OSINT

Malware Analysis – djvu – e043f277d99b653243078d318e063b46

November 3, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, botnet:slovarik1btc, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5: e043f277d99b653243078d318e063b46SHA1: baad7c939debbfd879c7c0f62f496ec6dddedd37ANALYSIS DATE:...

Malware Analysis – ransomware – db2c67c513d5bd1edde683e770c77790

November 3, 2022

Score: 5 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: db2c67c513d5bd1edde683e770c77790SHA1: c7a84b667aacd4b220bacb160c2e990f6bced4baANALYSIS DATE: 2022-11-03T11:38:37ZTTPS: T1491, T1112, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – djvu – 4bb5c0ed18f4b7ae33ba272eae17abf2

November 3, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, botnet:google2, botnet:slovarik1btc, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5: 4bb5c0ed18f4b7ae33ba272eae17abf2SHA1: e0e02b31d3ad2e965d223ebe3451bd9c9e0385faANALYSIS...

Updated TikTok Privacy Policy confirms that Chinese staff can access European users’ data

November 3, 2022

TikTok updated its privacy policy for European Economic Area (“EEA”) and confirmed that its Chinese staff can access their users’ data....

Fortinet fixed 16 vulnerabilities, 6 rated as high severity

November 3, 2022

Fortinet addressed 16 vulnerabilities in some of the company’s products, six flaws received a ‘high’ severity rate. One of the...

Daily Vulnerability Trends: Thu Nov 03 2022

November 3, 2022

Daily Vulnerability Trends (sourced from VulnMon) CVE NAMECVE DescriptionCVE-2022-22241An Improper Input Validation vulnerability in the J-Web component of Juniper Networks...

Server-side attacks, C&C in public clouds and other MDR cases we observed

November 3, 2022

Introduction This report describes several interesting incidents observed by the Kaspersky Managed Detection and Response (MDR) team. The goal of the...

Malware Analysis – djvu – bd8f00d5443c21442f9e9ee7dc656504

November 3, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, botnet:mario23_10, botnet:slovarik1btc, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5: bd8f00d5443c21442f9e9ee7dc656504SHA1: 87335c5e32b8a6609e5e53e50ee47c2167f21f37ANALYSIS...

Malware Analysis – wannacry – 58088f35c31731e82afdc9157e1418c8

November 3, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: 58088f35c31731e82afdc9157e1418c8SHA1: fc6fc4739db9e837618ec5d5047cc1a8d5d4a57eANALYSIS DATE: 2022-11-03T03:00:25ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – djvu – e28c92d67de5b0e50656cd64bc43d609

November 3, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: e28c92d67de5b0e50656cd64bc43d609SHA1: ae111a18223d9c9b84b3d46b58b383edd17b7d78ANALYSIS DATE: 2022-11-03T03:31:45ZTTPS: T1222, T1005, T1081, T1012, T1082, T1060,...

Malware Analysis – amadey – 432c4e1f72cb160beceac60a75add7fc

November 3, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:redline, family:smokeloader, botnet:mario23_10, botnet:slovarik1btc, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5: 432c4e1f72cb160beceac60a75add7fcSHA1:...

Malware Analysis – amadey – 60be5c9c87907487fe1314ccaa7a5779

November 3, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:redline, family:smokeloader, botnet:google2, botnet:mario23_10, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5: 60be5c9c87907487fe1314ccaa7a5779SHA1:...

Malware Analysis – djvu – 7d281af034cbaaf29f1c7683d83b0816

November 3, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 7d281af034cbaaf29f1c7683d83b0816SHA1: 8ef1c438915f07f323243011c849169666111642ANALYSIS DATE: 2022-11-03T05:00:41ZTTPS: T1082, T1053, T1005, T1081, T1012, T1222,...

Malware Analysis – djvu – 7940034ef696a5864e8987d5831f5982

November 3, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 7940034ef696a5864e8987d5831f5982SHA1: c2341db13c0d705c8f6b0c0096a45f112bafe92bANALYSIS DATE: 2022-11-03T05:40:38ZTTPS: T1012, T1082, T1005, T1081, T1222, T1053,...

Malware Analysis – djvu – 0f3a951d4b9f1c2717429eb512b6a35f

November 3, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, botnet:mario23_10, botnet:slovarik1btc, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5: 0f3a951d4b9f1c2717429eb512b6a35fSHA1: de70f63ab89c1eaace1e8ba295883853bbf40168ANALYSIS...

OSINT

Malware Analysis – djvu – e043f277d99b653243078d318e063b46

Malware Analysis – ransomware – db2c67c513d5bd1edde683e770c77790

Malware Analysis – djvu – 4bb5c0ed18f4b7ae33ba272eae17abf2

Updated TikTok Privacy Policy confirms that Chinese staff can access European users’ data

Fortinet fixed 16 vulnerabilities, 6 rated as high severity

Daily Vulnerability Trends: Thu Nov 03 2022

Server-side attacks, C&C in public clouds and other MDR cases we observed

Malware Analysis – djvu – bd8f00d5443c21442f9e9ee7dc656504

Malware Analysis – wannacry – 58088f35c31731e82afdc9157e1418c8

Malware Analysis – djvu – e28c92d67de5b0e50656cd64bc43d609

Malware Analysis – amadey – 432c4e1f72cb160beceac60a75add7fc

Malware Analysis – amadey – 60be5c9c87907487fe1314ccaa7a5779

Malware Analysis – djvu – 7d281af034cbaaf29f1c7683d83b0816

Malware Analysis – djvu – 7940034ef696a5864e8987d5831f5982

Malware Analysis – djvu – 0f3a951d4b9f1c2717429eb512b6a35f

Cobalt Stike Beacon Detected – 192[.]3[.]153[.]207:808

Cobalt Stike Beacon Detected – 164[.]92[.]190[.]196:443

Cobalt Stike Beacon Detected – 23[.]227[.]198[.]232:443

Cobalt Stike Beacon Detected – 43[.]143[.]133[.]46:80

Cobalt Stike Beacon Detected – 43[.]224[.]249[.]36:80

Cobalt Stike Beacon Detected – 84[.]32[.]128[.]141:443

Cobalt Stike Beacon Detected – 80[.]66[.]76[.]77:443

Cobalt Stike Beacon Detected – 174[.]139[.]150[.]20:8008

Cobalt Stike Beacon Detected – 212[.]224[.]88[.]71:443

[FLOCKER] – Ransomware Victim: G*********************y[.]org

CVE Alert: CVE-2025-53101

CVE Alert: CVE-2025-53019

CVE Alert: CVE-2025-53819

CVE Alert: CVE-2025-53821

You may have missed