OSINT

Malware Analysis – – 2c86df67b639224a469cf7113f2e6000

February 8, 2023

Score: 10 MALWARE FAMILY: TAGS:MD5: 2c86df67b639224a469cf7113f2e6000SHA1: 56a8dd5ac769bcfb5e0b3de112bc45065aea0a14ANALYSIS DATE: 2023-02-07T21:26:38ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – – 54164f1bc24c8f7461ca009292808e58

February 8, 2023

Score: 1 MALWARE FAMILY: TAGS:MD5: 54164f1bc24c8f7461ca009292808e58SHA1: f9433d8a074ca074d54b6cc4475799a3332f0e1dANALYSIS DATE: 2023-02-07T22:36:44ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – smokeloader – 4e86a9673a6474a976a2983aac9d2cdf

February 8, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 4e86a9673a6474a976a2983aac9d2cdfSHA1: 8fb25be31fbeff95c7d3796f045927c095d95089ANALYSIS DATE: 2023-02-07T22:33:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – ab799e62d3827019ce3fe43f09273801

February 8, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:gozi, family:laplas, family:smokeloader, botnet:1001, backdoor, banker, clipper, discovery, isfb, persistence, ransomware, stealer, trojanMD5: ab799e62d3827019ce3fe43f09273801SHA1: 494f24b36bcf152ea3ddca396a55d326801911edANALYSIS...

Malware Analysis – djvu – 2e992d7f74ed9ca786654c960e96dc2c

February 8, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 2e992d7f74ed9ca786654c960e96dc2cSHA1: 1e3344a6d8086866171ebae328f6ad45c90976dcANALYSIS DATE: 2023-02-07T22:21:25ZTTPS: T1060, T1112, T1222, T1053,...

Malware Analysis – djvu – 6bc008d5e95ba85a97485f7eadcaada8

February 7, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 6bc008d5e95ba85a97485f7eadcaada8SHA1: 3dd89c29b186e4aa2a20267e5dd5ddfdf0d9e709ANALYSIS DATE: 2023-02-07T16:47:06ZTTPS: T1053, T1130, T1112, T1222,...

Malware Analysis – smokeloader – 2df7d13ddf98555c1c140b60fee0cb11

February 7, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 2df7d13ddf98555c1c140b60fee0cb11SHA1: aaf82760a8461b48452b69fa7c44e2dd1630518fANALYSIS DATE: 2023-02-07T16:31:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – – 1265803eec1dc74506f101d3f1dc439d

February 7, 2023

Score: 1 MALWARE FAMILY: TAGS:MD5: 1265803eec1dc74506f101d3f1dc439dSHA1: 84ef1dfe4dd70213568886f00fa21b7d1198e38eANALYSIS DATE: 2023-02-07T16:12:50ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – d0567e5a9bf86acc6dc12b9ccdca8a0f

February 7, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: d0567e5a9bf86acc6dc12b9ccdca8a0fSHA1: ae09761981d97a8c90f057e43b867ce3843025f0ANALYSIS DATE: 2023-02-07T16:57:32ZTTPS: T1012, T1082, T1053, T1005,...

Malware Analysis – evasion – 59f01113138e7dc680087f5c45c20b86

February 7, 2023

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 59f01113138e7dc680087f5c45c20b86SHA1: df8a33a512098088c0a8557f00ac05bdd13f261cANALYSIS DATE: 2023-02-07T17:36:16ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – lockbit – 5e3ec333a0b2ccf85fcc8ef31c1c8caa

February 7, 2023

Score: 10 MALWARE FAMILY: lockbitTAGS:family:lockbit, ransomwareMD5: 5e3ec333a0b2ccf85fcc8ef31c1c8caaSHA1: e6d9b00dd20426fb3d3a2c9a77b86553c144986aANALYSIS DATE: 2023-02-07T17:36:37ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – djvu – 67ba878952d75b630c6a45fcb7f1e0cb

February 7, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:gozi, family:laplas, family:smokeloader, family:vidar, botnet:1001, botnet:19, backdoor, banker, clipper, discovery, isfb, persistence, ransomware, spyware, stealer,...

LockBit 3.0 Ransomware Victim: cantinatollo[.]it

February 7, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Cobalt Stike Beacon Detected – 154[.]204[.]43[.]31:80

February 7, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 23[.]95[.]67[.]59:8443

February 7, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – ransomware – 0566488c1aa42a53e83ee55e06908c40

February 7, 2023

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 0566488c1aa42a53e83ee55e06908c40SHA1: 4c937d2d4c56fe8bbebf634545e8ae6be78d84ffANALYSIS DATE: 2023-02-07T09:04:27ZTTPS: T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – – 8257517f33fc1f861974623e50c31f7e

February 7, 2023

Score: 1 MALWARE FAMILY: TAGS:MD5: 8257517f33fc1f861974623e50c31f7eSHA1: 8a60f5320c8740330bbd09d248eaa6738c503190ANALYSIS DATE: 2023-02-07T09:38:37ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – lockbit – 92429807c7d957566d1897d5bf7c6639

February 7, 2023

Score: 10 MALWARE FAMILY: lockbitTAGS:family:lockbit, discovery, evasion, persistence, ransomwareMD5: 92429807c7d957566d1897d5bf7c6639SHA1: d1dce09219c0df46742fa0eec6f7a6b72ca877f0ANALYSIS DATE: 2023-02-07T09:13:03ZTTPS: T1490, T1046, T1060, T1112, T1082, T1107 ScoreMeaningExample10Known...

