OSINT

Malware Analysis – amadey – 114a29e4828e47605fb68bbda1c91cd4

November 16, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:asyncrat, family:dcrat, family:djvu, family:eternity, family:raccoon, family:redline, family:smokeloader, family:vidar, botnet:517, botnet:@redlinevip cloud (tg: @fatherofcarders), botnet:client6, botnet:dbffbdbc9786a5c270e6dd2d647e18ea,...

Malware Analysis – evasion – 06121671b9de18edfc74f1ca3c566001

November 16, 2022

Score: 8 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 06121671b9de18edfc74f1ca3c566001SHA1: 12d586ccb57197b5ea48ff978f6e59ed20a1f7a3ANALYSIS DATE: 2022-11-16T15:12:04ZTTPS: T1082, T1491, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – djvu – 4af869180d81d4cfb263e86d7161a18a

November 16, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 4af869180d81d4cfb263e86d7161a18aSHA1: 01a0428bb825147cde47c922f04b6e074f908ca0ANALYSIS DATE: 2022-11-16T15:16:16ZTTPS: T1060, T1112, T1082, T1005,...

CISA: Mozilla Releases Security Updates for Multiple Products

November 16, 2022

Mozilla Releases Security Updates for Multiple Products Mozilla has released security updates to address vulnerabilities in Thunderbird, Firefox ESR, and Firefox. An...

CISA: CISA and FBI Release Advisory on Iranian Government-Sponsored APT Actors Compromising Federal Network

November 16, 2022

CISA and FBI Release Advisory on Iranian Government-Sponsored APT Actors Compromising Federal Network Today, CISA and the Federal Bureau of...

Malware Analysis – lockbit – 48aa442a0670b65a82eee99c1ed1ac78

November 16, 2022

Score: 10 MALWARE FAMILY: lockbitTAGS:family:lockbit, discovery, evasion, persistence, ransomwareMD5: 48aa442a0670b65a82eee99c1ed1ac78SHA1: 12117609b746257a6cdd2808dcb50c6af9c1810dANALYSIS DATE: 2022-11-16T17:50:04ZTTPS: T1490, T1046, T1082, T1107, T1060, T1112 ScoreMeaningExample10Known...

Malware Analysis – smokeloader – 5ca04c00a108bc8a1ebc6f2acb206914

November 16, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 5ca04c00a108bc8a1ebc6f2acb206914SHA1: 1aa8c66127e76ee084070eb985d9a5f776bde6d4ANALYSIS DATE: 2022-11-16T17:52:07ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – amadey – 7960146c3ce0103f7c63f99952955c3c

November 16, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:dcrat, family:djvu, family:eternity, family:raccoon, family:redline, family:smokeloader, family:vidar, botnet:3m, botnet:517, botnet:@redlinevip cloud (tg: @fatherofcarders), botnet:dbffbdbc9786a5c270e6dd2d647e18ea, botnet:mario23_10,...

Malware Analysis – djvu – 5b95e84a91c972f557690b38cddd8fd4

November 16, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 5b95e84a91c972f557690b38cddd8fd4SHA1: 9c8edebbd80c013835a370484d173fa5abc8053aANALYSIS DATE: 2022-11-16T16:32:01ZTTPS: T1053, T1005, T1081, T1012,...

New RapperBot Campaign targets game servers with DDoS attacks

November 16, 2022

Fortinet researchers discovered new samples of RapperBot used to build a botnet to launch Distributed DDoS attacks against game servers....

TripleCross – A Linux eBPF Rootkit With A Backdoor, C2, Library Injection, Execution Hijacking, Persistence And Stealth Capabilities.

November 16, 2022

TripleCross is a Linux eBPF rootkit that demonstrates the offensive capabilities of the eBPF technology. TripleCross is inspired by previous...

Bug Bounty

BugCrowd Bug Bounty Disclosure: – Impersonation via Broken Link Hijacking on https://sv.hellosign.com – By CoffeeAddict_exe

November 16, 2022

The below information is fully automated and the information is captured from the BugCrowd Disclosure website. The information was correct...

