OSINT

Malware Analysis – djvu – 5ac925dd0ed8f683443c4873fd48a37b

February 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:19, backdoor, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: 5ac925dd0ed8f683443c4873fd48a37bSHA1: 97ddc705341f4825fe41c738cab0373851c52132ANALYSIS DATE: 2023-02-01T05:46:20ZTTPS:...

Sandfly-Entropyscan – Tool To Detect Packed Or Encrypt ed Binaries Related To Malware, Finds Malicious Files And Linux Processes And Gives Output With Cryptographic Hashes

February 1, 2023

What is sandfly-entropyscan? sandfly-entropyscan is a utility to quickly scan files or running processes and report on their entropy (measure...

Cobalt Stike Beacon Detected – 89[.]185[.]85[.]247:80

February 1, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 35[.]153[.]50[.]171:80

February 1, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 182[.]61[.]13[.]166:8090

February 1, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 78[.]128[.]112[.]196:443

February 1, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Vice Society Ransomware Victim: Societa Italiana Brevetti SpA

January 31, 2023

Vice Society Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Vice Society Ransomware Victim: TechInsights

January 31, 2023

Vice Society Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Cobalt Stike Beacon Detected – 161[.]35[.]17[.]28:80

January 31, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 91[.]215[.]85[.]143:443

January 31, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 101[.]34[.]163[.]3:9999

January 31, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 107[.]189[.]28[.]121:80

January 31, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 180[.]76[.]154[.]33:443

January 31, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 23[.]227[.]196[.]194:80

January 31, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 209[.]141[.]52[.]22:80

January 31, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 43[.]139[.]8[.]152:9999

January 31, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 23[.]227[.]193[.]33:443

January 31, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 156[.]96[.]157[.]120:443

January 31, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 110[.]81[.]153[.]37:10443

January 31, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 1[.]15[.]99[.]189:7777

January 31, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – smokeloader – ef4734eb6342c1166b64c1597f8c1fed

January 31, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: ef4734eb6342c1166b64c1597f8c1fedSHA1: 598ad1a4ff2c5e4ed49e14ec89cfd871f9bb83eeANALYSIS DATE: 2023-01-31T09:10:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – discovery – 34d6da080af6ae29247f06bcae9292c5

January 31, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, evasion, persistence, ransomware, spyware, stealer, trojanMD5: 34d6da080af6ae29247f06bcae9292c5SHA1: 6b1397afa50fd65b5dc38aac8e6c33ff11f9a1ddANALYSIS DATE: 2023-01-31T10:46:05ZTTPS: T1012, T1082, T1112, T1120, T1102,...

Malware Analysis – discovery – f494e416737bbd1ea8af65d9bdfd6934

January 31, 2023

Score: 9 MALWARE FAMILY: discoveryTAGS:discovery, evasion, persistence, upxMD5: f494e416737bbd1ea8af65d9bdfd6934SHA1: 3de0d51ea664794278734c7b30d938ceb1495c47ANALYSIS DATE: 2023-01-31T10:32:51ZTTPS: T1082, T1012, T1060, T1112, T1130, T1102, T1018, T1497...

Malware Analysis – djvu – eb49b2fd2f173fa20b1ca9f7fd28f6cd

January 31, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: eb49b2fd2f173fa20b1ca9f7fd28f6cdSHA1: 57afd277746bb9b96970c379eb1e32719a8180f4ANALYSIS DATE: 2023-01-31T09:57:37ZTTPS: T1012, T1222, T1082, T1053,...

OSINT

Malware Analysis – djvu – 5ac925dd0ed8f683443c4873fd48a37b

Sandfly-Entropyscan – Tool To Detect Packed Or Encrypt ed Binaries Related To Malware, Finds Malicious Files And Linux Processes And Gives Output With Cryptographic Hashes

Cobalt Stike Beacon Detected – 89[.]185[.]85[.]247:80

Cobalt Stike Beacon Detected – 35[.]153[.]50[.]171:80

Cobalt Stike Beacon Detected – 182[.]61[.]13[.]166:8090

Cobalt Stike Beacon Detected – 78[.]128[.]112[.]196:443

Vice Society Ransomware Victim: Societa Italiana Brevetti SpA

Vice Society Ransomware Victim: TechInsights

Cobalt Stike Beacon Detected – 161[.]35[.]17[.]28:80

Cobalt Stike Beacon Detected – 91[.]215[.]85[.]143:443

Cobalt Stike Beacon Detected – 101[.]34[.]163[.]3:9999

Cobalt Stike Beacon Detected – 107[.]189[.]28[.]121:80

Cobalt Stike Beacon Detected – 180[.]76[.]154[.]33:443

Cobalt Stike Beacon Detected – 23[.]227[.]196[.]194:80

Cobalt Stike Beacon Detected – 209[.]141[.]52[.]22:80

Cobalt Stike Beacon Detected – 43[.]139[.]8[.]152:9999

Cobalt Stike Beacon Detected – 23[.]227[.]193[.]33:443

Cobalt Stike Beacon Detected – 156[.]96[.]157[.]120:443

Cobalt Stike Beacon Detected – 110[.]81[.]153[.]37:10443

Cobalt Stike Beacon Detected – 1[.]15[.]99[.]189:7777

Malware Analysis – smokeloader – ef4734eb6342c1166b64c1597f8c1fed

Malware Analysis – discovery – 34d6da080af6ae29247f06bcae9292c5

Malware Analysis – discovery – f494e416737bbd1ea8af65d9bdfd6934

Malware Analysis – djvu – eb49b2fd2f173fa20b1ca9f7fd28f6cd

Miljödata – 870,108 breached accounts

Cobalt Strike Beacon Detected – 119[.]91[.]203[.]199:88

Cobalt Strike Beacon Detected – 106[.]54[.]239[.]134:80

Cobalt Strike Beacon Detected – 81[.]69[.]98[.]230:50010

Cobalt Strike Beacon Detected – 103[.]43[.]18[.]10:80

You may have missed