Beacon Detected – 152[.]70[.]102[.]188:9998

Cobalt Stike Beacon Detected – 120[.]79[.]72[.]3:9999

Cobalt Stike Beacon Detected – 119[.]28[.]246[.]221:6666

Malware Analysis – smokeloader – b6fbb0dd67c9fd58bf9c7e60aeb3e9b8

Cobalt Stike Beacon Detected – 43[.]142[.]190[.]164:9999

Cobalt Stike Beacon Detected – 5[.]44[.]42[.]44:443

Cobalt Stike Beacon Detected – 192[.]74[.]250[.]144:9999

Cobalt Stike Beacon Detected – 47[.]107[.]122[.]86:80

Malware Analysis – evasion – ffc6b559c24b8d82afcb5c01bb5619d9

Malware Analysis – smokeloader – 3f6b1c1cd133937bbe3781b9a28c91af

[NIGHTSPIRE] – Ransomware Victim: Al Tadawi Specialty Hospital

CVE Alert: CVE-2025-26691

CVE Alert: CVE-2025-35005

CVE Alert: CVE-2025-35004

CVE Alert: CVE-2025-5847

You may have missed