OSINT

Malware Analysis – danabot – 2d9969371e0847cb39a4b515f7f55759

October 19, 2022

Score: 10 MALWARE FAMILY: danabotTAGS:family:danabot, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, banker, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 2d9969371e0847cb39a4b515f7f55759SHA1: 96154d705ca47764b062468c9937ac28eda7df70ANALYSIS...

Malware Analysis – eternity – 80094cdfc9743ea1e4decfe916105b76

October 19, 2022

Score: 10 MALWARE FAMILY: eternityTAGS:family:eternity, evasion, ransomwareMD5: 80094cdfc9743ea1e4decfe916105b76SHA1: b26f5fd083dc51eb5149e821f4361382ea43c319ANALYSIS DATE: 2022-10-19T09:12:09ZTTPS: T1053, T1107, T1490, T1082, T1018 ScoreMeaningExample10Known badA malware family...

Malware Analysis – djvu – dc38da1da1e88bac04121824d2abb81a

October 19, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: dc38da1da1e88bac04121824d2abb81aSHA1: 101f00bcbba421c4f14a20a7da382acbfe900e52ANALYSIS DATE: 2022-10-19T09:47:30ZTTPS: T1222, T1060, T1112, T1005,...

Malware Analysis – danabot – 072433c8fab1e14873361e2a95ec5d37

October 19, 2022

Score: 10 MALWARE FAMILY: danabotTAGS:family:danabot, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, banker, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 072433c8fab1e14873361e2a95ec5d37SHA1: 8d1b707184f7f20950643bc82db590edd081a71bANALYSIS...

Malware Analysis – djvu – 0ffeb9f5001377ea8c199cf13dcd5f2b

October 19, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 0ffeb9f5001377ea8c199cf13dcd5f2bSHA1: 644bc255288ee4a7664540e1c55872fdb533bc6dANALYSIS DATE: 2022-10-19T09:39:49ZTTPS: T1005, T1081, T1222, T1053,...

Malware Analysis – djvu – 45534d9fae89d8bd0166236fef70aac1

October 19, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: 45534d9fae89d8bd0166236fef70aac1SHA1: a45ee6c9777446f3f1687cd2f70f3aa3e480b296ANALYSIS DATE: 2022-10-19T09:38:35ZTTPS: T1053, T1060, T1112, T1222, T1082, T1012 ScoreMeaningExample10Known badA...

Malware Analysis – blackbasta – 6a202e9a95f58938d02385e31d43ed87

October 19, 2022

Score: 10 MALWARE FAMILY: blackbastaTAGS:family:blackbasta, ransomwareMD5: 6a202e9a95f58938d02385e31d43ed87SHA1: 53628c7a155ccb7af1135140083939018d3587f1ANALYSIS DATE: 2022-10-19T10:40:19ZTTPS: T1107, T1490, T1491, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ransomware – f5c9c7b404aa41bb2bbc1704afeb9f0d

October 19, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: f5c9c7b404aa41bb2bbc1704afeb9f0dSHA1: 1ca01cd00899330b918678d5f0ee00ab94d26f89ANALYSIS DATE: 2022-10-19T10:40:23ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – blackbasta – 0c69e91c2f54978ae3103b26686b2610

October 19, 2022

Score: 10 MALWARE FAMILY: blackbastaTAGS:family:blackbasta, ransomwareMD5: 0c69e91c2f54978ae3103b26686b2610SHA1: 3e3b113a5ab64e03ffe86e0fa9a2163816f9ecdfANALYSIS DATE: 2022-10-19T10:40:26ZTTPS: T1107, T1490, T1491, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – danabot – ae489c5fec00f4363d3367b5a995a8db

October 19, 2022

Score: 10 MALWARE FAMILY: danabotTAGS:family:danabot, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, banker, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: ae489c5fec00f4363d3367b5a995a8dbSHA1: eb0e5e3e21b4ce9995b4f570eed9e393a8d2f8e4ANALYSIS...

Cobalt Stike Beacon Detected – 69[.]49[.]245[.]24:8080

October 19, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 106[.]13[.]206[.]236:8011

October 19, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – persistence – 60f87cba4fc4edc6a22d5dd65827e9b4

October 19, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 60f87cba4fc4edc6a22d5dd65827e9b4SHA1: 1daa253da17f83939ccf0a6ddf6578570daaee54ANALYSIS DATE: 2022-10-19T10:40:40ZTTPS: T1107, T1490, T1091, T1060, T1112, T1005, T1081, T1082...

