threatintel

Malware Analysis – djvu – 35b4d8975b7d90a92362c4872da8e000

January 2, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 35b4d8975b7d90a92362c4872da8e000SHA1: 8ec2dedf76f45ea6ba1e089d2e8081d7c8ae0907ANALYSIS DATE: 2023-01-01T22:31:38ZTTPS: T1060, T1112, T1012, T1082,...

Malware Analysis – smokeloader – 99a72f7ff695ad0c6a7c697a43ad42f1

January 2, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 99a72f7ff695ad0c6a7c697a43ad42f1SHA1: 81cf997876a1395e4e20ba5c6d2de38e28fa40d8ANALYSIS DATE: 2023-01-01T23:02:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – amadey – d061fe68df14422113a7069698607dee

January 2, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:dcrat, family:djvu, family:smokeloader, family:vidar, botnet:19, backdoor, collection, discovery, infostealer, persistence, ransomware, rat, spyware, stealer, trojan,...

Cobalt Stike Beacon Detected – 170[.]130[.]55[.]188:1400

January 2, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 20[.]166[.]65[.]7:443

January 2, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 47[.]117[.]127[.]175:60001

January 2, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 106[.]55[.]2[.]194:2087

January 2, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Digital Binary Code on Dark Red Background. Data Breach

Benchmark – 93,343 breached accounts

January 1, 2023

In November 2019, the Serbian technology news website Benchmark suffered a breach of its forum that exposed 93k customer records....

Malware Analysis – ransomware – 91ad108862744c05daa83bfe37a7c8b1

January 1, 2023

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, upxMD5: 91ad108862744c05daa83bfe37a7c8b1SHA1: b5b3475be40bda4f75d3d24b547d44d60c03c61bANALYSIS DATE: 2023-01-01T08:58:57ZTTPS: T1082, T1012, T1120, T1107, T1490, T1491, T1112 ScoreMeaningExample10Known badA malware...

Malware Analysis – amadey – 1b43fc5f83167e3ed72de7461fb2eb30

January 1, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:lgoogloader, family:smokeloader, family:vidar, botnet:19, backdoor, collection, discovery, downloader, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5:...

Malware Analysis – djvu – 66e2b7371289dd956427b58b8dc7eb14

January 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 66e2b7371289dd956427b58b8dc7eb14SHA1: 9d6fb6efbad6863d21643c7f665c3aa2521aa54dANALYSIS DATE: 2023-01-01T09:34:48ZTTPS: T1082, T1053, T1222, T1012,...

Malware Analysis – discovery – 5755c57c7d3b7304b42015c5dd34e5be

January 1, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, evasion, persistence, ransomwareMD5: 5755c57c7d3b7304b42015c5dd34e5beSHA1: 923d617a8a76195879a0eebc8a9794e00378450fANALYSIS DATE: 2023-01-01T09:38:40ZTTPS: T1060, T1112, T1012, T1082, T1031, T1053, T1158, T1042,...

Cobalt Stike Beacon Detected – 85[.]209[.]135[.]49:443

January 1, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 1[.]15[.]141[.]252:5555

January 1, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 1[.]15[.]141[.]252:443

January 1, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 110[.]41[.]131[.]105:6666

January 1, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – amadey – e7f05ecc16b05f76c5a228a2b688c93e

January 1, 2023

Malware Analysis – djvu – 89c3af6bef44ab50d7be35828dc5f1e3

January 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 89c3af6bef44ab50d7be35828dc5f1e3SHA1: b2ba0715cfbe5321bbc3e265fd5ec6998ad90c8cANALYSIS DATE: 2023-01-01T11:35:04ZTTPS: T1060, T1112, T1053, T1005,...

Malware Analysis – – a0affa0816e523701464051054026e1c

January 1, 2023

Score: 3 MALWARE FAMILY: TAGS:MD5: a0affa0816e523701464051054026e1cSHA1: 470172daf36ce355162213e898616b8a775b846cANALYSIS DATE: 2023-01-01T09:44:16ZTTPS: T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – smokeloader – 4040afcf9849e20e9305eb95cdd68ccc

January 1, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 4040afcf9849e20e9305eb95cdd68cccSHA1: 79b900321e613d55e919516e6db4e7d8d153ad1cANALYSIS DATE: 2023-01-01T11:12:17ZTTPS: T1012, T1120, T1082, T1112 ScoreMeaningExample10Known badA malware family was...

threatintel

Malware Analysis – djvu – 35b4d8975b7d90a92362c4872da8e000

Malware Analysis – smokeloader – 99a72f7ff695ad0c6a7c697a43ad42f1

Malware Analysis – amadey – d061fe68df14422113a7069698607dee

Cobalt Stike Beacon Detected – 170[.]130[.]55[.]188:1400

Cobalt Stike Beacon Detected – 20[.]166[.]65[.]7:443

Cobalt Stike Beacon Detected – 47[.]117[.]127[.]175:60001

Cobalt Stike Beacon Detected – 106[.]55[.]2[.]194:2087

Benchmark – 93,343 breached accounts

Malware Analysis – ransomware – 91ad108862744c05daa83bfe37a7c8b1

Malware Analysis – amadey – 1b43fc5f83167e3ed72de7461fb2eb30

Malware Analysis – djvu – 66e2b7371289dd956427b58b8dc7eb14

Malware Analysis – discovery – 5755c57c7d3b7304b42015c5dd34e5be

Cobalt Stike Beacon Detected – 85[.]209[.]135[.]49:443

Cobalt Stike Beacon Detected – 1[.]15[.]141[.]252:5555

Cobalt Stike Beacon Detected – 1[.]15[.]141[.]252:443

Cobalt Stike Beacon Detected – 110[.]41[.]131[.]105:6666

Malware Analysis – amadey – e7f05ecc16b05f76c5a228a2b688c93e

Malware Analysis – djvu – 89c3af6bef44ab50d7be35828dc5f1e3

Malware Analysis – – a0affa0816e523701464051054026e1c

Malware Analysis – smokeloader – 4040afcf9849e20e9305eb95cdd68ccc

Cobalt Stike Beacon Detected – 82[.]156[.]55[.]208:7788

Cobalt Stike Beacon Detected – 54[.]178[.]175[.]181:443

Cobalt Stike Beacon Detected – 43[.]156[.]3[.]238:2087

Cobalt Stike Beacon Detected – 43[.]138[.]62[.]36:8080

[INCRANSOM] – Ransomware Victim: coruzcitywndata+

[NOVA] – Ransomware Victim: Portel Logistic Technologies

[QILIN] – Ransomware Victim: www[.]nuphoton[.]com

[QILIN] – Ransomware Victim: semco-tech[.]com

[KAWA4096] – Ransomware Victim: ****-*[.]co[.]jp

You may have missed