threatintel

Malware Analysis – djvu – a0c687836dca8e691d7a6e09cf859a87

January 6, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, stealerMD5: a0c687836dca8e691d7a6e09cf859a87SHA1: 2709628eadbb3e5a7307f038f14e4bc0bfa9d7c7ANALYSIS DATE: 2023-01-06T17:06:03ZTTPS: T1053, T1130, T1112, T1060, T1222,...

Malware Analysis – djvu – 5bbf807c56cf3a364d547ee56141b74e

January 6, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 5bbf807c56cf3a364d547ee56141b74eSHA1: f03b55aa4df795edd9a05511e0b54d7645d5a714ANALYSIS DATE: 2023-01-06T17:24:05ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – amadey – 698538668c49ccbc41c8206d9252bacf

January 6, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:vidar, botnet:19, backdoor, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: 698538668c49ccbc41c8206d9252bacfSHA1: 2e912da10980b396997396a6ffc74d879a82733cANALYSIS DATE:...

Malware Analysis – djvu – 4c3380ed58f4ee04d6638af670f3d834

January 6, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 4c3380ed58f4ee04d6638af670f3d834SHA1: 8ebb5a19d4163ea8231b1ff4de7b23c7e5d67919ANALYSIS DATE: 2023-01-06T17:52:50ZTTPS: T1082, T1012, T1060, T1112,...

Malware Analysis – evasion – 8da384b2427b8397a5934182c159c257

January 6, 2023

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 8da384b2427b8397a5934182c159c257SHA1: 7bcd2d32a19c1ac7bd014dc9e64b806fdff5f5deANALYSIS DATE: 2023-01-06T17:46:43ZTTPS: T1490, T1491, T1112, T1012, T1120, T1082, T1107 ScoreMeaningExample10Known badA malware...

Malware Analysis – chaos – d36637d2e08e4c001d39699cedb6248a

January 6, 2023

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, evasion, ransomwareMD5: d36637d2e08e4c001d39699cedb6248aSHA1: d2b4f5326781dce97cadf039d3e58124c838cb20ANALYSIS DATE: 2023-01-06T17:45:47ZTTPS: T1490, T1059, T1107, T1082 ScoreMeaningExample10Known badA malware family was...

Vice Society Ransomware Victim: PROQUINAL Spradling Group

January 6, 2023

Vice Society Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Vice Society Ransomware Victim: Sub-drill Supply

January 6, 2023

Vice Society Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Vice Society Ransomware Victim: Xavier University of Louisiana

January 6, 2023

Vice Society Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Vice Society Ransomware Victim: LetMeRepair

January 6, 2023

Vice Society Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Royal Ransomware Victim: Bevolution Group

January 6, 2023

RoyalRansomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the...

Cobalt Stike Beacon Detected – 139[.]196[.]234[.]164:9998

January 6, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 43[.]143[.]237[.]87:443

January 6, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 193[.]27[.]14[.]214:80

January 6, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – spyware – 9c60113d492ebcf89e2b36af378654cf

January 6, 2023

Score: 8 MALWARE FAMILY: spywareTAGS:spyware, stealerMD5: 9c60113d492ebcf89e2b36af378654cfSHA1: 4b70fda198e03417c032e2f5675bc6d7b9890ec1ANALYSIS DATE: 2023-01-06T09:06:02ZTTPS: T1082, T1005, T1081 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – djvu – 9320af1b7b22fdd4c17cca870c4ea0c4

January 6, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, stealerMD5: 9320af1b7b22fdd4c17cca870c4ea0c4SHA1: 2294407a9dedb18b7e633614761da98b35b741c6ANALYSIS DATE: 2023-01-06T09:01:03ZTTPS: T1130, T1112, T1060, T1222, T1082,...

Malware Analysis – – fbd028cd6727fa3feda537db1ed703f0

January 6, 2023

Score: 1 MALWARE FAMILY: TAGS:MD5: fbd028cd6727fa3feda537db1ed703f0SHA1: 99b2f3a80a07b920ff18ee6f7234d2ffe2574871ANALYSIS DATE: 2023-01-06T09:03:56ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – d13c8f95955973410a07ba397d6a09d7

January 6, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: d13c8f95955973410a07ba397d6a09d7SHA1: cd2457e2d32449e0fa823c1b86d9e56df3ff448fANALYSIS DATE: 2023-01-06T10:11:56ZTTPS: T1012, T1082, T1222, T1005,...

