OSINT

Malware Analysis – djvu – 20e8743f652a666da6770e142705e9e5

March 6, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: 20e8743f652a666da6770e142705e9e5SHA1: 8209ee7464b1712fd75858a2c14ee655ff7235bdANALYSIS DATE: 2023-03-06T16:43:56ZTTPS: T1060, T1112, T1222, T1082, T1053 ScoreMeaningExample10Known badA malware...

Malware Analysis – blackcat – 4f85f4ffb94178e88d1580dcccf22278

March 6, 2023

Score: 10 MALWARE FAMILY: blackcatTAGS:family:blackcat, ransomwareMD5: 4f85f4ffb94178e88d1580dcccf22278SHA1: f42714fc7c462b4352421a80e760f62e551baea9ANALYSIS DATE: 2023-03-06T17:03:12ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – ransomware – abfb88a1d4545ccab5f028d83561a2d4

March 6, 2023

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: abfb88a1d4545ccab5f028d83561a2d4SHA1: b8f0985b9197fa84750fc3a5e5405dfcbdb9a8eaANALYSIS DATE: 2023-03-06T17:21:49ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – 3a4f29721c1c8166183a2812dac96e6e

March 6, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: 3a4f29721c1c8166183a2812dac96e6eSHA1: 5bedf652f9a7173e8eb9279d058051c38d9fd4f7ANALYSIS DATE: 2023-03-06T17:20:49ZTTPS: T1082, T1053, T1060, T1112, T1222 ScoreMeaningExample10Known badA malware...

Malware Analysis – djvu – 9009f2a67b7b67bdd11caf7d6a967ce6

March 6, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: 9009f2a67b7b67bdd11caf7d6a967ce6SHA1: 2ad00d826e43bd2b99114f65f1ec9365ef1aa7dcANALYSIS DATE: 2023-03-06T17:26:54ZTTPS: T1082, T1012, T1053, T1222, T1060, T1112 ScoreMeaningExample10Known badA...

Vice Society Ransomware Victim: Kventa Kft

March 6, 2023

Vice Society Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Malware Analysis – evasion – 6ba0afb7279fdb931ea86cf69d1941cc

March 6, 2023

Score: 8 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 6ba0afb7279fdb931ea86cf69d1941ccSHA1: 50ced7c61c72559952f2eeb81f25dfdf4ead6eb2ANALYSIS DATE: 2023-03-06T09:50:04ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – ransomware – ee57cb6c0e2292903b33adf62a2a7810

March 6, 2023

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: ee57cb6c0e2292903b33adf62a2a7810SHA1: 7715b284d29880a7f4e1df067d030410e1213a58ANALYSIS DATE: 2023-03-06T10:06:03ZTTPS: T1012, T1120, T1082, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ransomware – 166c61424c79b082c52448d66f66156f

March 6, 2023

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 166c61424c79b082c52448d66f66156fSHA1: 0cbd03202b50932f24da07bc91f0aa1e579177f4ANALYSIS DATE: 2023-03-06T10:07:04ZTTPS: T1107, T1490, T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ransomware – d8c43ed3de8a96a1772e4a87f8cc7685

March 6, 2023

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: d8c43ed3de8a96a1772e4a87f8cc7685SHA1: fecc46b4c1d8e3a12a04ab32451ddbe799af2fd7ANALYSIS DATE: 2023-03-06T10:08:07ZTTPS: T1012, T1120, T1082, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ransomware – c5a954205e76a29ede66cde99baaec6f

March 6, 2023

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: c5a954205e76a29ede66cde99baaec6fSHA1: cf027bb97d18b2b255613c3bc0e27964088f2a54ANALYSIS DATE: 2023-03-06T10:09:05ZTTPS: T1012, T1120, T1082, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Cobalt Stike Beacon Detected – 118[.]195[.]172[.]110:8012

March 6, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 81[.]68[.]136[.]116:80

March 6, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 101[.]43[.]215[.]118:9090

March 6, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – 70a8331725cb661616a8082d5b943a35

March 6, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 70a8331725cb661616a8082d5b943a35SHA1: c88a37a811ab884a26ecdf4b29ffce8387a08fd2ANALYSIS DATE: 2023-03-06T10:37:39ZTTPS: T1005, T1081, T1060, T1112, T1222,...

Malware Analysis – djvu – a3cb7cdc9bfe987e3a9d962a3a704c75

March 6, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: a3cb7cdc9bfe987e3a9d962a3a704c75SHA1: 3aafc32da690dd5b16f920b23fe3d28aa3bb3ea3ANALYSIS DATE: 2023-03-06T10:13:49ZTTPS: T1082, T1012, T1005, T1081, T1060,...

