threatintel

Malware Analysis – lockbit – 98b55e5cb7d0c6006dd201c9734aa59b

February 3, 2023

Score: 10 MALWARE FAMILY: lockbitTAGS:family:lockbit, discovery, evasion, persistence, ransomwareMD5: 98b55e5cb7d0c6006dd201c9734aa59bSHA1: 2f9fcbd4607a5303bffed8c9562750cc8b0e8789ANALYSIS DATE: 2023-02-02T23:16:13ZTTPS: T1490, T1046, T1082, T1107, T1060, T1112 ScoreMeaningExample10Known...

Malware Analysis – lockbit – e86b8eff6d47b0f5a9a42215562e77b9

February 3, 2023

Score: 10 MALWARE FAMILY: lockbitTAGS:family:lockbit, ransomwareMD5: e86b8eff6d47b0f5a9a42215562e77b9SHA1: 4bd968181272dacc18683e93521f5f195dc0d70aANALYSIS DATE: 2023-02-02T23:14:28ZTTPS: T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – evasion – 891e7db2a37d53092c7d0b512ffb7499

February 3, 2023

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 891e7db2a37d53092c7d0b512ffb7499SHA1: bc312d3af963841d97ae47cf6c3cf94a0cd6779dANALYSIS DATE: 2023-02-02T23:11:46ZTTPS: T1490, T1059, T1107, T1060, T1112, T1082, T1070, T1485,...

Malware Analysis – lockbit – c348a516d5880cc81ff35057fec1611b

February 3, 2023

Score: 10 MALWARE FAMILY: lockbitTAGS:family:lockbit, ransomware, spyware, stealerMD5: c348a516d5880cc81ff35057fec1611bSHA1: 90bf3bd3c833b302a1e2c8871fdad376fbced557ANALYSIS DATE: 2023-02-02T23:16:23ZTTPS: T1491, T1112, T1005, T1081 ScoreMeaningExample10Known badA malware family...

Malware Analysis – lockbit – 494535c9a7f6a4b98e241664cba68b49

February 3, 2023

Score: 10 MALWARE FAMILY: lockbitTAGS:family:lockbit, ransomwareMD5: 494535c9a7f6a4b98e241664cba68b49SHA1: 3c97c9a7ffd449a5091d70595f560054118354a3ANALYSIS DATE: 2023-02-02T23:16:30ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – lockbit – 5a402d34daf6a1766196f7223fb60b77

February 3, 2023

Score: 10 MALWARE FAMILY: lockbitTAGS:family:lockbit, ransomware, spyware, stealerMD5: 5a402d34daf6a1766196f7223fb60b77SHA1: 61f1b1985b7e204229e36a82ad6b031fde52870bANALYSIS DATE: 2023-02-02T23:16:44ZTTPS: T1005, T1081, T1491, T1112 ScoreMeaningExample10Known badA malware family...

Malware Analysis – lockbit – d94f190ff2e911d07c02a3d4210d7f1a

February 3, 2023

Score: 10 MALWARE FAMILY: lockbitTAGS:family:lockbit, ransomwareMD5: d94f190ff2e911d07c02a3d4210d7f1aSHA1: e6e047d719d8e031caa9281f53005154ca45a377ANALYSIS DATE: 2023-02-02T23:16:37ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – evasion – db0c6460121c0b2aa23dcfdd5a81d7ef

February 3, 2023

Score: 6 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: db0c6460121c0b2aa23dcfdd5a81d7efSHA1: 22f42207e98995a02d443677ca2aa20d4ef57e94ANALYSIS DATE: 2023-02-02T23:40:12ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

b1089ec1f0dd9f9546144700b9c14edca42098d7321307e53b3df5c90a4d4feb

Ransomware in December 2022

February 2, 2023

Malwarebytes Threat Intelligence builds a monthly picture of ransomware activity by monitoring the information published by ransomware gangs on their...

Royal Ransomware Victim: MESSER CUTTING SYSTEMS

February 2, 2023

RoyalRansomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the...

BlackCat/ALPHV Ransomware Victim: McEwan Fraser Legal

February 2, 2023

BlackCat / ALPHV Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the...

CISA: Cisco Releases Security Advisories for Multiple Products

February 2, 2023

Cisco Releases Security Advisories for Multiple Products Cisco released security updates for vulnerabilities affecting multiple products. A remote attacker could...

CISA: Drupal Releases Security Update to Address a Vulnerability in Apigee Edge

February 2, 2023

Drupal Releases Security Update to Address a Vulnerability in Apigee Edge Drupal released a security update to address a vulnerability...

Cobalt Stike Beacon Detected – 18[.]212[.]19[.]9:443

February 2, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Royal Ransomware Victim: Casa Ley

February 2, 2023

RoyalRansomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the...

Cobalt Stike Beacon Detected – 109[.]172[.]45[.]28:80

February 2, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 146[.]70[.]87[.]143:80

February 2, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 123[.]60[.]165[.]221:443

February 2, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 209[.]141[.]52[.]22:443

February 2, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 101[.]35[.]247[.]212:443

February 2, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 106[.]75[.]227[.]134:80

February 2, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 109[.]192[.]212[.]70:9001

February 2, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 162[.]33[.]179[.]221:443

February 2, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – amadey – fd178725fc7ebd4257d17a823158bec5

February 2, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:vidar, botnet:19, backdoor, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: fd178725fc7ebd4257d17a823158bec5SHA1: 81c0dcd1dc7a5936ace3c7036b00c499b54afd04ANALYSIS DATE:...

threatintel

Malware Analysis – lockbit – 98b55e5cb7d0c6006dd201c9734aa59b

Malware Analysis – lockbit – e86b8eff6d47b0f5a9a42215562e77b9

Malware Analysis – evasion – 891e7db2a37d53092c7d0b512ffb7499

Malware Analysis – lockbit – c348a516d5880cc81ff35057fec1611b

Malware Analysis – lockbit – 494535c9a7f6a4b98e241664cba68b49

Malware Analysis – lockbit – 5a402d34daf6a1766196f7223fb60b77

Malware Analysis – lockbit – d94f190ff2e911d07c02a3d4210d7f1a

Malware Analysis – evasion – db0c6460121c0b2aa23dcfdd5a81d7ef

Ransomware in December 2022

Royal Ransomware Victim: MESSER CUTTING SYSTEMS

BlackCat/ALPHV Ransomware Victim: McEwan Fraser Legal

CISA: Cisco Releases Security Advisories for Multiple Products

CISA: Drupal Releases Security Update to Address a Vulnerability in Apigee Edge

Cobalt Stike Beacon Detected – 18[.]212[.]19[.]9:443

Royal Ransomware Victim: Casa Ley

Cobalt Stike Beacon Detected – 109[.]172[.]45[.]28:80

Cobalt Stike Beacon Detected – 146[.]70[.]87[.]143:80

Cobalt Stike Beacon Detected – 123[.]60[.]165[.]221:443

Cobalt Stike Beacon Detected – 209[.]141[.]52[.]22:443

Cobalt Stike Beacon Detected – 101[.]35[.]247[.]212:443

Cobalt Stike Beacon Detected – 106[.]75[.]227[.]134:80

Cobalt Stike Beacon Detected – 109[.]192[.]212[.]70:9001

Cobalt Stike Beacon Detected – 162[.]33[.]179[.]221:443

Malware Analysis – amadey – fd178725fc7ebd4257d17a823158bec5

CVE Alert: CVE-2025-27026

CVE Alert: CVE-2025-52891

CVE Alert: CVE-2025-53492

CVE Alert: CVE-2025-46647

CVE Alert: CVE-2025-45029

You may have missed