Malware Analysis – ransomware – af3175967e229bbc607bc32699cef621

October 19, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: af3175967e229bbc607bc32699cef621SHA1: 683449dd00992bff104e987a130eca526cd39afbANALYSIS DATE: 2022-10-19T10:40:31ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 91504a2349db14afb99e62b5d6f693d4

October 19, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 91504a2349db14afb99e62b5d6f693d4SHA1: 90a1df9e4812850e95545d07509472b0614c8f71ANALYSIS DATE: 2022-10-19T10:40:34ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – persistence – f21bcc4d9dd94342c1602e96534002b6

October 19, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: f21bcc4d9dd94342c1602e96534002b6SHA1: 1a7e9f7896a02df7e9729e481890a4ee82daac1eANALYSIS DATE: 2022-10-19T10:40:46ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091, T1060, T1112...

Cobalt Stike Beacon Detected – 168[.]100[.]11[.]84:80

October 19, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 1[.]15[.]67[.]80:443

October 19, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 5[.]8[.]18[.]242:443

October 19, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 49[.]232[.]144[.]57:80

October 19, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Daily Vulnerability Trends: Wed Oct 19 2022

October 19, 2022

Daily Vulnerability Trends (sourced from VulnMon) CVE NAMECVE DescriptionCVE-2022-42948 No description provided CVE-2022-40684An authentication bypass using an alternate path or...

Microsoft Office 365 Message Encryption (OME) doesn’t ensure confidentiality

October 19, 2022

A bug in the message encryption mechanism used by Microsoft in Office 365 can allow to access the contents of the...

Malware Analysis – djvu – f41b9e7741b3c6ea33a947e85f8ecd89

October 19, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, stealer, trojan, vmprotectMD5: f41b9e7741b3c6ea33a947e85f8ecd89SHA1: 1d17879310cf6ae6d3388f29bfc3ddc062c2d980ANALYSIS DATE: 2022-10-18T20:09:37ZTTPS:...

Malware Analysis – ransomware – 3bd4ed1833f9ebf0c572cb573169536c

October 19, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 3bd4ed1833f9ebf0c572cb573169536cSHA1: a589f3a6991d4b9bddc598616b4f1372a2d318e2ANALYSIS DATE: 2022-10-18T20:00:18ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

OSINT

Malware Analysis – danabot – 2d9969371e0847cb39a4b515f7f55759

Malware Analysis – eternity – 80094cdfc9743ea1e4decfe916105b76

Malware Analysis – djvu – dc38da1da1e88bac04121824d2abb81a

Malware Analysis – danabot – 072433c8fab1e14873361e2a95ec5d37

Malware Analysis – djvu – 0ffeb9f5001377ea8c199cf13dcd5f2b

Malware Analysis – djvu – 45534d9fae89d8bd0166236fef70aac1

Malware Analysis – blackbasta – 6a202e9a95f58938d02385e31d43ed87

Malware Analysis – ransomware – f5c9c7b404aa41bb2bbc1704afeb9f0d

Malware Analysis – blackbasta – 0c69e91c2f54978ae3103b26686b2610

Malware Analysis – danabot – ae489c5fec00f4363d3367b5a995a8db

Cobalt Stike Beacon Detected – 69[.]49[.]245[.]24:8080

Cobalt Stike Beacon Detected – 106[.]13[.]206[.]236:8011

Malware Analysis – persistence – 60f87cba4fc4edc6a22d5dd65827e9b4

Malware Analysis – ransomware – af3175967e229bbc607bc32699cef621

Malware Analysis – ransomware – 91504a2349db14afb99e62b5d6f693d4

Malware Analysis – persistence – f21bcc4d9dd94342c1602e96534002b6

Cobalt Stike Beacon Detected – 168[.]100[.]11[.]84:80

Cobalt Stike Beacon Detected – 1[.]15[.]67[.]80:443

Cobalt Stike Beacon Detected – 5[.]8[.]18[.]242:443

Cobalt Stike Beacon Detected – 49[.]232[.]144[.]57:80

Daily Vulnerability Trends: Wed Oct 19 2022

Microsoft Office 365 Message Encryption (OME) doesn’t ensure confidentiality

Malware Analysis – djvu – f41b9e7741b3c6ea33a947e85f8ecd89

Malware Analysis – ransomware – 3bd4ed1833f9ebf0c572cb573169536c

CVE Alert: CVE-2025-47641

CVE Alert: CVE-2025-47640

CVE Alert: CVE-2025-47637

CVE Alert: CVE-2025-47642

CVE Alert: CVE-2025-47631

You may have missed