OSINT

Malware Analysis – smokeloader – 463484338d38a607293add6cbb3e00a7

October 20, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 463484338d38a607293add6cbb3e00a7SHA1: 2f1886433a8d9ddae76c307804390f3078b2f19eANALYSIS DATE: 2022-10-20T08:42:06ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – e23c95d91c7786c48e5273833610046f

October 20, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: e23c95d91c7786c48e5273833610046fSHA1: cafcb78b479773cb1ddd5dfeeb3861e967a3772cANALYSIS DATE: 2022-10-20T09:02:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 81d8155a7b79464fc7a3d44e96cf9434

October 20, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 81d8155a7b79464fc7a3d44e96cf9434SHA1: 9646e3aa9fec2f8ff9628901850b30cd06f23d8dANALYSIS DATE: 2022-10-20T09:04:16ZTTPS: T1060, T1112, T1222, T1005,...

Malware Analysis – djvu – 9a6c2e678306a8ce57170cb9a55bbada

October 20, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 9a6c2e678306a8ce57170cb9a55bbadaSHA1: ea8b4aca2b630252f5751984708285476ba89df2ANALYSIS DATE: 2022-10-20T09:08:13ZTTPS: T1060, T1112, T1082, T1005,...

Cobalt Stike Beacon Detected – 91[.]213[.]50[.]75:80

October 20, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 206[.]81[.]13[.]205:443

October 20, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 23[.]224[.]42[.]16:80

October 20, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 152[.]89[.]196[.]33:4433

October 20, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – 1c6bb19ae533873990aaa818367bc3c1

October 20, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 1c6bb19ae533873990aaa818367bc3c1SHA1: 54c8df637d8482c6513063cddc3647e69b6e3591ANALYSIS DATE: 2022-10-20T09:51:01ZTTPS: T1082, T1130, T1112, T1012,...

Malware Analysis – smokeloader – 66d0352427e8fda1e99bff34113199ca

October 20, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 66d0352427e8fda1e99bff34113199caSHA1: 26aacac8b86bcf6d8bab4b8c82e5a7fdaafece3fANALYSIS DATE: 2022-10-20T09:27:24ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 851f7b783fe0dfcfb4d9befc8f167e95

October 20, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 851f7b783fe0dfcfb4d9befc8f167e95SHA1: 1e0683b9e3b8fa7695605c93eecb92ee7b4488bbANALYSIS DATE: 2022-10-20T09:51:01ZTTPS: T1005, T1081, T1222, T1012,...

Malware Analysis – djvu – f4a2cd44617ac4e483d616c0453e8ca5

October 20, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: f4a2cd44617ac4e483d616c0453e8ca5SHA1: a8541588032b692f419032c69cb93577545044d0ANALYSIS DATE: 2022-10-20T09:35:25ZTTPS: T1222, T1005, T1081, T1012,...

Cobalt Stike Beacon Detected – 206[.]119[.]205[.]200:443

October 20, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 206[.]119[.]205[.]66:443

October 20, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 206[.]119[.]205[.]213:443

October 20, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 188[.]241[.]240[.]137:80

October 20, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – 3ed0eeb175db5df7ac99df301e920ac4

October 20, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 3ed0eeb175db5df7ac99df301e920ac4SHA1: 4fa27e4a7dcee126ebbdcff41cfd739e3bb04685ANALYSIS DATE: 2022-10-20T10:31:15ZTTPS: T1060, T1112, T1082, T1053,...

Malware Analysis – ragnarlocker – 0a7194829f99e72104cefc3bc791c1e5

October 20, 2022

Score: 10 MALWARE FAMILY: ragnarlockerTAGS:family:ragnarlocker, bootkit, persistence, ransomwareMD5: 0a7194829f99e72104cefc3bc791c1e5SHA1: a1979bb993a079f7f8f23b893690985ca8c04da1ANALYSIS DATE: 2022-10-20T10:18:41ZTTPS: T1012, T1120, T1082, T1067, T1107, T1490 ScoreMeaningExample10Known badA...

Malware Analysis – danabot – a759c799500f95284ea4f9613279551a

October 20, 2022

Score: 10 MALWARE FAMILY: danabotTAGS:family:danabot, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, banker, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: a759c799500f95284ea4f9613279551aSHA1: 881a1d0a9657d14b90f74d2e55ba4bc502f506b3ANALYSIS...

Malware Analysis – darkside – 2cdb06b0f1bea8d0e28392d8181e39f0

October 20, 2022

Score: 10 MALWARE FAMILY: darksideTAGS:family:darkside, ransomwareMD5: 2cdb06b0f1bea8d0e28392d8181e39f0SHA1: 292a577213b2ca66b92f71ac277028233f6c8f08ANALYSIS DATE: 2022-10-20T10:56:53ZTTPS: T1491, T1112, T1130 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

OSINT

Malware Analysis – smokeloader – 463484338d38a607293add6cbb3e00a7

Malware Analysis – smokeloader – e23c95d91c7786c48e5273833610046f

Malware Analysis – djvu – 81d8155a7b79464fc7a3d44e96cf9434

Malware Analysis – djvu – 9a6c2e678306a8ce57170cb9a55bbada

Cobalt Stike Beacon Detected – 91[.]213[.]50[.]75:80

Cobalt Stike Beacon Detected – 206[.]81[.]13[.]205:443

Cobalt Stike Beacon Detected – 23[.]224[.]42[.]16:80

Cobalt Stike Beacon Detected – 152[.]89[.]196[.]33:4433

Malware Analysis – djvu – 1c6bb19ae533873990aaa818367bc3c1

Malware Analysis – smokeloader – 66d0352427e8fda1e99bff34113199ca

Malware Analysis – djvu – 851f7b783fe0dfcfb4d9befc8f167e95

Malware Analysis – djvu – f4a2cd44617ac4e483d616c0453e8ca5

Cobalt Stike Beacon Detected – 206[.]119[.]205[.]200:443

Cobalt Stike Beacon Detected – 206[.]119[.]205[.]66:443

Cobalt Stike Beacon Detected – 206[.]119[.]205[.]213:443

Cobalt Stike Beacon Detected – 188[.]241[.]240[.]137:80

Malware Analysis – djvu – 3ed0eeb175db5df7ac99df301e920ac4

Malware Analysis – ragnarlocker – 0a7194829f99e72104cefc3bc791c1e5

Malware Analysis – danabot – a759c799500f95284ea4f9613279551a

Malware Analysis – darkside – 2cdb06b0f1bea8d0e28392d8181e39f0

Cobalt Stike Beacon Detected – 74[.]208[.]219[.]146:80

Cobalt Stike Beacon Detected – 101[.]35[.]198[.]64:8013

Cobalt Stike Beacon Detected – 206[.]119[.]205[.]126:443

Cobalt Stike Beacon Detected – 206[.]119[.]205[.]237:443

Linux Foundation Tries To Play Peacemaker In Ongoing WordPress Scuffle

Japan’s Latest Moon Landing Written Off As A Failure After Ispace Probe Goesdark

Just 15 Buyers Are In Charge Of £14b In Uk Central Government Tech Spending

Schneier Tries To Rip The Rose Colored Ai Glasses From The Eyes Of Congress

Uncle Sam Puts $10m Bounty On Redline Dev And Russia Backed Cronies

You may have missed