OSINT

Malware Analysis – djvu – effc004b6fce37e7b350cb7f61f21730

October 19, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: effc004b6fce37e7b350cb7f61f21730SHA1: 116824c5bfc45c8aef655c4a10144d4a117317a6ANALYSIS DATE: 2022-10-19T08:32:51ZTTPS: T1005, T1081, T1060, T1112,...

Malware Analysis – djvu – 2455d36aa533e29b2dc97377389bbe6a

October 19, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5: 2455d36aa533e29b2dc97377389bbe6aSHA1: fe9642fa95653b336c3a40ada7a52a0ebbfa9a5fANALYSIS...

Malware Analysis – djvu – 31d633c84d4010d17b4f03ba0b837ec9

October 19, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 31d633c84d4010d17b4f03ba0b837ec9SHA1: 15bc48b574ce6c95c52a936662a20c9a7bce6387ANALYSIS DATE: 2022-10-19T08:39:22ZTTPS: T1053, T1005, T1081, T1012,...

Malware Analysis – smokeloader – f25e119c885d1b007c265b3a51a2d4f8

October 19, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: f25e119c885d1b007c265b3a51a2d4f8SHA1: 7d95bf5790a05097c55306fb398b378810621d30ANALYSIS DATE: 2022-10-19T08:32:14ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – lockbit – d75882dafa8f1d34b635596426668b8d

October 19, 2022

Score: 10 MALWARE FAMILY: lockbitTAGS:family:lockbit, ransomwareMD5: d75882dafa8f1d34b635596426668b8dSHA1: e359767434109ff1138ec03bc3b0b239ad5d1634ANALYSIS DATE: 2022-10-19T09:22:08ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – persistence – 9528ea8dec82f5cd13f44d9ff358b2bf

October 19, 2022

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 9528ea8dec82f5cd13f44d9ff358b2bfSHA1: df8e3f87a2a8690c5cb25dff1ac7ce0b902fcbb7ANALYSIS DATE: 2022-10-19T08:40:17ZTTPS: T1107, T1490, T1053, T1082, T1012, T1120, T1005, T1081,...

Malware Analysis – danabot – 2d9969371e0847cb39a4b515f7f55759

October 19, 2022

Score: 10 MALWARE FAMILY: danabotTAGS:family:danabot, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, banker, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 2d9969371e0847cb39a4b515f7f55759SHA1: 96154d705ca47764b062468c9937ac28eda7df70ANALYSIS...

Malware Analysis – eternity – 80094cdfc9743ea1e4decfe916105b76

October 19, 2022

Score: 10 MALWARE FAMILY: eternityTAGS:family:eternity, evasion, ransomwareMD5: 80094cdfc9743ea1e4decfe916105b76SHA1: b26f5fd083dc51eb5149e821f4361382ea43c319ANALYSIS DATE: 2022-10-19T09:12:09ZTTPS: T1053, T1107, T1490, T1082, T1018 ScoreMeaningExample10Known badA malware family...

Malware Analysis – djvu – dc38da1da1e88bac04121824d2abb81a

October 19, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: dc38da1da1e88bac04121824d2abb81aSHA1: 101f00bcbba421c4f14a20a7da382acbfe900e52ANALYSIS DATE: 2022-10-19T09:47:30ZTTPS: T1222, T1060, T1112, T1005,...

Malware Analysis – danabot – 072433c8fab1e14873361e2a95ec5d37

October 19, 2022

Score: 10 MALWARE FAMILY: danabotTAGS:family:danabot, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, banker, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 072433c8fab1e14873361e2a95ec5d37SHA1: 8d1b707184f7f20950643bc82db590edd081a71bANALYSIS...

Malware Analysis – djvu – 0ffeb9f5001377ea8c199cf13dcd5f2b

October 19, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 0ffeb9f5001377ea8c199cf13dcd5f2bSHA1: 644bc255288ee4a7664540e1c55872fdb533bc6dANALYSIS DATE: 2022-10-19T09:39:49ZTTPS: T1005, T1081, T1222, T1053,...

Malware Analysis – djvu – 45534d9fae89d8bd0166236fef70aac1

October 19, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: 45534d9fae89d8bd0166236fef70aac1SHA1: a45ee6c9777446f3f1687cd2f70f3aa3e480b296ANALYSIS DATE: 2022-10-19T09:38:35ZTTPS: T1053, T1060, T1112, T1222, T1082, T1012 ScoreMeaningExample10Known badA...