Malware Analysis – djvu – 0b8588379ad0cc771f8d05e0fbf72487

March 6, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 0b8588379ad0cc771f8d05e0fbf72487SHA1: 39975389c5a3020cd51a65af82279466cf679d37ANALYSIS DATE: 2023-03-06T10:43:40ZTTPS: T1012, T1082, T1005, T1081, T1222,...

Malware Analysis – djvu – aced83bf00dcddbe5b90f7f43ccd272f

March 6, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: aced83bf00dcddbe5b90f7f43ccd272fSHA1: 39e6dffb435a2c506f14252fc8acdfb0135e2111ANALYSIS DATE: 2023-03-06T10:20:36ZTTPS: T1012, T1082, T1005, T1081, T1060,...

Cobalt Stike Beacon Detected – 179[.]43[.]187[.]185:8080

March 6, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 43[.]142[.]87[.]35:443

March 6, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 84[.]32[.]34[.]97:80

March 6, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 20[.]246[.]185[.]142:80

March 6, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – 76a1e1bfd28d7125af316d6e6b72ad4a

March 6, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 76a1e1bfd28d7125af316d6e6b72ad4aSHA1: b07d28b37e1ba0c3ff482171550599d4ea6c159dANALYSIS DATE: 2023-03-06T10:45:13ZTTPS: T1012, T1053, T1060, T1112, T1005,...

Malware Analysis – chaos – 84dbf5b66139cf86f87ac1d420c736c9

March 6, 2023

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, ransomware, spyware, stealerMD5: 84dbf5b66139cf86f87ac1d420c736c9SHA1: 4ca604aec1c66194182b25c4cc0fdf17ef9eeb7fANALYSIS DATE: 2023-03-06T11:20:06ZTTPS: T1005, T1081, T1082 ScoreMeaningExample10Known badA malware family was...

OSINT

Malware Analysis – djvu – 20e8743f652a666da6770e142705e9e5

Malware Analysis – blackcat – 4f85f4ffb94178e88d1580dcccf22278

Malware Analysis – ransomware – abfb88a1d4545ccab5f028d83561a2d4

Malware Analysis – djvu – 3a4f29721c1c8166183a2812dac96e6e

Malware Analysis – djvu – 9009f2a67b7b67bdd11caf7d6a967ce6

Vice Society Ransomware Victim: Kventa Kft

Malware Analysis – evasion – 6ba0afb7279fdb931ea86cf69d1941cc

Malware Analysis – ransomware – ee57cb6c0e2292903b33adf62a2a7810

Malware Analysis – ransomware – 166c61424c79b082c52448d66f66156f

Malware Analysis – ransomware – d8c43ed3de8a96a1772e4a87f8cc7685

Malware Analysis – ransomware – c5a954205e76a29ede66cde99baaec6f

Cobalt Stike Beacon Detected – 118[.]195[.]172[.]110:8012

Cobalt Stike Beacon Detected – 81[.]68[.]136[.]116:80

Cobalt Stike Beacon Detected – 101[.]43[.]215[.]118:9090

Malware Analysis – djvu – 70a8331725cb661616a8082d5b943a35

Malware Analysis – djvu – a3cb7cdc9bfe987e3a9d962a3a704c75

Malware Analysis – djvu – 0b8588379ad0cc771f8d05e0fbf72487

Malware Analysis – djvu – aced83bf00dcddbe5b90f7f43ccd272f

Cobalt Stike Beacon Detected – 179[.]43[.]187[.]185:8080

Cobalt Stike Beacon Detected – 43[.]142[.]87[.]35:443

Cobalt Stike Beacon Detected – 84[.]32[.]34[.]97:80

Cobalt Stike Beacon Detected – 20[.]246[.]185[.]142:80

Malware Analysis – djvu – 76a1e1bfd28d7125af316d6e6b72ad4a

Malware Analysis – chaos – 84dbf5b66139cf86f87ac1d420c736c9

Cobalt Strike Beacon Detected – 121[.]41[.]167[.]80:80

Cobalt Strike Beacon Detected – 38[.]190[.]224[.]63:80

Cobalt Strike Beacon Detected – 152[.]32[.]251[.]78:80

Cobalt Strike Beacon Detected – 156[.]233[.]233[.]134:80

Cobalt Strike Beacon Detected – 124[.]220[.]164[.]98:80

You may have missed