OSINT

Malware Analysis – smokeloader – 2383d8e32271f2724a30707c0f865223

November 26, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 2383d8e32271f2724a30707c0f865223SHA1: 822106d371b657e6b37115bcbe256df70930aacfANALYSIS DATE: 2022-11-25T21:36:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 2028bb809581998a624328f89a425e4d

November 26, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, backdoor, collection, ransomware, trojanMD5: 2028bb809581998a624328f89a425e4dSHA1: 050920d82ef7198c6f59e4943e46884886b13f34ANALYSIS DATE: 2022-11-25T21:33:42ZTTPS: T1012, T1120, T1082, T1114 ScoreMeaningExample10Known badA...

Malware Analysis – infostealer – 1c728a305d61632ed4f9fb8157704cf1

November 26, 2022

Score: 7 MALWARE FAMILY: infostealerTAGS:infostealer, ransomwareMD5: 1c728a305d61632ed4f9fb8157704cf1SHA1: e844abd75f706b66f79ce7306ac603f839d722f0ANALYSIS DATE: 2022-11-25T15:10:36ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – octo – 57628e2f9dbfb619e4650fe9b8779096

November 26, 2022

Score: 10 MALWARE FAMILY: octoTAGS:family:octo, banker, infostealer, ransomware, rat, trojanMD5: 57628e2f9dbfb619e4650fe9b8779096SHA1: 5ff270eddc405ad1a960e12053858a9a6d59823cANALYSIS DATE: 2022-11-25T21:46:46ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – deebe8d3a1f0965edaaccbf28d27c33d

November 26, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: deebe8d3a1f0965edaaccbf28d27c33dSHA1: a6337a15dc827c87223327f090fa870949099c98ANALYSIS DATE: 2022-11-25T23:57:19ZTTPS:...

Malware Analysis – djvu – 5c6c300fb734b531c29744a07b71d63a

November 26, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 5c6c300fb734b531c29744a07b71d63aSHA1: 2dc930e7efb2ec0bcdcf38d87f2cdae888b91f84ANALYSIS DATE: 2022-11-25T22:27:38ZTTPS: T1005, T1081, T1082, T1053,...

Malware Analysis – djvu – 9d26acad00bf04c06bc71a396f1a2993

November 26, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, backdoor, collection, discovery, persistence, ransomware, trojanMD5: 9d26acad00bf04c06bc71a396f1a2993SHA1: 6e48a13d04b581d31cec0f89d8b4211ed177d929ANALYSIS DATE: 2022-11-25T23:08:31ZTTPS: T1114, T1130, T1112, T1060,...

Malware Analysis – djvu – 544b2995c107dd6bb21b1eb32a883141

November 26, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 544b2995c107dd6bb21b1eb32a883141SHA1: 4bc9b0c6d8e1426bb499809b9107397d48dd22c1ANALYSIS DATE: 2022-11-25T23:33:58ZTTPS: T1012, T1060, T1112, T1222,...

LockBit 3.0 Ransomware Victim: byp-global[.]com

November 25, 2022

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the...

LockBit 3.0 Ransomware Victim: fiscosaudepe[.]com[.]br

November 25, 2022

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

LockBit 3.0 Ransomware Victim: macrotel[.]com[.]ar

November 25, 2022

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

LockBit 3.0 Ransomware Victim: carone[.]com[.]mx

November 25, 2022

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the...

LockBit 3.0 Ransomware Victim: will-b[.]jp

November 25, 2022

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

LockBit 3.0 Ransomware Victim: happmobi[.]com[.]br

November 25, 2022

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Malware Analysis – evasion – 1a2180b48353c1061d8d95731e285875

November 25, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 1a2180b48353c1061d8d95731e285875SHA1: 05eae57548163ac58ea12412917022c8b59422fdANALYSIS DATE: 2022-11-25T09:01:53ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – evasion – d8042bbb920220cca0279aec12c6b361

November 25, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: d8042bbb920220cca0279aec12c6b361SHA1: d1548814555b74bb6b875fc79478ca9db4bfa6a3ANALYSIS DATE: 2022-11-25T09:10:58ZTTPS: T1031, T1060, T1112, T1082, T1088, T1089, T1107, T1490,...

