threatintel

Malware Analysis – smokeloader – b474d30039b51a5fd11deda319dde90d

January 7, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: b474d30039b51a5fd11deda319dde90dSHA1: 0876ca51235b8ee3a2b338c7e73d58cc89a4a416ANALYSIS DATE: 2023-01-07T09:11:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – asyncrat – ddfdcc11a3e4a5dd265442a5bcea9fcf

January 7, 2023

Score: 10 MALWARE FAMILY: asyncratTAGS:family:asyncrat, discovery, persistence, ransomware, rat, spyware, stealerMD5: ddfdcc11a3e4a5dd265442a5bcea9fcfSHA1: a98cf41fb793d5c23bef6baac5c5848233c6ff41ANALYSIS DATE: 2023-01-07T10:41:42ZTTPS: T1012, T1082, T1053, T1060, T1120,...

Malware Analysis – djvu – 283b4ce9dfbdb15c6f0527b9670fc4ab

January 7, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 283b4ce9dfbdb15c6f0527b9670fc4abSHA1: 122f0d7d59d4cac2e3500af8ce5003b435342953ANALYSIS DATE: 2023-01-07T09:17:10ZTTPS: T1053, T1005, T1081, T1012,...

Malware Analysis – asyncrat – 596e8b4c50fa6579495c12756c3b5f14

January 7, 2023

Score: 10 MALWARE FAMILY: asyncratTAGS:family:asyncrat, discovery, persistence, ransomware, ratMD5: 596e8b4c50fa6579495c12756c3b5f14SHA1: de331021e0b2f8fcb792db5cef59472c1964b3bfANALYSIS DATE: 2023-01-07T11:12:40ZTTPS: T1012, T1082, T1120, T1112, T1060, T1042, T1053...

Malware Analysis – djvu – b540bd5385b69b6efdc13929a24a1d94

January 7, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: b540bd5385b69b6efdc13929a24a1d94SHA1: 3e50087a02872cb41aa73a1dd57c4bced40c2b5bANALYSIS DATE: 2023-01-07T11:43:58ZTTPS: T1012, T1082, T1222, T1053,...

Malware Analysis – – c5bc2f381a335456610ad9eded37ff13

January 7, 2023

Score: 1 MALWARE FAMILY: TAGS:MD5: c5bc2f381a335456610ad9eded37ff13SHA1: 12164a4a698ae1f7b401aaac67d16a4d2684e9e1ANALYSIS DATE: 2023-01-07T11:05:29ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – smokeloader – cfd57a3bbe2a49525cc1ff6183cc2085

January 7, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: cfd57a3bbe2a49525cc1ff6183cc2085SHA1: a2310517555e207a3c016364df67215dc69f7c33ANALYSIS DATE: 2023-01-07T11:26:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Brute Ratel C4 Detected – 18[.]178[.]100[.]187:80

January 7, 2023

The Information provided at the time of posting was detected as "Brute Ratel C4". Depending on when you are viewing...

Malware Analysis – djvu – 409c1dfc671e23c5db46a54c8bc89718

January 7, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 409c1dfc671e23c5db46a54c8bc89718SHA1: 3fb3c48f09d3175fe70e5411e457e0e937541a47ANALYSIS DATE: 2023-01-07T03:53:30ZTTPS: T1005, T1081, T1012, T1222,...

Malware Analysis – djvu – cafe995643719a184332620ddfd425b3

January 7, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: cafe995643719a184332620ddfd425b3SHA1: 5a51463584ce93b09e7227f4b0135b191a268bdcANALYSIS DATE: 2023-01-07T04:13:06ZTTPS: T1005, T1081, T1012, T1060,...

Malware Analysis – amadey – ab1584a0064fc4a6132e8ae530bf2a27

January 7, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:vidar, botnet:19, backdoor, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: ab1584a0064fc4a6132e8ae530bf2a27SHA1: bcee66986d10f96543ccd86f7263b5f57d675d5eANALYSIS DATE:...

Malware Analysis – amadey – eea2a8fb45dd969242c2bcfb9f612e48

January 7, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:vidar, botnet:19, backdoor, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: eea2a8fb45dd969242c2bcfb9f612e48SHA1: 9059fda6374dd9cea212ef65fb510003a9d4f9daANALYSIS DATE:...

