OSINT

Malware Analysis – chaos – 9ca8e64065e6beaad07fc7b472c2617f

January 30, 2023

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, ransomwareMD5: 9ca8e64065e6beaad07fc7b472c2617fSHA1: 0f91d62f996b0ec76addca130fb4f3b87e604d0fANALYSIS DATE: 2023-01-30T05:21:03ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – djvu – 6277c1e843145f7bcbc6b662ec71702b

January 30, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:19, backdoor, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: 6277c1e843145f7bcbc6b662ec71702bSHA1: 587f2babe6550c5ac6321474601794ae5ca0fb00ANALYSIS DATE: 2023-01-30T05:49:16ZTTPS:...

Malware Analysis – djvu – 57a3184073e17c79d6e7c4c9990e8e8b

January 30, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 57a3184073e17c79d6e7c4c9990e8e8bSHA1: eda1814c68966a2e9d6d358d754ada97331f39f0ANALYSIS DATE: 2023-01-30T05:56:03ZTTPS: T1012, T1082, T1005, T1081,...

Vice Society Ransomware Victim: NPTC Group of Colleges

January 30, 2023

Vice Society Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

SSTImap – Automatic SSTI Detection Tool With Interactive Interface

January 30, 2023

SSTImap is a penetration testing software that can check websites for Code Injection and Server-Side Template Injection vulnerabilities and...

0a6d5f23e2d69c5e1cf244dc0e4f17cd3fdef1c791000dc34cbc4ad95383e9e6

BlueHound – Tool That Helps Blue Teams Pinpoint The Security Issues That Actually Matter

January 30, 2023

BlueHound is an open-source tool that helps blue teams pinpoint the security issues that actually matter. By combining information about...

c95fd287bc0cd7ad3e59a1c6366ef24692369502a2465241ad648a39e5e6c43a

Yaralyzer – Visually Inspect And Force Decode YARA And Regex Matches Found In Both Binary And Text Data, With Colors

January 30, 2023

Visually inspect all of the regex matches (and their sexier, more cloak and dagger cousins, the YARA matches) found in...

Vice Society Ransomware Victim: NPTC Group of Colleges

January 29, 2023

Vice Society Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Vice Society Ransomware Victim: Seguros Equinoccial

January 29, 2023

Vice Society Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

LockBit 3.0 Ransomware Victim: azliver[.]com

January 29, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Vice Society Ransomware Victim: Seguros Equinoccial

January 29, 2023

Vice Society Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Malware Analysis – smokeloader – 84afdad4a70a6122c3f157100a197db7

January 29, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 84afdad4a70a6122c3f157100a197db7SHA1: 22afcb3520b8bfe314e7f505ccee14ae81f8e547ANALYSIS DATE: 2023-01-29T09:49:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – – fc50e05b611db89a9c7eb359e68ebc5f

January 29, 2023

Score: 10 MALWARE FAMILY: TAGS:MD5: fc50e05b611db89a9c7eb359e68ebc5fSHA1: 72e31f940f1214e1c36a34a69b53b0d07d4c61efANALYSIS DATE: 2023-01-29T09:34:19ZTTPS: T1012, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – ransomware – fee7c379f3a555c5c821e872ec384a91

January 29, 2023

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: fee7c379f3a555c5c821e872ec384a91SHA1: 7346e2e29faddd63ae5c610c07acab46b2b1b176ANALYSIS DATE: 2023-01-29T09:48:34ZTTPS: T1107, T1490, T1005, T1081 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – djvu – a3dd84a411b7edddae84278455400dd5

January 29, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: a3dd84a411b7edddae84278455400dd5SHA1: 4e9ba9788414d152ae656adf75939d3724c4ec0eANALYSIS DATE: 2023-01-29T09:23:23ZTTPS: T1053, T1012, T1060, T1112,...

Cobalt Stike Beacon Detected – 47[.]244[.]167[.]171:4545

January 29, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – discovery – 4b51df4028f1d801c45f07daa07d9c90

January 29, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: 4b51df4028f1d801c45f07daa07d9c90SHA1: 0a46c206f4abd891bb67d9ebfd55d572aa0456d3ANALYSIS DATE: 2023-01-29T11:01:21ZTTPS: T1012, T1082, T1112, T1042, T1060 ScoreMeaningExample10Known badA malware family...

