threatintel

Malware Analysis – dcrat – 9e4e9a0d63d345bd24e6a974f751bd6b

January 9, 2023

Score: 10 MALWARE FAMILY: dcratTAGS:family:dcrat, family:djvu, family:redline, family:smokeloader, family:vidar, botnet:19, botnet:@2023@new, backdoor, discovery, infostealer, persistence, ransomware, rat, spyware, stealer, trojanMD5:...

Malware Analysis – smokeloader – 0d8206f8fbd4cad4c14fbc48e1ecec79

January 9, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 0d8206f8fbd4cad4c14fbc48e1ecec79SHA1: 446cf441f1280e16a10a6a7cc48e59aec15d98b3ANALYSIS DATE: 2023-01-09T05:16:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – ca487f76d723527db20f804d50c39eaa

January 9, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: ca487f76d723527db20f804d50c39eaaSHA1: 3fd3ba30bc77020a5e3bebf8c9d34a0834ad54b7ANALYSIS DATE: 2023-01-09T05:44:15ZTTPS: T1005, T1081, T1012, T1222,...

Malware Analysis – djvu – c1d43aa7d4455f59a66ff383f5736931

January 9, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:19, backdoor, discovery, persistence, ransomware, spyware, stealer, trojanMD5: c1d43aa7d4455f59a66ff383f5736931SHA1: a654ea0183d33c617cc58123a66b345a6b6bf62aANALYSIS DATE: 2023-01-09T04:50:28ZTTPS: T1012,...

Malware Analysis – smokeloader – 0af68ab2edffc49632fd170dc3c97127

January 9, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 0af68ab2edffc49632fd170dc3c97127SHA1: fd585f3813b61a70a5f102c2208b212b2f324873ANALYSIS DATE: 2023-01-09T04:26:02ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

DoorDash – 367,476 breached accounts

January 9, 2023

HIBP In August 2022, the food ordering and delivery service DoorDash disclosed a data breach that impacted a portion of...

Cobalt Stike Beacon Detected – 107[.]189[.]1[.]15:443

January 9, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

BlackCat/ALPHV Ransomware Victim: Koo Wee Rup Secondary College

January 9, 2023

BlackCat / ALPHV Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the...

Cobalt Stike Beacon Detected – 18[.]205[.]189[.]67:443

January 9, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 38[.]60[.]50[.]186:80

January 9, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 45[.]32[.]121[.]12:9000

January 9, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 107[.]148[.]130[.]141:80

January 9, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – 1de29ef9bed38c0a81a30a09369d8f7f

January 9, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 1de29ef9bed38c0a81a30a09369d8f7fSHA1: 52f41573d0ce0e4ea96380b0f23c1c5dea872c76ANALYSIS DATE: 2023-01-08T21:54:46ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – dcrat – 4b63df4f727bc68412c39ae8cecd54fe

January 9, 2023

Score: 10 MALWARE FAMILY: dcratTAGS:family:dcrat, family:djvu, family:smokeloader, family:vidar, botnet:19, backdoor, collection, discovery, infostealer, persistence, ransomware, rat, spyware, stealer, trojanMD5: 4b63df4f727bc68412c39ae8cecd54feSHA1:...

Malware Analysis – djvu – 04a8fd3346eabeb3fefa118206f9aa1b

January 9, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 04a8fd3346eabeb3fefa118206f9aa1bSHA1: 92d3b89a5a9e53867c028a9a4569af7bd884663bANALYSIS DATE: 2023-01-08T22:42:47ZTTPS: T1222, T1012, T1082, T1005,...

threatintel

Malware Analysis – dcrat – 9e4e9a0d63d345bd24e6a974f751bd6b

Malware Analysis – smokeloader – 0d8206f8fbd4cad4c14fbc48e1ecec79

Malware Analysis – djvu – ca487f76d723527db20f804d50c39eaa

Malware Analysis – djvu – c1d43aa7d4455f59a66ff383f5736931

Malware Analysis – smokeloader – 0af68ab2edffc49632fd170dc3c97127

DoorDash – 367,476 breached accounts

Cobalt Stike Beacon Detected – 107[.]189[.]1[.]15:443

BlackCat/ALPHV Ransomware Victim: Koo Wee Rup Secondary College

Cobalt Stike Beacon Detected – 18[.]205[.]189[.]67:443

Cobalt Stike Beacon Detected – 38[.]60[.]50[.]186:80

Cobalt Stike Beacon Detected – 45[.]32[.]121[.]12:9000

Cobalt Stike Beacon Detected – 107[.]148[.]130[.]141:80

Malware Analysis – djvu – 1de29ef9bed38c0a81a30a09369d8f7f

Malware Analysis – dcrat – 4b63df4f727bc68412c39ae8cecd54fe

Malware Analysis – djvu – 04a8fd3346eabeb3fefa118206f9aa1b

LockBit 3.0 Ransomware Victim: asianrecorp[.]com

LockBit 3.0 Ransomware Victim: millennia[.]pro

BreachForums Database Leak Alert: EDAboard

Cobalt Stike Beacon Detected – 185[.]174[.]172[.]221:80

Cobalt Stike Beacon Detected – 82[.]157[.]8[.]217:5555

Cobalt Stike Beacon Detected – 101[.]42[.]27[.]149:80

AceLdr – Cobalt Strike UDRL For Memory Scanner Evasion

Cobalt Stike Beacon Detected – 124[.]70[.]130[.]70:2222

Cobalt Stike Beacon Detected – 20[.]222[.]65[.]114:8000

“Jasper Sleet”: North Korean AI-assisted threat actors

CVE Alert: CVE-2025-4407

CVE Alert: CVE-2025-6905

CVE Alert: CVE-2025-6907

CVE Alert: CVE-2025-6906

You may have missed