Malware Analysis – blackbasta – 6a202e9a95f58938d02385e31d43ed87

October 19, 2022

Score: 10 MALWARE FAMILY: blackbastaTAGS:family:blackbasta, ransomwareMD5: 6a202e9a95f58938d02385e31d43ed87SHA1: 53628c7a155ccb7af1135140083939018d3587f1ANALYSIS DATE: 2022-10-19T10:40:19ZTTPS: T1107, T1490, T1491, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ransomware – f5c9c7b404aa41bb2bbc1704afeb9f0d

October 19, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: f5c9c7b404aa41bb2bbc1704afeb9f0dSHA1: 1ca01cd00899330b918678d5f0ee00ab94d26f89ANALYSIS DATE: 2022-10-19T10:40:23ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – blackbasta – 0c69e91c2f54978ae3103b26686b2610

October 19, 2022

Score: 10 MALWARE FAMILY: blackbastaTAGS:family:blackbasta, ransomwareMD5: 0c69e91c2f54978ae3103b26686b2610SHA1: 3e3b113a5ab64e03ffe86e0fa9a2163816f9ecdfANALYSIS DATE: 2022-10-19T10:40:26ZTTPS: T1107, T1490, T1491, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – danabot – ae489c5fec00f4363d3367b5a995a8db

October 19, 2022

Score: 10 MALWARE FAMILY: danabotTAGS:family:danabot, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, banker, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: ae489c5fec00f4363d3367b5a995a8dbSHA1: eb0e5e3e21b4ce9995b4f570eed9e393a8d2f8e4ANALYSIS...

Cobalt Stike Beacon Detected – 106[.]13[.]206[.]236:8011

October 19, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 69[.]49[.]245[.]24:8080

October 19, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – persistence – 60f87cba4fc4edc6a22d5dd65827e9b4

October 19, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 60f87cba4fc4edc6a22d5dd65827e9b4SHA1: 1daa253da17f83939ccf0a6ddf6578570daaee54ANALYSIS DATE: 2022-10-19T10:40:40ZTTPS: T1107, T1490, T1091, T1060, T1112, T1005, T1081, T1082...

Malware Analysis – ransomware – af3175967e229bbc607bc32699cef621

October 19, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: af3175967e229bbc607bc32699cef621SHA1: 683449dd00992bff104e987a130eca526cd39afbANALYSIS DATE: 2022-10-19T10:40:31ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 91504a2349db14afb99e62b5d6f693d4

October 19, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 91504a2349db14afb99e62b5d6f693d4SHA1: 90a1df9e4812850e95545d07509472b0614c8f71ANALYSIS DATE: 2022-10-19T10:40:34ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – persistence – f21bcc4d9dd94342c1602e96534002b6

October 19, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: f21bcc4d9dd94342c1602e96534002b6SHA1: 1a7e9f7896a02df7e9729e481890a4ee82daac1eANALYSIS DATE: 2022-10-19T10:40:46ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091, T1060, T1112...

Cobalt Stike Beacon Detected – 168[.]100[.]11[.]84:80

October 19, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 1[.]15[.]67[.]80:443

October 19, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

OSINT

Malware Analysis – djvu – effc004b6fce37e7b350cb7f61f21730

Malware Analysis – djvu – 2455d36aa533e29b2dc97377389bbe6a

Malware Analysis – djvu – 31d633c84d4010d17b4f03ba0b837ec9

Malware Analysis – smokeloader – f25e119c885d1b007c265b3a51a2d4f8

Malware Analysis – lockbit – d75882dafa8f1d34b635596426668b8d

Malware Analysis – persistence – 9528ea8dec82f5cd13f44d9ff358b2bf

Malware Analysis – danabot – 2d9969371e0847cb39a4b515f7f55759

Malware Analysis – eternity – 80094cdfc9743ea1e4decfe916105b76

Malware Analysis – djvu – dc38da1da1e88bac04121824d2abb81a

Malware Analysis – danabot – 072433c8fab1e14873361e2a95ec5d37

Malware Analysis – djvu – 0ffeb9f5001377ea8c199cf13dcd5f2b

Malware Analysis – djvu – 45534d9fae89d8bd0166236fef70aac1

Malware Analysis – blackbasta – 6a202e9a95f58938d02385e31d43ed87

Malware Analysis – ransomware – f5c9c7b404aa41bb2bbc1704afeb9f0d

Malware Analysis – blackbasta – 0c69e91c2f54978ae3103b26686b2610

Malware Analysis – danabot – ae489c5fec00f4363d3367b5a995a8db

Cobalt Stike Beacon Detected – 106[.]13[.]206[.]236:8011

Cobalt Stike Beacon Detected – 69[.]49[.]245[.]24:8080

Malware Analysis – persistence – 60f87cba4fc4edc6a22d5dd65827e9b4

Malware Analysis – ransomware – af3175967e229bbc607bc32699cef621

Malware Analysis – ransomware – 91504a2349db14afb99e62b5d6f693d4

Malware Analysis – persistence – f21bcc4d9dd94342c1602e96534002b6

Cobalt Stike Beacon Detected – 168[.]100[.]11[.]84:80

Cobalt Stike Beacon Detected – 1[.]15[.]67[.]80:443

[AKIRA] – Ransomware Victim: Hometown Credit Union

CVE Alert: CVE-2025-7846 – vanquish – WordPress User Extra Fields

CVE Alert: CVE-2025-10897 – JMA Plugins – WooCommerce Designer Pro

[INCRANSOM] – Ransomware Victim: VZW Avalon

Ai Layoffs To Backfire: Half Quietly Rehired At Lower Pay

You may have missed