Cobalt Stike Beacon Detected – 2[.]56[.]173[.]252:2086

November 16, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 18[.]208[.]157[.]91:443

November 16, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Bug Bounty

BugCrowd Bug Bounty Disclosure: – Panel access at https://news-push-88.op-mobile.opera.com/. – By rahul0x01

November 16, 2022

The below information is fully automated and the information is captured from the BugCrowd Disclosure website. The information was correct...

Cobalt Stike Beacon Detected – 42[.]194[.]209[.]253:6666

November 16, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 104[.]244[.]73[.]220:80

November 16, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – amadey – 6567aa75c8bfb976b2c2ac054c94972c

November 16, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:redline, family:smokeloader, family:vidar, botnet:123, botnet:517, botnet:mario23_10, backdoor, collection, discovery, evasion, infostealer, persistence, ransomware, spyware,...

Malware Analysis – djvu – 22aa49033009f6967fd9a53f40b0fa66

November 16, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 22aa49033009f6967fd9a53f40b0fa66SHA1: fa550aea311c22d187df218d909d65dd2e9329e3ANALYSIS DATE: 2022-11-16T09:04:27ZTTPS: T1005, T1081, T1060, T1112,...

Cobalt Stike Beacon Detected – 119[.]3[.]73[.]208:9999

November 16, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 119[.]91[.]194[.]71:443

November 16, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 43[.]138[.]231[.]8:80

November 16, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 118[.]99[.]52[.]220:80

November 16, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – discovery – 4daaf587e2a1dd41691a4f95a7778083

November 16, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: 4daaf587e2a1dd41691a4f95a7778083SHA1: 945526bbea76aa2e4660ca15842b25eac8600753ANALYSIS DATE: 2022-11-16T09:16:00ZTTPS: T1112, T1042, T1012, T1120, T1082, T1060 ScoreMeaningExample10Known badA malware...

OSINT

Malware Analysis – amadey – 114a29e4828e47605fb68bbda1c91cd4

Malware Analysis – evasion – 06121671b9de18edfc74f1ca3c566001

Malware Analysis – djvu – 4af869180d81d4cfb263e86d7161a18a

CISA: Mozilla Releases Security Updates for Multiple Products

CISA: CISA and FBI Release Advisory on Iranian Government-Sponsored APT Actors Compromising Federal Network

Malware Analysis – lockbit – 48aa442a0670b65a82eee99c1ed1ac78

Malware Analysis – smokeloader – 5ca04c00a108bc8a1ebc6f2acb206914

Malware Analysis – amadey – 7960146c3ce0103f7c63f99952955c3c

Malware Analysis – djvu – 5b95e84a91c972f557690b38cddd8fd4

New RapperBot Campaign targets game servers with DDoS attacks

TripleCross – A Linux eBPF Rootkit With A Backdoor, C2, Library Injection, Execution Hijacking, Persistence And Stealth Capabilities.

BugCrowd Bug Bounty Disclosure: – Impersonation via Broken Link Hijacking on https://sv.hellosign.com – By CoffeeAddict_exe

Cobalt Stike Beacon Detected – 2[.]56[.]173[.]252:2086

Cobalt Stike Beacon Detected – 18[.]208[.]157[.]91:443

BugCrowd Bug Bounty Disclosure: – Panel access at https://news-push-88.op-mobile.opera.com/. – By rahul0x01

Cobalt Stike Beacon Detected – 42[.]194[.]209[.]253:6666

Cobalt Stike Beacon Detected – 104[.]244[.]73[.]220:80

Malware Analysis – amadey – 6567aa75c8bfb976b2c2ac054c94972c

Malware Analysis – djvu – 22aa49033009f6967fd9a53f40b0fa66

Cobalt Stike Beacon Detected – 119[.]3[.]73[.]208:9999

Cobalt Stike Beacon Detected – 119[.]91[.]194[.]71:443

Cobalt Stike Beacon Detected – 43[.]138[.]231[.]8:80

Cobalt Stike Beacon Detected – 118[.]99[.]52[.]220:80

Malware Analysis – discovery – 4daaf587e2a1dd41691a4f95a7778083

CVE Alert: CVE-2025-5815

CVE Alert: CVE-2024-38822

CVE Alert: CVE-2025-5938

CVE Alert: CVE-2025-5282

CVE Alert: CVE-2025-22236

You may have missed