OSINT

Malware Analysis – smokeloader – 55ce7bedbb562c58727b47abef769f27

January 27, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 55ce7bedbb562c58727b47abef769f27SHA1: d2625eca492c2b43189febfb16c1ecbda5be6fdaANALYSIS DATE: 2023-01-26T23:33:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – evasion – 00c34bd8bd72d2efdd70fe6737687246

January 27, 2023

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomwareMD5: 00c34bd8bd72d2efdd70fe6737687246SHA1: 165c93db4ef01a071281c7b334a8bd940d53d45fANALYSIS DATE: 2023-01-26T23:57:02ZTTPS: T1490, T1060, T1112, T1031, T1562, T1489 ScoreMeaningExample10Known badA malware...

CISA: JCDC Announces 2023 Planning Agenda

January 26, 2023

JCDC Announces 2023 Planning Agenda Today, the Joint Cyber Defense Collaborative (JCDC) announced its 2023 Planning Agenda. This release marks...

Malware Analysis – discovery – 1800fe2f1abdc23120b03b7b3630fa1d

January 26, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, ransomwareMD5: 1800fe2f1abdc23120b03b7b3630fa1dSHA1: 69f87b010a46c77e3aa93507e422f7781922b937ANALYSIS DATE: 2023-01-26T15:08:24ZTTPS: T1082, T1012 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – discovery – e9aa3add39a7cd937c7f2886602ce9b1

January 26, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: e9aa3add39a7cd937c7f2886602ce9b1SHA1: 7f161fe9e9693238ae82e8c07600716e6959b740ANALYSIS DATE: 2023-01-26T16:02:00ZTTPS: T1082, T1012, T1060 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – ff811751380e00d1e0f9a43645c6155e

January 26, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:19, backdoor, discovery, persistence, ransomware, stealer, trojan, vmprotectMD5: ff811751380e00d1e0f9a43645c6155eSHA1: 997b34aa9abd66c83ef06e49032385dc53e55338ANALYSIS DATE: 2023-01-26T15:03:14ZTTPS: T1012,...

Royal Ransomware Victim: Travis County Sheriffs Officers Association

January 26, 2023

RoyalRansomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the...

Royal Ransomware Victim: ServiceMaster

January 26, 2023

RoyalRansomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the...

Malware Analysis – djvu – 802c3dd045b2277aa0846689e152892d

January 26, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:19, backdoor, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: 802c3dd045b2277aa0846689e152892dSHA1: ea895467c292406be2472debbaec4685d29f8d6dANALYSIS DATE: 2023-01-26T16:11:32ZTTPS:...

Malware Analysis – djvu – ce2daf9e687edbeb4d78d41abbab4736

January 26, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: ce2daf9e687edbeb4d78d41abbab4736SHA1: ab9a7fd9b64a7b28fe3dfc3a04eb3b057dfdef33ANALYSIS DATE: 2023-01-26T16:40:34ZTTPS: T1005, T1081, T1060, T1112,...

Malware Analysis – gafgyt – 90276982cc921f646f74f8310ef8cd6a

January 26, 2023

Score: 10 MALWARE FAMILY: gafgytTAGS:family:gafgyt, family:plugx, family:redline, botnet, discovery, exploit, infostealer, persistence, trojanMD5: 90276982cc921f646f74f8310ef8cd6aSHA1: 37d5ff4e70485bbcc6e4ef6fa08d3b7839012d0fANALYSIS DATE: 2023-01-26T16:47:40ZTTPS: T1012, T1082, T1130,...

Malware Analysis – smokeloader – 9ea4f8811d333a11401a102e8bc84c78

January 26, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 9ea4f8811d333a11401a102e8bc84c78SHA1: b246b1aa87de2a8fa7770371ff53ee3e0e4f449dANALYSIS DATE: 2023-01-26T16:36:10ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 9a0ea0a71406b61a6ec0bf4408f5898e

January 26, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 9a0ea0a71406b61a6ec0bf4408f5898eSHA1: 5c893181fb54cbd9db3b0b6af8cf6fe07df80c88ANALYSIS DATE: 2023-01-26T17:32:34ZTTPS: T1222, T1082, T1005, T1081,...

Malware Analysis – discovery – 6b43663e875f7f6cbb40fe72cae01b9b

January 26, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: 6b43663e875f7f6cbb40fe72cae01b9bSHA1: 1c32ca96df9b3ebe1a1f163baf1999ce564ae438ANALYSIS DATE: 2023-01-26T17:51:39ZTTPS: T1082, T1060, T1112, T1012, T1130 ScoreMeaningExample10Known badA malware family...

Malware Analysis – djvu – d37b8714a55b734644d3f88ecb6da612

January 26, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:19, backdoor, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: d37b8714a55b734644d3f88ecb6da612SHA1: 67fd5834a7f0819c2ba06b4ed21c9a0876296c58ANALYSIS DATE: 2023-01-26T17:40:22ZTTPS:...

