threatintel

Malware Analysis – amadey – 4c4dbc3a854c94d4544eb851248ecfb9

December 31, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:lgoogloader, family:smokeloader, family:vidar, botnet:19, backdoor, collection, discovery, downloader, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5:...

Malware Analysis – discovery – 26421955712b8b1cd7525f22f428766d

December 31, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploit, persistenceMD5: 26421955712b8b1cd7525f22f428766dSHA1: c0ad0f8c37269c739d58d6ac8f2c3a1b97e2f943ANALYSIS DATE: 2022-12-31T17:38:00ZTTPS: T1082, T1222, T1060, T1112, T1012 ScoreMeaningExample10Known badA malware family...

Malware Analysis – djvu – 23ff2f5f2c9e41f564461a6ab9b38e17

December 31, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 23ff2f5f2c9e41f564461a6ab9b38e17SHA1: 09309c3e0f173cb449eff6af59642669699aa330ANALYSIS DATE: 2022-12-31T17:10:16ZTTPS: T1222, T1060, T1112, T1005,...

Cuba Ransomware Victim: 2networkit

December 31, 2022

Cuba Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of...

Cuba Ransomware Victim: pu[.]edu[.]lb

December 31, 2022

Cuba Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of...

Cobalt Stike Beacon Detected – 91[.]240[.]118[.]210:92

December 31, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – f5b06a183a3daf45a79d8e616d688dce

December 31, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: f5b06a183a3daf45a79d8e616d688dceSHA1: 07d4be49e3b17cc376ac9571a5b23bb9d62fb649ANALYSIS DATE: 2022-12-31T09:43:56ZTTPS: T1222, T1053, T1012, T1005,...

Malware Analysis – smokeloader – 6cbd596168ada838550b6f6e535dbd36

December 31, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 6cbd596168ada838550b6f6e535dbd36SHA1: 2f152d072b89ecea3eb7e7c5bff9e0b79f52c0e8ANALYSIS DATE: 2022-12-31T09:04:02ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – discovery – e397ed4266ab57c298acaf572d864247

December 31, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, evasion, persistence, ransomwareMD5: e397ed4266ab57c298acaf572d864247SHA1: 491c1c2dec37d1b56487caaeae3e36168dcbce05ANALYSIS DATE: 2022-12-31T08:49:25ZTTPS: T1060, T1112, T1031, T1130, T1082, T1012, T1120 ScoreMeaningExample10Known...

Malware Analysis – ransomware – 101d606e040f3506412987bfb8bc5182

December 31, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 101d606e040f3506412987bfb8bc5182SHA1: d534c8aa724dfaeeba7686c7c14fd56a9f50f771ANALYSIS DATE: 2022-12-31T09:24:31ZTTPS: T1082, T1012 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Cobalt Stike Beacon Detected – 179[.]43[.]162[.]9:443

December 31, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 180[.]76[.]166[.]65:9110

December 31, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 43[.]139[.]167[.]44:800

December 31, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 101[.]42[.]19[.]216:80

December 31, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – 5de11ecab492439480fb87715ec6ae0b

December 31, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 5de11ecab492439480fb87715ec6ae0bSHA1: 1ac12b149c613639b2fc4cef6af5df4705b692ccANALYSIS DATE: 2022-12-31T11:40:19ZTTPS: T1060, T1112, T1012, T1005,...

Malware Analysis – – bcb1e5b4dc2eae0d6eb0765130dd26bb

December 31, 2022

Score: 3 MALWARE FAMILY: TAGS:MD5: bcb1e5b4dc2eae0d6eb0765130dd26bbSHA1: e2deb24987120b98586fd88269c5d8fe68314a06ANALYSIS DATE: 2022-12-31T11:48:27ZTTPS: T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – amadey – 47de2fabe0fb3d4578c2c7f6f7741c4a

December 31, 2022

Malware Analysis – smokeloader – f55db70dde213b489bed910191d180d2

December 31, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: f55db70dde213b489bed910191d180d2SHA1: faa9789e8bec8b7c03df02b12871231932b32fcdANALYSIS DATE: 2022-12-31T10:02:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Brute Ratel C4 Detected – 2[.]34[.]225[.]206:9002

December 31, 2022

The Information provided at the time of posting was detected as "Brute Ratel C4". Depending on when you are viewing...

Cobalt Stike Beacon Detected – 3[.]74[.]102[.]137:443

December 31, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 154[.]223[.]165[.]16:443

December 31, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 82[.]157[.]102[.]120:8999

December 31, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 34[.]92[.]28[.]142:443

December 31, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – e6c13b6e3d5d725d96c3d275be3c38d4

December 31, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: e6c13b6e3d5d725d96c3d275be3c38d4SHA1: 7803f9f7fbb55696f08dd5f961c2826aeb12e752ANALYSIS DATE: 2022-12-31T03:22:02ZTTPS: T1012, T1082, T1005, T1081,...

threatintel

Malware Analysis – amadey – 4c4dbc3a854c94d4544eb851248ecfb9

Malware Analysis – discovery – 26421955712b8b1cd7525f22f428766d

Malware Analysis – djvu – 23ff2f5f2c9e41f564461a6ab9b38e17

Cuba Ransomware Victim: 2networkit

Cuba Ransomware Victim: pu[.]edu[.]lb

Cobalt Stike Beacon Detected – 91[.]240[.]118[.]210:92

Malware Analysis – djvu – f5b06a183a3daf45a79d8e616d688dce

Malware Analysis – smokeloader – 6cbd596168ada838550b6f6e535dbd36

Malware Analysis – discovery – e397ed4266ab57c298acaf572d864247

Malware Analysis – ransomware – 101d606e040f3506412987bfb8bc5182

Cobalt Stike Beacon Detected – 179[.]43[.]162[.]9:443

Cobalt Stike Beacon Detected – 180[.]76[.]166[.]65:9110

Cobalt Stike Beacon Detected – 43[.]139[.]167[.]44:800

Cobalt Stike Beacon Detected – 101[.]42[.]19[.]216:80

Malware Analysis – djvu – 5de11ecab492439480fb87715ec6ae0b

Malware Analysis – – bcb1e5b4dc2eae0d6eb0765130dd26bb

Malware Analysis – amadey – 47de2fabe0fb3d4578c2c7f6f7741c4a

Malware Analysis – smokeloader – f55db70dde213b489bed910191d180d2

Brute Ratel C4 Detected – 2[.]34[.]225[.]206:9002

Cobalt Stike Beacon Detected – 3[.]74[.]102[.]137:443

Cobalt Stike Beacon Detected – 154[.]223[.]165[.]16:443

Cobalt Stike Beacon Detected – 82[.]157[.]102[.]120:8999

Cobalt Stike Beacon Detected – 34[.]92[.]28[.]142:443

Malware Analysis – djvu – e6c13b6e3d5d725d96c3d275be3c38d4

[SARCOMA] – Ransomware Victim: Cameron, Hodges, Coleman, LaPointe

[NIGHTSPIRE] – Ransomware Victim: Eversendai

[NIGHTSPIRE] – Ransomware Victim: Premier 1888 Ltd[.]

[NIGHTSPIRE] – Ransomware Victim: JIEI CO[.], LTD

CVE Alert: CVE-2025-32462

You may have missed