Malware Analysis – amadey – daa0d1b1bd828f4343b830f047343993

January 6, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:vidar, botnet:19, backdoor, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: daa0d1b1bd828f4343b830f047343993SHA1: 036b65fab9706cb52fcc7b59032d49b26bef1b7eANALYSIS DATE:...

Malware Analysis – discovery – cea6e89b7b3774762f7f24147665da5b

January 6, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: cea6e89b7b3774762f7f24147665da5bSHA1: bbeb91e4098491ff0a7f5b9dfea902a81c917d05ANALYSIS DATE: 2023-01-06T09:26:08ZTTPS: T1012, T1082, T1112, T1042, T1060 ScoreMeaningExample10Known badA malware family...

Malware Analysis – djvu – c0ff95f938e709e83f5872c0630a9b67

January 6, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, stealerMD5: c0ff95f938e709e83f5872c0630a9b67SHA1: 35254c0de46398670b5a9b4c6b9e6e9a953cc402ANALYSIS DATE: 2023-01-06T10:01:07ZTTPS: T1130, T1112, T1060, T1222, T1082,...

Malware Analysis – djvu – 5c24f6f6c86564db7ea71bf01ec5dbc5

January 6, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 5c24f6f6c86564db7ea71bf01ec5dbc5SHA1: e0c5ac9895ba2621bb3ad63a3740d678d137dc59ANALYSIS DATE: 2023-01-06T11:43:32ZTTPS: T1060, T1112, T1053, T1012,...

Malware Analysis – wannacry – 115b1d97402bc50dacb74ba73c7464d2

January 6, 2023

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, ransomware, wormMD5: 115b1d97402bc50dacb74ba73c7464d2SHA1: 799abb0d4067ec605126cd40ce52949510a60cf7ANALYSIS DATE: 2023-01-06T11:00:52ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – amadey – c3b88f8dfbc849ad2a6d3253febe5905

January 6, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:vidar, botnet:19, backdoor, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: c3b88f8dfbc849ad2a6d3253febe5905SHA1: 88665567cd41b6d9a950727c16e038712dc08a07ANALYSIS DATE:...

threatintel

Malware Analysis – djvu – a0c687836dca8e691d7a6e09cf859a87

Malware Analysis – djvu – 5bbf807c56cf3a364d547ee56141b74e

Malware Analysis – amadey – 698538668c49ccbc41c8206d9252bacf

Malware Analysis – djvu – 4c3380ed58f4ee04d6638af670f3d834

Malware Analysis – evasion – 8da384b2427b8397a5934182c159c257

Malware Analysis – chaos – d36637d2e08e4c001d39699cedb6248a

Vice Society Ransomware Victim: PROQUINAL Spradling Group

Vice Society Ransomware Victim: Sub-drill Supply

Vice Society Ransomware Victim: Xavier University of Louisiana

Vice Society Ransomware Victim: LetMeRepair

Royal Ransomware Victim: Bevolution Group

Cobalt Stike Beacon Detected – 139[.]196[.]234[.]164:9998

Cobalt Stike Beacon Detected – 43[.]143[.]237[.]87:443

Cobalt Stike Beacon Detected – 193[.]27[.]14[.]214:80

Malware Analysis – spyware – 9c60113d492ebcf89e2b36af378654cf

Malware Analysis – djvu – 9320af1b7b22fdd4c17cca870c4ea0c4

Malware Analysis – – fbd028cd6727fa3feda537db1ed703f0

Malware Analysis – djvu – d13c8f95955973410a07ba397d6a09d7

Malware Analysis – amadey – daa0d1b1bd828f4343b830f047343993

Malware Analysis – discovery – cea6e89b7b3774762f7f24147665da5b

Malware Analysis – djvu – c0ff95f938e709e83f5872c0630a9b67

Malware Analysis – djvu – 5c24f6f6c86564db7ea71bf01ec5dbc5

Malware Analysis – wannacry – 115b1d97402bc50dacb74ba73c7464d2

Malware Analysis – amadey – c3b88f8dfbc849ad2a6d3253febe5905

[KAWA4096] – Ransomware Victim: tokiomarine-nichido[.]co[.]jp

[KAWA4096] – Ransomware Victim: www[.]ogr-jp[.]com

[QILIN] – Ransomware Victim: exhibits-intl[.]com

CVE Alert: CVE-2024-12915

CVE Alert: CVE-2025-2895

You may have missed