OSINT

Malware Analysis – evasion – a9cb0417f7043a209dc488a9a9571d30

November 9, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealer, trojanMD5: a9cb0417f7043a209dc488a9a9571d30SHA1: d39d3dcf0a50e41ddbab64e9ab0376f3522bdd00ANALYSIS DATE: 2022-11-08T08:51:24ZTTPS: T1060, T1112, T1158, T1082, T1088, T1089,...

Malware Analysis – discovery – 034a5d389fc637d08c53eb0b683f1e81

November 9, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploitMD5: 034a5d389fc637d08c53eb0b683f1e81SHA1: 86b0b3bd1a6cb3a4d4920206760874db099e4957ANALYSIS DATE: 2022-11-08T08:51:26ZTTPS: T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – discovery – 01d2a08c2976f6f7f3a6579d1d64aa26

November 9, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploitMD5: 01d2a08c2976f6f7f3a6579d1d64aa26SHA1: 0f4fae2be30446e39ce0e14a5763dd7c41ff4b0fANALYSIS DATE: 2022-11-08T08:41:48ZTTPS: T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Cobalt Stike Beacon Detected – 194[.]26[.]29[.]239:80

November 9, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 84[.]32[.]128[.]34:8080

November 9, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 60[.]247[.]225[.]30:8876

November 9, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 106[.]55[.]27[.]103:8999

November 9, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – discovery – 0ce83cefec533da1b55a19fb5fbc5a91

November 9, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploitMD5: 0ce83cefec533da1b55a19fb5fbc5a91SHA1: 274d8fadc082bad379f72e459b6be282db079aeeANALYSIS DATE: 2022-11-08T09:27:48ZTTPS: T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – persistence – 230b304784833a5e42db0fe22722dcc7

November 9, 2022

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 230b304784833a5e42db0fe22722dcc7SHA1: 4e0b222862e3faa5d32b98658c00e33ddb3fccfeANALYSIS DATE: 2022-11-08T09:28:23ZTTPS: T1112, T1005, T1081, T1060, T1082, T1107, T1490 ScoreMeaningExample10Known...

Malware Analysis – discovery – 0f6c5bd2ff2951c703254e88358f3c86

November 9, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploitMD5: 0f6c5bd2ff2951c703254e88358f3c86SHA1: c8e62693552848629a5adeca555430bfacffd368ANALYSIS DATE: 2022-11-08T09:25:00ZTTPS: T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – discovery – 0fb771688917c5671a684524f5d24fc0

November 9, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploitMD5: 0fb771688917c5671a684524f5d24fc0SHA1: afeb6220e74d1d23852af19da9b6ee456e008402ANALYSIS DATE: 2022-11-08T09:20:48ZTTPS: T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Cobalt Stike Beacon Detected – 147[.]182[.]226[.]203:80

November 9, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 107[.]189[.]7[.]248:443

November 9, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 141[.]164[.]54[.]234:8080

November 9, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 107[.]148[.]201[.]158:7444

November 9, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – discovery – 0ea23ae31c365f335d8f7ae2bd9102e0

November 9, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploitMD5: 0ea23ae31c365f335d8f7ae2bd9102e0SHA1: 55ec98cf8e28a6bb9466110d7011d8047fe4fc9eANALYSIS DATE: 2022-11-08T09:29:41ZTTPS: T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – djvu – 31854b87dba99a326982933cdb4a9611

November 9, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: 31854b87dba99a326982933cdb4a9611SHA1: b2e7386fe7b33d88aedde54778c53ee3853a790aANALYSIS DATE: 2022-11-09T10:11:50ZTTPS: T1053, T1060, T1112, T1222, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – banker – 95d71b5c7a22c7075a199d0f088588d0

November 9, 2022

Score: 8 MALWARE FAMILY: bankerTAGS:banker, ransomwareMD5: 95d71b5c7a22c7075a199d0f088588d0SHA1: 54d6b2b90e3f07135570069e96e7500996eafd9aANALYSIS DATE: 2022-11-09T09:19:03ZTTPS: T1102 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – amadey – 1f594c5730b19bf59bdd158107f69649

November 9, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:redline, family:smokeloader, botnet:gg, botnet:mario23_10, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, trojanMD5: 1f594c5730b19bf59bdd158107f69649SHA1: 13bd3a1ca67e6cf38052c4af3e4aaba6966b3c14ANALYSIS...