Malware Analysis – djvu – 1dba6d82e5bfaf48d6648ffb5251c812

January 7, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 1dba6d82e5bfaf48d6648ffb5251c812SHA1: 850e12cb91891996bf5bd30e26a2001cf11f080fANALYSIS DATE: 2023-01-07T05:00:33ZTTPS: T1060, T1112, T1082, T1012,...

Malware Analysis – amadey – 11a7e34ac7eab95249626be889097378

January 7, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:vidar, botnet:19, backdoor, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: 11a7e34ac7eab95249626be889097378SHA1: 7c1799df6324d3f7c086dbd0810e176d7aa24644ANALYSIS DATE:...

Malware Analysis – amadey – 88d01b2f752a46708b106c66946917a8

January 7, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, backdoor, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: 88d01b2f752a46708b106c66946917a8SHA1: 108306ea32939fb9cc950e28e941bfb65ff5c4c3ANALYSIS DATE: 2023-01-07T05:04:52ZTTPS: T1082,...

SlideTeam – 1,464,271 breached accounts

January 7, 2023

HIBP In April 2021, the "world’s largest collection of pre-designed presentation slides" SlideTeam had 1.4M records breached and later published...

Vice Society Ransomware Victim: Park View

January 7, 2023

Vice Society Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Vice Society Ransomware Victim: City Lit

January 7, 2023

Vice Society Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Vice Society Ransomware Victim: Bay Area Rapid Transit

January 7, 2023

Vice Society Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Vice Society Ransomware Victim: LetMeRepair

January 7, 2023

Vice Society Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Cobalt Stike Beacon Detected – 38[.]242[.]241[.]231:443

January 7, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 107[.]174[.]247[.]46:80

January 7, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 101[.]43[.]188[.]175:8443

January 7, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – b0f0b79c2b04c118ef4f6629e88cd2bc

January 7, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: b0f0b79c2b04c118ef4f6629e88cd2bcSHA1: e88aec0e4d70cce8ae9ac6ed07191f24eb03afeaANALYSIS DATE: 2023-01-06T21:16:19ZTTPS: T1012, T1082, T1005, T1081,...

threatintel

Malware Analysis – smokeloader – b474d30039b51a5fd11deda319dde90d

Malware Analysis – asyncrat – ddfdcc11a3e4a5dd265442a5bcea9fcf

Malware Analysis – djvu – 283b4ce9dfbdb15c6f0527b9670fc4ab

Malware Analysis – asyncrat – 596e8b4c50fa6579495c12756c3b5f14

Malware Analysis – djvu – b540bd5385b69b6efdc13929a24a1d94

Malware Analysis – – c5bc2f381a335456610ad9eded37ff13

Malware Analysis – smokeloader – cfd57a3bbe2a49525cc1ff6183cc2085

Brute Ratel C4 Detected – 18[.]178[.]100[.]187:80

Malware Analysis – djvu – 409c1dfc671e23c5db46a54c8bc89718

Malware Analysis – djvu – cafe995643719a184332620ddfd425b3

Malware Analysis – amadey – ab1584a0064fc4a6132e8ae530bf2a27

Malware Analysis – amadey – eea2a8fb45dd969242c2bcfb9f612e48

Malware Analysis – djvu – 1dba6d82e5bfaf48d6648ffb5251c812

Malware Analysis – amadey – 11a7e34ac7eab95249626be889097378

Malware Analysis – amadey – 88d01b2f752a46708b106c66946917a8

SlideTeam – 1,464,271 breached accounts

Vice Society Ransomware Victim: Park View

Vice Society Ransomware Victim: City Lit

Vice Society Ransomware Victim: Bay Area Rapid Transit

Vice Society Ransomware Victim: LetMeRepair

Cobalt Stike Beacon Detected – 38[.]242[.]241[.]231:443

Cobalt Stike Beacon Detected – 107[.]174[.]247[.]46:80

Cobalt Stike Beacon Detected – 101[.]43[.]188[.]175:8443

Malware Analysis – djvu – b0f0b79c2b04c118ef4f6629e88cd2bc

[KAWA4096] – Ransomware Victim: tokiomarine-nichido[.]co[.]jp

[KAWA4096] – Ransomware Victim: www[.]ogr-jp[.]com

[QILIN] – Ransomware Victim: exhibits-intl[.]com

CVE Alert: CVE-2024-12915

CVE Alert: CVE-2025-2895

You may have missed