Malware Analysis – joker – dea8911e2f66aad91aaa2c1afb40c697

January 26, 2023

Score: 10 MALWARE FAMILY: jokerTAGS:family:joker, evasion, infostealer, ransomware, trojanMD5: dea8911e2f66aad91aaa2c1afb40c697SHA1: 6aed964342314fc7fd5c0c3cb6f2ef1814472916ANALYSIS DATE: 2023-01-26T17:36:03ZTTPS: T1102 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

5f1574b107f23743f8353781079ce1d7dbd24671a86f8de9f7fec980f15c4b37

GUAC – Aggregates Software Security Metadata Into A High Fidelity Graph Database

January 26, 2023

Note: GUAC is under active development - if you are interested in contributing, please look at contributor guide and the...

Royal Ransomware Victim: IOC

January 26, 2023

RoyalRansomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the...

Vice Society Ransomware Victim: New Partners

January 26, 2023

Vice Society Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Vice Society Ransomware Victim: CloudCall &
emoney Home Loans

January 26, 2023

Vice Society Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Malware Analysis – smokeloader – 5138399605906d20f0d997f76a455305

January 26, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 5138399605906d20f0d997f76a455305SHA1: 1c3d6a4e2e3c06654cd6ce9a63df125285cc39ecANALYSIS DATE: 2023-01-26T09:23:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 1e26a5b4fef1212594a1a80192b5af49

January 26, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 1e26a5b4fef1212594a1a80192b5af49SHA1: 805eab0ee48f53b202a4e9e518d957630b06483dANALYSIS DATE: 2023-01-26T09:10:44ZTTPS: T1060, T1112, T1222, T1053,...

Malware Analysis – discovery – 69a60a65668851b6ddb406e3094b2e86

January 26, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: 69a60a65668851b6ddb406e3094b2e86SHA1: 484a781471ed7227ed6636122fdbac56e9895b3fANALYSIS DATE: 2023-01-26T10:29:17ZTTPS: T1060, T1112, T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family...

Malware Analysis – djvu – afd4bd2d1bf9a2648a0ddfd0bd572e57

January 26, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: afd4bd2d1bf9a2648a0ddfd0bd572e57SHA1: 25c7285f2d5da15e1d60945ccbac73b6ae04fc33ANALYSIS DATE: 2023-01-26T09:30:51ZTTPS: T1012, T1222, T1082, T1005,...

OSINT

Malware Analysis – smokeloader – 55ce7bedbb562c58727b47abef769f27

Malware Analysis – evasion – 00c34bd8bd72d2efdd70fe6737687246

CISA: JCDC Announces 2023 Planning Agenda

Malware Analysis – discovery – 1800fe2f1abdc23120b03b7b3630fa1d

Malware Analysis – discovery – e9aa3add39a7cd937c7f2886602ce9b1

Malware Analysis – djvu – ff811751380e00d1e0f9a43645c6155e

Royal Ransomware Victim: Travis County Sheriffs Officers Association

Royal Ransomware Victim: ServiceMaster

Malware Analysis – djvu – 802c3dd045b2277aa0846689e152892d

Malware Analysis – djvu – ce2daf9e687edbeb4d78d41abbab4736

Malware Analysis – gafgyt – 90276982cc921f646f74f8310ef8cd6a

Malware Analysis – smokeloader – 9ea4f8811d333a11401a102e8bc84c78

Malware Analysis – djvu – 9a0ea0a71406b61a6ec0bf4408f5898e

Malware Analysis – discovery – 6b43663e875f7f6cbb40fe72cae01b9b

Malware Analysis – djvu – d37b8714a55b734644d3f88ecb6da612

Malware Analysis – joker – dea8911e2f66aad91aaa2c1afb40c697

GUAC – Aggregates Software Security Metadata Into A High Fidelity Graph Database

Royal Ransomware Victim: IOC

Vice Society Ransomware Victim: New Partners

Vice Society Ransomware Victim: CloudCall &
emoney Home Loans

Malware Analysis – smokeloader – 5138399605906d20f0d997f76a455305

Malware Analysis – djvu – 1e26a5b4fef1212594a1a80192b5af49

Malware Analysis – discovery – 69a60a65668851b6ddb406e3094b2e86

Malware Analysis – djvu – afd4bd2d1bf9a2648a0ddfd0bd572e57

Cobalt Strike Beacon Detected – 119[.]91[.]203[.]199:88

Cobalt Strike Beacon Detected – 106[.]54[.]239[.]134:80

Cobalt Strike Beacon Detected – 81[.]69[.]98[.]230:50010

Cobalt Strike Beacon Detected – 103[.]43[.]18[.]10:80

Cobalt Strike Beacon Detected – 38[.]190[.]198[.]55:80

You may have missed