Malware Analysis – djvu – fef3f504d69c78a46bf73e3bbfd2c15a

November 9, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: fef3f504d69c78a46bf73e3bbfd2c15aSHA1: 3bed6f795e142fa7d76041660a950c0aac48d69aANALYSIS DATE: 2022-11-09T10:37:44ZTTPS: T1060, T1112, T1222, T1082, T1012 ScoreMeaningExample10Known badA malware...

Malware Analysis – chaos – 143281e40426d479af7df3ce87ba726c

November 9, 2022

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, ransomware, spyware, stealerMD5: 143281e40426d479af7df3ce87ba726cSHA1: 1a6ee7dd14214e6fbf3f0e8360ffcbe0c18cb9d0ANALYSIS DATE: 2022-11-09T11:12:04ZTTPS: T1082, T1005, T1081, T1107, T1490 ScoreMeaningExample10Known badA malware...

Malware Analysis – flubot – c090102914f9d558dca69c875428946f

November 9, 2022

Score: 10 MALWARE FAMILY: flubotTAGS:family:flubot, banker, evasion, infostealer, ransomware, trojanMD5: c090102914f9d558dca69c875428946fSHA1: 4887d7a53823bee74d8610f6ba8d0a6163064c33ANALYSIS DATE: 2022-11-09T11:04:27ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – dcrat – b27e540aef37c99f3cfd2766c2e61784

November 9, 2022

Score: 10 MALWARE FAMILY: dcratTAGS:family:dcrat, discovery, evasion, infostealer, rat, trojanMD5: b27e540aef37c99f3cfd2766c2e61784SHA1: c516b74daec17d1bc788c54433cf10899ee07e92ANALYSIS DATE: 2022-11-09T11:26:42ZTTPS: T1089, T1112, T1031, T1082, T1012, T1057...

Bug Bounty

BugCrowd Bug Bounty Disclosure: – Panel access at https://news-push-88.op-mobile.opera.com/. – By rahul0x01

November 9, 2022

The below information is fully automated and the information is captured from the BugCrowd Disclosure website. The information was correct...

OSINT

Malware Analysis – evasion – a9cb0417f7043a209dc488a9a9571d30

Malware Analysis – discovery – 034a5d389fc637d08c53eb0b683f1e81

Malware Analysis – discovery – 01d2a08c2976f6f7f3a6579d1d64aa26

Cobalt Stike Beacon Detected – 194[.]26[.]29[.]239:80

Cobalt Stike Beacon Detected – 84[.]32[.]128[.]34:8080

Cobalt Stike Beacon Detected – 60[.]247[.]225[.]30:8876

Cobalt Stike Beacon Detected – 106[.]55[.]27[.]103:8999

Malware Analysis – discovery – 0ce83cefec533da1b55a19fb5fbc5a91

Malware Analysis – persistence – 230b304784833a5e42db0fe22722dcc7

Malware Analysis – discovery – 0f6c5bd2ff2951c703254e88358f3c86

Malware Analysis – discovery – 0fb771688917c5671a684524f5d24fc0

Cobalt Stike Beacon Detected – 147[.]182[.]226[.]203:80

Cobalt Stike Beacon Detected – 107[.]189[.]7[.]248:443

Cobalt Stike Beacon Detected – 141[.]164[.]54[.]234:8080

Cobalt Stike Beacon Detected – 107[.]148[.]201[.]158:7444

Malware Analysis – discovery – 0ea23ae31c365f335d8f7ae2bd9102e0

Malware Analysis – djvu – 31854b87dba99a326982933cdb4a9611

Malware Analysis – banker – 95d71b5c7a22c7075a199d0f088588d0

Malware Analysis – amadey – 1f594c5730b19bf59bdd158107f69649

Malware Analysis – djvu – fef3f504d69c78a46bf73e3bbfd2c15a

Malware Analysis – chaos – 143281e40426d479af7df3ce87ba726c

Malware Analysis – flubot – c090102914f9d558dca69c875428946f

Malware Analysis – dcrat – b27e540aef37c99f3cfd2766c2e61784

BugCrowd Bug Bounty Disclosure: – Panel access at https://news-push-88.op-mobile.opera.com/. – By rahul0x01

CVE Alert: CVE-2025-5815

CVE Alert: CVE-2024-38822

CVE Alert: CVE-2025-5938

CVE Alert: CVE-2025-5282

CVE Alert: CVE-2025-22236

You may have missed