threatintel

Malware Analysis – amadey – a56d3c79f4cb08aec0b6369f2f0d3c0c

December 27, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: a56d3c79f4cb08aec0b6369f2f0d3c0cSHA1: fb1c5685084544fa57aa8e3f2622aeedd8f780f8ANALYSIS DATE: 2022-12-27T10:32:44ZTTPS:...

BlackCat/ALPHV Ransomware Victim: FARMS[.]COM

December 27, 2022

BlackCat / ALPHV Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the...

BlackCat/ALPHV Ransomware Victim: SSI Schäfer Shop

December 27, 2022

BlackCat / ALPHV Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the...

BlackCat/ALPHV Ransomware Victim: CR&R

December 27, 2022

BlackCat / ALPHV Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the...

BlackCat/ALPHV Ransomware Victim: Meyer & Meyer Holding SE & Co[.] KG

December 27, 2022

BlackCat / ALPHV Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the...

Malware Analysis – evasion – 666dd728a10e4abeffdf56f50de9b420

December 27, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomwareMD5: 666dd728a10e4abeffdf56f50de9b420SHA1: b6b8e884445e684df12f5ebb748a6ff3fc707a6cANALYSIS DATE: 2022-12-27T10:51:15ZTTPS: T1107, T1490, T1060, T1112, T1031, T1562, T1489, T1082 ScoreMeaningExample10Known...

Malware Analysis – ransomware – 99109eb335db668094278d1953aff94f

December 27, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 99109eb335db668094278d1953aff94fSHA1: b6dd1bc3b9ff8522d97945e2c19d0a2ea9651cf7ANALYSIS DATE: 2022-12-27T10:51:11ZTTPS: T1107, T1490, T1082, T1018 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – matrix – 1c73c307773fedfccd544a6b6b0b55b9

December 27, 2022

Score: 10 MALWARE FAMILY: matrixTAGS:family:matrix, discovery, evasion, persistence, ransomware, spyware, stealer, upxMD5: 1c73c307773fedfccd544a6b6b0b55b9SHA1: 899ffd934e0b8a6df4b115c49df33fca524e2135ANALYSIS DATE: 2022-12-27T10:51:17ZTTPS: T1490, T1053, T1012, T1120,...

Malware Analysis – persistence – 9476b5f481090ea650cfc65e017dc41c

December 27, 2022

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 9476b5f481090ea650cfc65e017dc41cSHA1: 0fa937125a55c299a48d3e1485fee16646555087ANALYSIS DATE: 2022-12-27T10:51:13ZTTPS: T1082, T1112, T1005, T1081, T1060, T1107, T1490, T1130...

Malware Analysis – evasion – 16deea31a988e7af71001c2eda8ad614

December 27, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 16deea31a988e7af71001c2eda8ad614SHA1: 8d992884b713b56d1edbf40306b2e11dc54f9887ANALYSIS DATE: 2022-12-27T10:51:28ZTTPS: T1490, T1059, T1107, T1082, T1088, T1089, T1112, T1053,...

Malware Analysis – phobos – 377aa2486224f59074c39512f6d5bf08

December 27, 2022

Score: 10 MALWARE FAMILY: phobosTAGS:family:phobos, evasion, persistence, ransomware, spyware, stealerMD5: 377aa2486224f59074c39512f6d5bf08SHA1: 5a881b873f82e94634377b65b8126c603e4da7deANALYSIS DATE: 2022-12-27T10:51:20ZTTPS: T1490, T1059, T1107, T1031, T1005, T1081,...

Malware Analysis – phobos – b8d08e441562570f4bdca07a259da9a2

December 27, 2022

Score: 10 MALWARE FAMILY: phobosTAGS:family:phobos, evasion, persistence, ransomware, spyware, stealerMD5: b8d08e441562570f4bdca07a259da9a2SHA1: 8025eac462e1b5d4a49496c700891b44c692e6b4ANALYSIS DATE: 2022-12-27T10:51:25ZTTPS: T1490, T1059, T1107, T1112, T1060, T1005,...

Malware Analysis – phobos – 78e7a770f7af0b3fa64fc324c391e288

December 27, 2022

Score: 10 MALWARE FAMILY: phobosTAGS:family:phobos, evasion, persistence, ransomware, spyware, stealerMD5: 78e7a770f7af0b3fa64fc324c391e288SHA1: 0506b7d989e2381fdb2122ef9d2ca6cd7ce7f132ANALYSIS DATE: 2022-12-27T10:51:22ZTTPS: T1490, T1059, T1107, T1060, T1112, T1031,...

Malware Analysis – evasion – fa7229691c60464db93975f90ba1d566

December 27, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, ransomware, trojanMD5: fa7229691c60464db93975f90ba1d566SHA1: c47a7dfe28b036df7345f16251d3111b7042949bANALYSIS DATE: 2022-12-27T10:51:35ZTTPS: T1082, T1012, T1120, T1112, T1053, T1107, T1490, T1031, T1089,...

