threatintel

Malware Analysis – discovery – 662d26b4e627e44a0da5e5e99fa41942

February 8, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, ransomwareMD5: 662d26b4e627e44a0da5e5e99fa41942SHA1: 93ea678ba8449bfdfd7a26e82fae39f00185e8d8ANALYSIS DATE: 2023-02-08T15:34:33ZTTPS: T1102, T1082, T1057, T1012, T1112 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – – d6ad8da80809d7558c1a934e6ef28cbc

February 8, 2023

Score: 1 MALWARE FAMILY: TAGS:MD5: d6ad8da80809d7558c1a934e6ef28cbcSHA1: e627b9f49a5fbe767482544c60bfd0743548f00eANALYSIS DATE: 2023-02-08T15:16:46ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

LockBit 3.0 Ransomware Victim: transports-feuillet[.]fr

February 8, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

BlackCat/ALPHV Ransomware Victim: Five Guys Enterprises, LLC

February 8, 2023

BlackCat / ALPHV Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the...

BlackCat/ALPHV Ransomware Victim: Finaport

February 8, 2023

BlackCat / ALPHV Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the...

Cobalt Stike Beacon Detected – 182[.]61[.]6[.]63:9999

February 8, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 190[.]123[.]44[.]122:443

February 8, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 23[.]227[.]196[.]194:443

February 8, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 209[.]141[.]36[.]163:443

February 8, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

BlackCat/ALPHV Ransomware Victim: El-Mohandes

February 8, 2023

BlackCat / ALPHV Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the...

BlackCat/ALPHV Ransomware Victim: Menken Orlando

February 8, 2023

BlackCat / ALPHV Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the...

BlackCat/ALPHV Ransomware Victim: JReynolds

February 8, 2023

BlackCat / ALPHV Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the...

BlackCat/ALPHV Ransomware Victim: Kerber, Eck & Braeckel LLP

February 8, 2023

BlackCat / ALPHV Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the...

Malware Analysis – lockbit – fe5101b50e92a923d74cc6f0f4225539

February 8, 2023

Score: 10 MALWARE FAMILY: lockbitTAGS:family:lockbit, discovery, evasion, persistence, ransomwareMD5: fe5101b50e92a923d74cc6f0f4225539SHA1: f7a2fc4e471a203c8a5683c02ada2c3931c8f0ecANALYSIS DATE: 2023-02-08T09:00:40ZTTPS: T1490, T1046, T1082, T1107, T1060, T1112 ScoreMeaningExample10Known...

Malware Analysis – djvu – 874a8573bbe9da63a8026990fd4f7327

February 8, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:gozi, family:laplas, family:smokeloader, botnet:1001, backdoor, banker, clipper, discovery, isfb, persistence, ransomware, stealer, trojanMD5: 874a8573bbe9da63a8026990fd4f7327SHA1: e2a091f4398f1e54672d46abfa51b8928d9dabd5ANALYSIS...

Cobalt Stike Beacon Detected – 180[.]184[.]71[.]14:443

February 8, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 107[.]172[.]206[.]242:444

February 8, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 1[.]15[.]247[.]249:8086

February 8, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 190[.]123[.]44[.]214:443

February 8, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – smokeloader – 8ffa156806f6de5616d493e5b2b90ee7

February 8, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 8ffa156806f6de5616d493e5b2b90ee7SHA1: f82515e8f671762f7ec80be38fff330f6d4ce6abANALYSIS DATE: 2023-02-08T09:56:20ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – ab6b2ae0b2922ba977cd338c68b75ba0

February 8, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: ab6b2ae0b2922ba977cd338c68b75ba0SHA1: e11dc44c5b92e9a4f3188946f5c3edb08b55bf52ANALYSIS DATE: 2023-02-08T09:56:15ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 5291189417e7702824378a4ee78c1840

February 8, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 5291189417e7702824378a4ee78c1840SHA1: bb0d48304546077175252b08f59f008695e9427eANALYSIS DATE: 2023-02-08T09:56:20ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – blackmatter – 930b9c1792a539acdb051af34de91060

February 8, 2023

Score: 10 MALWARE FAMILY: blackmatterTAGS:family:blackmatter, ransomwareMD5: 930b9c1792a539acdb051af34de91060SHA1: 2cda394db71fc67905e31d9e8f4b88ef85a248dcANALYSIS DATE: 2023-02-08T09:11:44ZTTPS: T1491, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – smokeloader – 6cbd15ef3fa6a26bc90555d1073897ae

February 8, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 6cbd15ef3fa6a26bc90555d1073897aeSHA1: 3bb9bd4ac387e338001e870fa31818f04fd34c3bANALYSIS DATE: 2023-02-08T09:56:21ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

threatintel

Malware Analysis – discovery – 662d26b4e627e44a0da5e5e99fa41942

Malware Analysis – – d6ad8da80809d7558c1a934e6ef28cbc

LockBit 3.0 Ransomware Victim: transports-feuillet[.]fr

BlackCat/ALPHV Ransomware Victim: Five Guys Enterprises, LLC

BlackCat/ALPHV Ransomware Victim: Finaport

Cobalt Stike Beacon Detected – 182[.]61[.]6[.]63:9999

Cobalt Stike Beacon Detected – 190[.]123[.]44[.]122:443

Cobalt Stike Beacon Detected – 23[.]227[.]196[.]194:443

Cobalt Stike Beacon Detected – 209[.]141[.]36[.]163:443

BlackCat/ALPHV Ransomware Victim: El-Mohandes

BlackCat/ALPHV Ransomware Victim: Menken Orlando

BlackCat/ALPHV Ransomware Victim: JReynolds

BlackCat/ALPHV Ransomware Victim: Kerber, Eck & Braeckel LLP

Malware Analysis – lockbit – fe5101b50e92a923d74cc6f0f4225539

Malware Analysis – djvu – 874a8573bbe9da63a8026990fd4f7327

Cobalt Stike Beacon Detected – 180[.]184[.]71[.]14:443

Cobalt Stike Beacon Detected – 107[.]172[.]206[.]242:444

Cobalt Stike Beacon Detected – 1[.]15[.]247[.]249:8086

Cobalt Stike Beacon Detected – 190[.]123[.]44[.]214:443

Malware Analysis – smokeloader – 8ffa156806f6de5616d493e5b2b90ee7

Malware Analysis – smokeloader – ab6b2ae0b2922ba977cd338c68b75ba0

Malware Analysis – smokeloader – 5291189417e7702824378a4ee78c1840

Malware Analysis – blackmatter – 930b9c1792a539acdb051af34de91060

Malware Analysis – smokeloader – 6cbd15ef3fa6a26bc90555d1073897ae

Catwatchful – 61,641 breached accounts

CVE Alert: CVE-2025-6437

CVE Alert: CVE-2025-6459

CVE Alert: CVE-2025-6686

CVE Alert: CVE-2025-5817

You may have missed