Malware Analysis – ransomware – 3690bb406e09de249faf54abf8e7c785

November 25, 2022

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 3690bb406e09de249faf54abf8e7c785SHA1: d4bcc442cef53b35394e665f823bcb371679ba54ANALYSIS DATE: 2022-11-25T09:06:03ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – banker – a9a693e712778a2b4585e36a1921d246

November 25, 2022

Score: 8 MALWARE FAMILY: bankerTAGS:banker, evasion, ransomwareMD5: a9a693e712778a2b4585e36a1921d246SHA1: 9d97e16d154fc0c8dddd0576526311ecbff7461cANALYSIS DATE: 2022-11-25T09:16:02ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – ransomware – f414edfd28b02d6a80f7549476e441da

November 25, 2022

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: f414edfd28b02d6a80f7549476e441daSHA1: af028d184599515b31c92fcc7ea87f19b6cee735ANALYSIS DATE: 2022-11-25T09:07:10ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – qulab – a3476e4532c77e8ee20ecabd1035d3fd

November 25, 2022

Score: 10 MALWARE FAMILY: qulabTAGS:family:qulab, discovery, evasion, ransomware, spyware, stealer, upxMD5: a3476e4532c77e8ee20ecabd1035d3fdSHA1: 15d58869b7ed04c16b3143ab1ee0e085056363bdANALYSIS DATE: 2022-11-25T09:20:31ZTTPS: T1158, T1082, T1005, T1081, T1012...

Malware Analysis – ransomware – f711366dc0ee0e2b3468867f58abbe15

November 25, 2022

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: f711366dc0ee0e2b3468867f58abbe15SHA1: 8ba469fe3e4614a3674209cecc54e5e9f4087bbeANALYSIS DATE: 2022-11-25T09:16:08ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – evasion – 1dc8b7140dee61b956b5afecd38df9c3

November 25, 2022

Score: 8 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 1dc8b7140dee61b956b5afecd38df9c3SHA1: e1c63236ec35ec81c0845618217a55bdd2349056ANALYSIS DATE: 2022-11-25T09:19:56ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – agent_smith – 8205837d1fe12e2488ebce5152f6f567

November 25, 2022

Score: 10 MALWARE FAMILY: agent_smithTAGS:family:agent_smith, adware, ransomwareMD5: 8205837d1fe12e2488ebce5152f6f567SHA1: 1246804eea6f68eb963751ae0118cc3b8f697611ANALYSIS DATE: 2022-11-25T09:20:16ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – agent_smith – 058f5a4037f42ee67766531988924c73

November 25, 2022

Score: 10 MALWARE FAMILY: agent_smithTAGS:family:agent_smith, adware, evasion, ransomwareMD5: 058f5a4037f42ee67766531988924c73SHA1: 9cd3a910fd8ef392748e964c98dad7dff59fa066ANALYSIS DATE: 2022-11-25T09:33:06ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

OSINT

Malware Analysis – smokeloader – 2383d8e32271f2724a30707c0f865223

Malware Analysis – djvu – 2028bb809581998a624328f89a425e4d

Malware Analysis – infostealer – 1c728a305d61632ed4f9fb8157704cf1

Malware Analysis – octo – 57628e2f9dbfb619e4650fe9b8779096

Malware Analysis – djvu – deebe8d3a1f0965edaaccbf28d27c33d

Malware Analysis – djvu – 5c6c300fb734b531c29744a07b71d63a

Malware Analysis – djvu – 9d26acad00bf04c06bc71a396f1a2993

Malware Analysis – djvu – 544b2995c107dd6bb21b1eb32a883141

LockBit 3.0 Ransomware Victim: byp-global[.]com

LockBit 3.0 Ransomware Victim: fiscosaudepe[.]com[.]br

LockBit 3.0 Ransomware Victim: macrotel[.]com[.]ar

LockBit 3.0 Ransomware Victim: carone[.]com[.]mx

LockBit 3.0 Ransomware Victim: will-b[.]jp

LockBit 3.0 Ransomware Victim: happmobi[.]com[.]br

Malware Analysis – evasion – 1a2180b48353c1061d8d95731e285875

Malware Analysis – evasion – d8042bbb920220cca0279aec12c6b361

Malware Analysis – ransomware – 3690bb406e09de249faf54abf8e7c785

Malware Analysis – banker – a9a693e712778a2b4585e36a1921d246

Malware Analysis – ransomware – f414edfd28b02d6a80f7549476e441da

Malware Analysis – qulab – a3476e4532c77e8ee20ecabd1035d3fd

Malware Analysis – ransomware – f711366dc0ee0e2b3468867f58abbe15

Malware Analysis – evasion – 1dc8b7140dee61b956b5afecd38df9c3

Malware Analysis – agent_smith – 8205837d1fe12e2488ebce5152f6f567

Malware Analysis – agent_smith – 058f5a4037f42ee67766531988924c73

Vodafonethree To Offshore Uk Network Jobs To India

[DEVMAN] – Ransomware Victim: mceicl[.]com

Cobalt Strike Beacon Detected – 165[.]154[.]125[.]212:8080

Cobalt Strike Beacon Detected – 154[.]201[.]74[.]112:8080

Cobalt Strike Beacon Detected – 81[.]70[.]255[.]195:8080

You may have missed