Malware Analysis – persistence – c60d51beca144f33e926955116c906b5

December 27, 2022

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: c60d51beca144f33e926955116c906b5SHA1: bbbbd5f55c09b1cbd568209e9515b516a718e8baANALYSIS DATE: 2022-12-27T10:51:40ZTTPS: T1082, T1012, T1120, T1107, T1490, T1060, T1112 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – ddee92c23a182d69884422c1e8a3df1b

December 27, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: ddee92c23a182d69884422c1e8a3df1bSHA1: d3c0510bf108a2a7c387c7edea77af7642222e56ANALYSIS DATE: 2022-12-27T10:51:41ZTTPS: T1012, T1120, T1082, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ransomware – 5c58ed8ef5fc167a8fe10ef53d5734c5

December 27, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 5c58ed8ef5fc167a8fe10ef53d5734c5SHA1: e2b2fc4ee2111f2bde5afd7a5ab95783df9d653fANALYSIS DATE: 2022-12-27T10:51:33ZTTPS: T1107, T1490, T1082, T1018 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – ransomware – 94f8cfa9fded0b21d77b6f3dca1bfe47

December 27, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 94f8cfa9fded0b21d77b6f3dca1bfe47SHA1: 1d35a47e7742fd29f5c43d4338de39b3313b5e93ANALYSIS DATE: 2022-12-27T10:51:44ZTTPS: T1012, T1120, T1082, T1018 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – spyware – 63dbc6fe48f66d66214c2b6c93b60fbd

December 27, 2022

Score: 7 MALWARE FAMILY: spywareTAGS:spyware, stealerMD5: 63dbc6fe48f66d66214c2b6c93b60fbdSHA1: 4f92db404aec1f3497dbc9d226eee3a318a0f972ANALYSIS DATE: 2022-12-27T11:49:50ZTTPS: T1012, T1082, T1102, T1005, T1081, T1120 ScoreMeaningExample10Known badA malware family...

Malware Analysis – – 78b7157812e786cc63eb362fa539271e

December 27, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: 78b7157812e786cc63eb362fa539271eSHA1: bdb50db33ba6da8f4c40a4969712daa8f300e39cANALYSIS DATE: 2022-12-27T11:42:25ZTTPS: T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – smokeloader – 3eb587859a472ae910f2f21fbdd70db5

December 27, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 3eb587859a472ae910f2f21fbdd70db5SHA1: bdcd11d43d4a288958db3bd1db1f216918eae5a5ANALYSIS DATE: 2022-12-27T11:31:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Cobalt Stike Beacon Detected – 35[.]201[.]225[.]182:80

December 27, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

BreachForums Database Leak Alert: Clube do Ingresso

December 27, 2022

BreachForums - Databreach discussion & leaks forum. NOTE: No files or stolen information are by RedPacket Security. Any legal issues...

Malware Analysis – djvu – dd91d13c6df094caa47149165915eec6

December 27, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: dd91d13c6df094caa47149165915eec6SHA1: 8d1d39ed0ea699368534901a2ce8defb012825d2ANALYSIS DATE: 2022-12-27T03:01:14ZTTPS: T1012, T1005, T1081, T1060, T1112, T1082,...

threatintel

Malware Analysis – amadey – a56d3c79f4cb08aec0b6369f2f0d3c0c

BlackCat/ALPHV Ransomware Victim: FARMS[.]COM

BlackCat/ALPHV Ransomware Victim: SSI Schäfer Shop

BlackCat/ALPHV Ransomware Victim: CR&R

BlackCat/ALPHV Ransomware Victim: Meyer & Meyer Holding SE & Co[.] KG

Malware Analysis – evasion – 666dd728a10e4abeffdf56f50de9b420

Malware Analysis – ransomware – 99109eb335db668094278d1953aff94f

Malware Analysis – matrix – 1c73c307773fedfccd544a6b6b0b55b9

Malware Analysis – persistence – 9476b5f481090ea650cfc65e017dc41c

Malware Analysis – evasion – 16deea31a988e7af71001c2eda8ad614

Malware Analysis – phobos – 377aa2486224f59074c39512f6d5bf08

Malware Analysis – phobos – b8d08e441562570f4bdca07a259da9a2

Malware Analysis – phobos – 78e7a770f7af0b3fa64fc324c391e288

Malware Analysis – evasion – fa7229691c60464db93975f90ba1d566

Malware Analysis – persistence – c60d51beca144f33e926955116c906b5

Malware Analysis – ransomware – ddee92c23a182d69884422c1e8a3df1b

Malware Analysis – ransomware – 5c58ed8ef5fc167a8fe10ef53d5734c5

Malware Analysis – ransomware – 94f8cfa9fded0b21d77b6f3dca1bfe47

Malware Analysis – spyware – 63dbc6fe48f66d66214c2b6c93b60fbd

Malware Analysis – – 78b7157812e786cc63eb362fa539271e

Malware Analysis – smokeloader – 3eb587859a472ae910f2f21fbdd70db5

Cobalt Stike Beacon Detected – 35[.]201[.]225[.]182:80

BreachForums Database Leak Alert: Clube do Ingresso

Malware Analysis – djvu – dd91d13c6df094caa47149165915eec6

Catwatchful – 61,641 breached accounts

CVE Alert: CVE-2025-6437

CVE Alert: CVE-2025-6459

CVE Alert: CVE-2025-6686

CVE Alert: CVE-2025-5817

You may have missed