OSINT

Malware Analysis – evasion – 3d5811564acf2f7726833cd0f0f3e82c

October 30, 2022

Score: 8 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 3d5811564acf2f7726833cd0f0f3e82cSHA1: d7cebf3154d488de7483b3ed19a115eeb5f02896ANALYSIS DATE: 2022-10-29T21:23:04ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – – e03466a56b1cbd1ab65949e82c1e8a05

October 30, 2022

Score: 10 MALWARE FAMILY: TAGS:MD5: e03466a56b1cbd1ab65949e82c1e8a05SHA1: 159c6917dd528df56ef0c4f41d06d2f567e54b3fANALYSIS DATE: 2022-10-29T21:48:44ZTTPS: T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Cobalt Stike Beacon Detected – 18[.]191[.]177[.]87:443

October 30, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 119[.]29[.]82[.]40:443

October 30, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 106[.]55[.]2[.]194:4545

October 30, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 185[.]130[.]45[.]159:443

October 30, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – wannacry – c811454bbc5b86a0621a7cafb34db16f

October 30, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: c811454bbc5b86a0621a7cafb34db16fSHA1: 981715e9b580cecc57006b326886acc08c52c18fANALYSIS DATE: 2022-10-29T22:40:23ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – djvu – 7fdba86bba0508054fd1f058a6a2d134

October 30, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, family:vidar, botnet:1752, botnet:google2, botnet:mario23_10, botnet:slovarik15btc, botnet:slovarik1btc, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware,...

Malware Analysis – djvu – 3ec20eda511b082c02840cf7cbafd6e1

October 30, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, family:vidar, botnet:1752, botnet:517, botnet:google2, botnet:mario23_10, botnet:slovarik15btc, botnet:slovarik1btc, backdoor, collection, discovery, infostealer, persistence, ransomware,...

Malware Analysis – avaddon – ad3bc99ab03f6fcef0215c0eb185bf6f

October 30, 2022

Score: 10 MALWARE FAMILY: avaddonTAGS:family:avaddon, evasion, ransomware, trojanMD5: ad3bc99ab03f6fcef0215c0eb185bf6fSHA1: 135d0497aa12587d1970ff2e6d2eb9bc401c898fANALYSIS DATE: 2022-10-29T22:44:52ZTTPS: T1082, T1088, T1089, T1112, T1012, T1120, T1107, T1490...

Posh C2 Detected – 116[.]203[.]51[.]117:443

October 30, 2022

The Information provided at the time of posting was detected as "Posh C2". Depending on when you are viewing this...

Twilio discloses another security incident that took place in June

October 29, 2022

Twilio suffered another brief security incident in June 2022, the attack was conducted by the same threat actor of the August hack....

A massive cyberattack hit Slovak and Polish Parliaments

October 29, 2022

The Slovak and Polish parliaments were hit by a massive cyber attack, and the voting system in Slovakia’s legislature was...

LockBit 3.0 Ransomware Victim: fvsra[.]org

October 29, 2022

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

How will Twitter change under Elon Musk?

October 29, 2022

Cybhorus CEO Pierluigi Paganini talks to TRT World about Elon Musk completing his $44 billion deal to buy Twitter and...

Threatest – Threatest Is A Go Framework For End-To-End Testing Threat Detection Rules

October 29, 2022

Threatest is a Go framework for testing threat detection end-to-end. Threatest allows you to detonate an attack technique, and verify...

LockBit 3.0 Ransomware Victim: greenstamp[.]co[.]jp

October 29, 2022

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Cobalt Stike Beacon Detected – 107[.]172[.]206[.]242:9999

October 29, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 124[.]222[.]151[.]30:8080

October 29, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 41[.]216[.]183[.]180:80

October 29, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 8[.]129[.]79[.]245:80

October 29, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 163[.]123[.]142[.]173:443

October 29, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 35[.]202[.]0[.]124:6000

October 29, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 89[.]147[.]108[.]116:443

October 29, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

OSINT

Malware Analysis – evasion – 3d5811564acf2f7726833cd0f0f3e82c

Malware Analysis – – e03466a56b1cbd1ab65949e82c1e8a05

Cobalt Stike Beacon Detected – 18[.]191[.]177[.]87:443

Cobalt Stike Beacon Detected – 119[.]29[.]82[.]40:443

Cobalt Stike Beacon Detected – 106[.]55[.]2[.]194:4545

Cobalt Stike Beacon Detected – 185[.]130[.]45[.]159:443

Malware Analysis – wannacry – c811454bbc5b86a0621a7cafb34db16f

Malware Analysis – djvu – 7fdba86bba0508054fd1f058a6a2d134

Malware Analysis – djvu – 3ec20eda511b082c02840cf7cbafd6e1

Malware Analysis – avaddon – ad3bc99ab03f6fcef0215c0eb185bf6f

Posh C2 Detected – 116[.]203[.]51[.]117:443

Twilio discloses another security incident that took place in June

A massive cyberattack hit Slovak and Polish Parliaments

LockBit 3.0 Ransomware Victim: fvsra[.]org

How will Twitter change under Elon Musk?

Threatest – Threatest Is A Go Framework For End-To-End Testing Threat Detection Rules

LockBit 3.0 Ransomware Victim: greenstamp[.]co[.]jp

Cobalt Stike Beacon Detected – 107[.]172[.]206[.]242:9999

Cobalt Stike Beacon Detected – 124[.]222[.]151[.]30:8080

Cobalt Stike Beacon Detected – 41[.]216[.]183[.]180:80

Cobalt Stike Beacon Detected – 8[.]129[.]79[.]245:80

Cobalt Stike Beacon Detected – 163[.]123[.]142[.]173:443

Cobalt Stike Beacon Detected – 35[.]202[.]0[.]124:6000

Cobalt Stike Beacon Detected – 89[.]147[.]108[.]116:443

[FLOCKER] – Ransomware Victim: Lts[.]com[.]vn

Microsoft Edge Multiple Vulnerabilities

Crims Stole 40,000 People’s Data From Our Network, Admits Publisher Leeenterprises

CVE Alert: CVE-2025-5611

CVE Alert: CVE-2025-5690

You may have missed