OSINT

Malware Analysis – lockbit – 37b5a15357d7104206489317e7396c22

October 21, 2022

Score: 10 MALWARE FAMILY: lockbitTAGS:family:lockbit, ransomwareMD5: 37b5a15357d7104206489317e7396c22SHA1: bc7ae22e6bef74a38092184d0254f96167077561ANALYSIS DATE: 2022-10-20T21:18:59ZTTPS: T1491, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Cobalt Stike Beacon Detected – 69[.]49[.]245[.]24:443

October 21, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 185[.]55[.]243[.]110:80

October 21, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 45[.]32[.]76[.]239:80

October 21, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 91[.]213[.]50[.]95:80

October 21, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – ransomware – 0c533ce909e6e0328cb285d408d9873a

October 21, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 0c533ce909e6e0328cb285d408d9873aSHA1: 33196aa595a0fda0287638e3797f7da70649a812ANALYSIS DATE: 2022-10-20T22:20:42ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – 294f0079be0500676c0daf0961109ec5

October 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 294f0079be0500676c0daf0961109ec5SHA1: ef46e964614465743e19c05f5500edf9dbaaa2e1ANALYSIS DATE: 2022-10-20T22:16:16ZTTPS: T1060, T1112, T1005, T1081,...

Malware Analysis – danabot – d9119720c1ef1797a58fe86dd7b5b3bb

October 21, 2022

Score: 10 MALWARE FAMILY: danabotTAGS:family:danabot, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, banker, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: d9119720c1ef1797a58fe86dd7b5b3bbSHA1: 347b115971c3b4de1c43b5bc1885f55672f94a50ANALYSIS...

Malware Analysis – djvu – 5d49d3557dcb4a0d8569a9f796c8586f

October 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 5d49d3557dcb4a0d8569a9f796c8586fSHA1: 0f41d3863d187b312b9f44d6f8844c0caa941bdbANALYSIS DATE: 2022-10-20T21:50:52ZTTPS: T1060, T1112, T1012, T1082,...

Cobalt Stike Beacon Detected – 206[.]119[.]205[.]82:443

October 21, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 206[.]119[.]205[.]51:443

October 21, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 188[.]241[.]240[.]135:443

October 21, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 206[.]119[.]205[.]161:443

October 21, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – persistence – 37d706f41b61151e39c7a524c6f06078

October 21, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 37d706f41b61151e39c7a524c6f06078SHA1: 6a1ee980e63889ba03bec520be5fc3217d60de0aANALYSIS DATE: 2022-10-20T22:40:18ZTTPS: T1107, T1490, T1091, T1060, T1112, T1005, T1081, T1082...

Malware Analysis – danabot – 29dfdcebb44982e7dfa5e4de32c63930

October 21, 2022

Score: 10 MALWARE FAMILY: danabotTAGS:family:danabot, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, banker, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 29dfdcebb44982e7dfa5e4de32c63930SHA1: 3c5c325977ade7d7973193fe02ded7934d129dbfANALYSIS...

Malware Analysis – djvu – 8ee2efd7996707befe2ca2bf4cdfc789

October 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 8ee2efd7996707befe2ca2bf4cdfc789SHA1: 176dfff1a8c12f0574b99292807c12ba11a1f04bANALYSIS DATE: 2022-10-20T22:33:10ZTTPS: T1060, T1112, T1222, T1082,...

Malware Analysis – djvu – 7be74bb040f92184a672419efc77a496

October 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 7be74bb040f92184a672419efc77a496SHA1: c52058414af3863166837603d527bbc80a661740ANALYSIS DATE: 2022-10-20T22:31:12ZTTPS: T1082, T1005, T1081, T1012,...

Cobalt Stike Beacon Detected – 42[.]193[.]125[.]133:443

October 21, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 117[.]52[.]18[.]87:80

October 21, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 206[.]119[.]205[.]218:443

October 21, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 206[.]119[.]205[.]46:443

October 21, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – smokeloader – 248dd76b7d66b2f80f64ebfbf3370a7c

October 21, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 248dd76b7d66b2f80f64ebfbf3370a7cSHA1: 7244aeeaa57ca5b2c18932fc15d1638ed0dd4e8dANALYSIS DATE: 2022-10-20T22:44:52ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ransomware – 9e348def7efcaa8313170d7b62a54986

October 21, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 9e348def7efcaa8313170d7b62a54986SHA1: 4fd08bd3ed1c781b663e4745d942b2fabe0a13b4ANALYSIS DATE: 2022-10-20T22:40:23ZTTPS: T1107, T1490, T1091, T1005, T1081, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – wannacry – 4ec905ca34582ff0931c1813a63febe1

October 21, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: 4ec905ca34582ff0931c1813a63febe1SHA1: 6fdae2ec1763e345adcd8c956855b588b0c78ed4ANALYSIS DATE: 2022-10-20T22:40:42ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

OSINT

Malware Analysis – lockbit – 37b5a15357d7104206489317e7396c22

Cobalt Stike Beacon Detected – 69[.]49[.]245[.]24:443

Cobalt Stike Beacon Detected – 185[.]55[.]243[.]110:80

Cobalt Stike Beacon Detected – 45[.]32[.]76[.]239:80

Cobalt Stike Beacon Detected – 91[.]213[.]50[.]95:80

Malware Analysis – ransomware – 0c533ce909e6e0328cb285d408d9873a

Malware Analysis – djvu – 294f0079be0500676c0daf0961109ec5

Malware Analysis – danabot – d9119720c1ef1797a58fe86dd7b5b3bb

Malware Analysis – djvu – 5d49d3557dcb4a0d8569a9f796c8586f

Cobalt Stike Beacon Detected – 206[.]119[.]205[.]82:443

Cobalt Stike Beacon Detected – 206[.]119[.]205[.]51:443

Cobalt Stike Beacon Detected – 188[.]241[.]240[.]135:443

Cobalt Stike Beacon Detected – 206[.]119[.]205[.]161:443

Malware Analysis – persistence – 37d706f41b61151e39c7a524c6f06078

Malware Analysis – danabot – 29dfdcebb44982e7dfa5e4de32c63930

Malware Analysis – djvu – 8ee2efd7996707befe2ca2bf4cdfc789

Malware Analysis – djvu – 7be74bb040f92184a672419efc77a496

Cobalt Stike Beacon Detected – 42[.]193[.]125[.]133:443

Cobalt Stike Beacon Detected – 117[.]52[.]18[.]87:80

Cobalt Stike Beacon Detected – 206[.]119[.]205[.]218:443

Cobalt Stike Beacon Detected – 206[.]119[.]205[.]46:443

Malware Analysis – smokeloader – 248dd76b7d66b2f80f64ebfbf3370a7c

Malware Analysis – ransomware – 9e348def7efcaa8313170d7b62a54986

Malware Analysis – wannacry – 4ec905ca34582ff0931c1813a63febe1

CVE Alert: CVE-2025-5814

CVE Alert: CVE-2025-5303

CVE Alert: CVE-2025-47601

Linux Foundation Tries To Play Peacemaker In Ongoing WordPress Scuffle

Japan’s Latest Moon Landing Written Off As A Failure After Ispace Probe Goesdark

You may have missed