Malware Analysis – – 45f3f9b201644ddadf6204497c9adb49

January 29, 2023

Score: 3 MALWARE FAMILY: TAGS:MD5: 45f3f9b201644ddadf6204497c9adb49SHA1: 78a9c9c95fceaa63083eb466d013c16da9c07f4cANALYSIS DATE: 2023-01-29T09:54:56ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – f6d4d4b428393d0d8b55165c2a9076dd

January 29, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: f6d4d4b428393d0d8b55165c2a9076ddSHA1: 75a3f25169fd56e7932a5ddfc3ec7616558791f1ANALYSIS DATE: 2023-01-29T11:05:05ZTTPS: T1060, T1112, T1082, T1005,...

Malware Analysis – djvu – d16e82ba2c319750e888f763d98a3a8c

January 29, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:19, backdoor, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: d16e82ba2c319750e888f763d98a3a8cSHA1: f2be4e0a2b06c80db9f3320b7db1c8c15e80aa19ANALYSIS DATE: 2023-01-29T10:48:08ZTTPS:...

Malware Analysis – smokeloader – da627411e7e85229355ed325520a7d4e

January 29, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: da627411e7e85229355ed325520a7d4eSHA1: 3a603f52b7285be51b1533815eecc67b0447af35ANALYSIS DATE: 2023-01-29T11:35:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Cobalt Stike Beacon Detected – 20[.]189[.]74[.]59:8443

January 29, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – spyware – 5e887fdac8a3cac0b047a737043789a8

January 29, 2023

Score: 7 MALWARE FAMILY: spywareTAGS:spyware, stealerMD5: 5e887fdac8a3cac0b047a737043789a8SHA1: 8c9745138d835b783278cb61170a7153bb003784ANALYSIS DATE: 2023-01-29T11:17:02ZTTPS: T1005, T1081 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Cobalt Stike Beacon Detected – 109[.]172[.]45[.]28:443

January 29, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

OSINT

Malware Analysis – chaos – 9ca8e64065e6beaad07fc7b472c2617f

Malware Analysis – djvu – 6277c1e843145f7bcbc6b662ec71702b

Malware Analysis – djvu – 57a3184073e17c79d6e7c4c9990e8e8b

Vice Society Ransomware Victim: NPTC Group of Colleges

SSTImap – Automatic SSTI Detection Tool With Interactive Interface

BlueHound – Tool That Helps Blue Teams Pinpoint The Security Issues That Actually Matter

Yaralyzer – Visually Inspect And Force Decode YARA And Regex Matches Found In Both Binary And Text Data, With Colors

Vice Society Ransomware Victim: NPTC Group of Colleges

Vice Society Ransomware Victim: Seguros Equinoccial

LockBit 3.0 Ransomware Victim: azliver[.]com

Vice Society Ransomware Victim: Seguros Equinoccial

Malware Analysis – smokeloader – 84afdad4a70a6122c3f157100a197db7

Malware Analysis – – fc50e05b611db89a9c7eb359e68ebc5f

Malware Analysis – ransomware – fee7c379f3a555c5c821e872ec384a91

Malware Analysis – djvu – a3dd84a411b7edddae84278455400dd5

Cobalt Stike Beacon Detected – 47[.]244[.]167[.]171:4545

Malware Analysis – discovery – 4b51df4028f1d801c45f07daa07d9c90

Malware Analysis – – 45f3f9b201644ddadf6204497c9adb49

Malware Analysis – djvu – f6d4d4b428393d0d8b55165c2a9076dd

Malware Analysis – djvu – d16e82ba2c319750e888f763d98a3a8c

Malware Analysis – smokeloader – da627411e7e85229355ed325520a7d4e

Cobalt Stike Beacon Detected – 20[.]189[.]74[.]59:8443

Malware Analysis – spyware – 5e887fdac8a3cac0b047a737043789a8

Cobalt Stike Beacon Detected – 109[.]172[.]45[.]28:443

[QILIN] – Ransomware Victim: alissco[.]com

[AKIRA] – Ransomware Victim: Clarion Safety Systems

[COINBASECARTEL] – Ransomware Victim: PF / PS

[QILIN] – Ransomware Victim: Altimedia

[QILIN] – Ransomware Victim: echolakefoods[.]com

You may have missed