threatintel

abstract-malware-990x400-1

Malware Analysis – djvu – 45841d5084e8b6dcb2cae5f631abf9d0

June 22, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:153ce668f1e21829c936c2b11fa4d869, discovery, persistence, ransomware, spyware, stealerMD5: 45841d5084e8b6dcb2cae5f631abf9d0SHA1: c9be8e5c7559dd9d623f94247cead30f3efaf231ANALYSIS DATE: 2023-06-22T18:16:28ZTTPS: T1082, T1012, T1053, T1005,...

Read More

abstract-malware-990x400-1

Malware Analysis – discovery – ce900ddf20b2554e60cb17de79ddfa27

June 22, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, evasion, persistence, ransomware, trojanMD5: ce900ddf20b2554e60cb17de79ddfa27SHA1: 07b5f2d9e9683ca4bdf983f53b9726270094ffaaANALYSIS DATE: 2023-06-22T18:52:16ZTTPS: T1012, T1120, T1082, T1088, T1089, T1112, T1102,...

Read More

8 Base Ransomware Victim: China Export & Credit Insurance Corporation

June 22, 2023

NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the files...

Read More

8 Base Ransomware Victim: Print Globe

June 22, 2023

NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the files...

Read More

8 Base Ransomware Victim: IMASA

June 22, 2023

NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the files...

Read More

8 Base Ransomware Victim: Neighborhood Progress Fund

June 22, 2023

NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the files...

Read More

8 Base Ransomware Victim: Immobilienmakler in Oldenburg

June 22, 2023

NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the files...

Read More

8 Base Ransomware Victim: MRO SUPPORT, INC

June 22, 2023

NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the files...

Read More

8 Base Ransomware Victim: La Canastería

June 22, 2023

NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the files...

Read More

8 Base Ransomware Victim: Richard W[.] Fuller CPA

June 22, 2023

NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the files...

Read More

8 Base Ransomware Victim: COMPAGNIE REGIONALE D’ALIMENTS (COREAL)

June 22, 2023

NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the files...

Read More

8 Base Ransomware Victim: HELPHONE

June 22, 2023

NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the files...

Read More

8 Base Ransomware Victim: Midway Ford

June 22, 2023

NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the files...

Read More

8 Base Ransomware Victim: Thayer Academy

June 22, 2023

NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the files...

Read More

8 Base Ransomware Victim: SITARA

June 22, 2023

NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the files...

Read More

8 Base Ransomware Victim: Veal and Prasad

June 22, 2023

NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the files...

Read More

8 Base Ransomware Victim: Lake Cable

June 22, 2023

NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the files...

Read More

8 Base Ransomware Victim: General de Alimentos Nisa C[.]A[.] (GENICA)

June 22, 2023

NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the files...

Read More

8 Base Ransomware Victim: Zenex

June 22, 2023

NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the files...

Read More

8 Base Ransomware Victim: Ellard-Willson Engineering Ltd

June 22, 2023

NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the files...

Read More

8 Base Ransomware Victim: M Metzler & Associates

June 22, 2023

NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the files...

Read More

8 Base Ransomware Victim: CONTASS

June 22, 2023

NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the files...

Read More

EndExt

EndExt – Go Tool For Extracting All The Possible Endpoints From The JS Files

June 22, 2023

EndExt is a .go tool for extracting all the possible endpoints from the JS files Idea When you crawll all...

Read More

abstract-malware-990x400-1

Malware Analysis – djvu – 9a978ce2ff697915c879d31785b37e16

June 22, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:153ce668f1e21829c936c2b11fa4d869, discovery, persistence, ransomware, spyware, stealerMD5: 9a978ce2ff697915c879d31785b37e16SHA1: bc58374ccf7bff13fb0bf0dfe17fb32c979979f4ANALYSIS DATE: 2023-06-22T15:58:08ZTTPS: T1060, T1112, T1222, T1082,...

Read More

Cobalt-Strike

Cobalt Strike Beacon Detected – 119[.]91[.]41[.]170:80

November 4, 2025

Cobalt-Strike

Cobalt Strike Beacon Detected – 124[.]220[.]48[.]168:2379

November 4, 2025

Cobalt-Strike

Cobalt Strike Beacon Detected – 81[.]70[.]255[.]195:8080

November 4, 2025

Cobalt-Strike

Cobalt Strike Beacon Detected – 129[.]204[.]103[.]151:8081

November 4, 2025

Cobalt-Strike

Cobalt Strike Beacon Detected – 106[.]75[.]215[.]96:8081

November 4, 2025