OSINT

Malware Analysis – asyncrat – 7e3e4674ff8480cf2653ce1cd03998cd

November 14, 2022

Score: 10 MALWARE FAMILY: asyncratTAGS:family:asyncrat, botnet:windows update manager, evasion, ransomware, rat, spyware, stealer, upxMD5: 7e3e4674ff8480cf2653ce1cd03998cdSHA1: 35d97809832fa9fd3583dd63f58f39283c61257eANALYSIS DATE: 2022-11-14T16:45:57ZTTPS: T1005, T1081,...

Malware Analysis – djvu – 3fc9f410788283b73297b7472e35ddd3

November 14, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 3fc9f410788283b73297b7472e35ddd3SHA1: b48afa6f5177fa136f14ad6538f71e7614ccc855ANALYSIS DATE: 2022-11-14T17:12:01ZTTPS: T1012, T1005, T1081, T1082,...

Malware Analysis – amadey – ea0d0b9ace17fa512a03d29b7ced82d7

November 14, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:redline, family:smokeloader, family:vidar, botnet:123, botnet:517, botnet:@redlinevip cloud (tg: @fatherofcarders), botnet:boy, botnet:mario23_10, backdoor, collection, discovery,...

Malware Analysis – wannacry – 5e05425b6e422dbaf6965fef2d259190

November 14, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, persistence, ransomware, spyware, stealer, wormMD5: 5e05425b6e422dbaf6965fef2d259190SHA1: 8eea22f7bd1d14a510d90cd145b9af58889fbaf1ANALYSIS DATE: 2022-11-14T17:41:52ZTTPS: T1107, T1490, T1060, T1112, T1158,...

Massive Black hat SEO campaign used +15K WordPress sites

November 14, 2022

Experts warn of a malicious SEO campaign that has compromised over 15,000 WordPress websites to redirect visitors to fake Q&A portals....

KmsdBot, a new evasive bot for cryptomining activity and DDoS attacks

November 14, 2022

Researchers spotted a new evasive malware, tracked as KmsdBot, that infects systems via an SSH connection that uses weak credentials....

Unblob – Extract Files From Any Kind Of Container Formats

November 14, 2022

Download Unblob If you like the site, please consider joining the telegram channel or supporting us on Patreon using the...

Cobalt Stike Beacon Detected – 172[.]104[.]240[.]104:443

November 14, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 124[.]71[.]145[.]63:4433

November 14, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 180[.]76[.]105[.]82:8443

November 14, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 43[.]143[.]119[.]212:443

November 14, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 45[.]55[.]56[.]183:443

November 14, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 5[.]199[.]168[.]128:443

November 14, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 193[.]233[.]203[.]214:443

November 14, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Bug Bounty

BugCrowd Bug Bounty Disclosure: – Panel access at https://news-push-88.op-mobile.opera.com/. – By rahul0x01

November 14, 2022

The below information is fully automated and the information is captured from the BugCrowd Disclosure website. The information was correct...

Cobalt Stike Beacon Detected – 179[.]43[.]142[.]230:443

November 14, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 152[.]70[.]102[.]188:9998

November 14, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 120[.]79[.]72[.]3:9999

November 14, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 119[.]28[.]246[.]221:6666

November 14, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – smokeloader – b6fbb0dd67c9fd58bf9c7e60aeb3e9b8

November 14, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: b6fbb0dd67c9fd58bf9c7e60aeb3e9b8SHA1: 2d30a2db0ac43921dfdf0228f738c0884bf0bd83ANALYSIS DATE: 2022-11-14T09:30:39ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

OSINT

Malware Analysis – asyncrat – 7e3e4674ff8480cf2653ce1cd03998cd

Malware Analysis – djvu – 3fc9f410788283b73297b7472e35ddd3

Malware Analysis – amadey – ea0d0b9ace17fa512a03d29b7ced82d7

Malware Analysis – wannacry – 5e05425b6e422dbaf6965fef2d259190

Massive Black hat SEO campaign used +15K WordPress sites

KmsdBot, a new evasive bot for cryptomining activity and DDoS attacks

Unblob – Extract Files From Any Kind Of Container Formats

Cobalt Stike Beacon Detected – 172[.]104[.]240[.]104:443

Cobalt Stike Beacon Detected – 124[.]71[.]145[.]63:4433

Cobalt Stike Beacon Detected – 180[.]76[.]105[.]82:8443

Cobalt Stike Beacon Detected – 43[.]143[.]119[.]212:443

Cobalt Stike Beacon Detected – 45[.]55[.]56[.]183:443

Cobalt Stike Beacon Detected – 5[.]199[.]168[.]128:443

Cobalt Stike Beacon Detected – 193[.]233[.]203[.]214:443

BugCrowd Bug Bounty Disclosure: – Panel access at https://news-push-88.op-mobile.opera.com/. – By rahul0x01

Cobalt Stike Beacon Detected – 179[.]43[.]142[.]230:443

Cobalt Stike Beacon Detected – 152[.]70[.]102[.]188:9998

Cobalt Stike Beacon Detected – 120[.]79[.]72[.]3:9999

Cobalt Stike Beacon Detected – 119[.]28[.]246[.]221:6666

Malware Analysis – smokeloader – b6fbb0dd67c9fd58bf9c7e60aeb3e9b8

Cobalt Stike Beacon Detected – 43[.]142[.]190[.]164:9999

Cobalt Stike Beacon Detected – 5[.]44[.]42[.]44:443

Cobalt Stike Beacon Detected – 192[.]74[.]250[.]144:9999

Cobalt Stike Beacon Detected – 47[.]107[.]122[.]86:80

CVE Alert: CVE-2025-5815

CVE Alert: CVE-2024-38822

CVE Alert: CVE-2025-5938

CVE Alert: CVE-2025-5282

CVE Alert: CVE-2025-22236

You may have missed