Malware Analysis – djvu – c0d1bba3397fe005703753151dab9c33

February 7, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:laplas, family:smokeloader, family:vidar, botnet:19, backdoor, clipper, discovery, persistence, ransomware, spyware, stealer, trojanMD5: c0d1bba3397fe005703753151dab9c33SHA1: 5bd798b62147c4cfb6411617f60871a33f21a58aANALYSIS DATE:...

Malware Analysis – djvu – 18a90c9b87ee69d9ec981e6a6fef24d3

February 7, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 18a90c9b87ee69d9ec981e6a6fef24d3SHA1: 79d84c4730aafc64a9788f63daa0c63e06f22160ANALYSIS DATE: 2023-02-07T10:44:48ZTTPS: T1060, T1112, T1012, T1082,...

db3e02ab722873b0378b0d0ba9b9ec398ebc53e7937651bd54a40e4348730fb6

Heap_Detective – The Simple Way To Detect Heap Memory Pitfalls In C++ And C

February 7, 2023

This tool uses the taint analysis technique for static analysis and aims to identify points of heap memory usage vulnerabilities...

Daily Vulnerability Trends: Tue Feb 07 2023

February 7, 2023

Daily Vulnerability Trends (sourced from VulnMon) CVE NAMECVE DescriptionCVE-2021-27365An issue was discovered in the Linux kernel through 5.11.3. Certain iSCSI...

LockBit 3.0 Ransomware Victim: royalmailgroup[.]com

February 7, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Malware Analysis – amadey – e69c2d0c4452da5c0558107642430855

February 7, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:laplas, family:smokeloader, family:vidar, botnet:19, backdoor, clipper, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: e69c2d0c4452da5c0558107642430855SHA1:...

OSINT

Malware Analysis – – 2c86df67b639224a469cf7113f2e6000

Malware Analysis – – 54164f1bc24c8f7461ca009292808e58

Malware Analysis – smokeloader – 4e86a9673a6474a976a2983aac9d2cdf

Malware Analysis – djvu – ab799e62d3827019ce3fe43f09273801

Malware Analysis – djvu – 2e992d7f74ed9ca786654c960e96dc2c

Malware Analysis – djvu – 6bc008d5e95ba85a97485f7eadcaada8

Malware Analysis – smokeloader – 2df7d13ddf98555c1c140b60fee0cb11

Malware Analysis – – 1265803eec1dc74506f101d3f1dc439d

Malware Analysis – djvu – d0567e5a9bf86acc6dc12b9ccdca8a0f

Malware Analysis – evasion – 59f01113138e7dc680087f5c45c20b86

Malware Analysis – lockbit – 5e3ec333a0b2ccf85fcc8ef31c1c8caa

Malware Analysis – djvu – 67ba878952d75b630c6a45fcb7f1e0cb

LockBit 3.0 Ransomware Victim: cantinatollo[.]it

Cobalt Stike Beacon Detected – 154[.]204[.]43[.]31:80

Cobalt Stike Beacon Detected – 23[.]95[.]67[.]59:8443

Malware Analysis – ransomware – 0566488c1aa42a53e83ee55e06908c40

Malware Analysis – – 8257517f33fc1f861974623e50c31f7e

Malware Analysis – lockbit – 92429807c7d957566d1897d5bf7c6639

Malware Analysis – djvu – c0d1bba3397fe005703753151dab9c33

Malware Analysis – djvu – 18a90c9b87ee69d9ec981e6a6fef24d3

Heap_Detective – The Simple Way To Detect Heap Memory Pitfalls In C++ And C

Daily Vulnerability Trends: Tue Feb 07 2023

LockBit 3.0 Ransomware Victim: royalmailgroup[.]com

Malware Analysis – amadey – e69c2d0c4452da5c0558107642430855

[BLACKSHRANTAC] – Ransomware Victim: ApleNet Co[.], Ltd

[QILIN] – Ransomware Victim: Disseny Dental

Cobalt Strike Beacon Detected – 196[.]251[.]69[.]253:4433

Cobalt Strike Beacon Detected – 124[.]223[.]114[.]203:4433

Cobalt Strike Beacon Detected – 8[.]137[.]114[.]210:4433

You may have missed