threatintel

Malware Analysis – amadey – e18e31983eaa7f57431e1b1944da462d

December 26, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:dcrat, family:djvu, family:smokeloader, backdoor, collection, discovery, infostealer, persistence, ransomware, rat, spyware, stealer, trojanMD5: e18e31983eaa7f57431e1b1944da462dSHA1: 20f0fa4aa4ec59799d92bce13f29d805bc2f6152ANALYSIS...

Malware Analysis – persistence – bf6f7ef2802705565d33ad4c9225acda

December 26, 2022

Score: 8 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, upxMD5: bf6f7ef2802705565d33ad4c9225acdaSHA1: d9a921d6e4f0d206e646700513eda143db239635ANALYSIS DATE: 2022-12-26T10:58:36ZTTPS: T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – djvu – 3692c2bcdbbc9788369d69baf870ca89

December 26, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 3692c2bcdbbc9788369d69baf870ca89SHA1: 7ddf72f7f5e38e2a55779bf73eb543646a471d41ANALYSIS DATE: 2022-12-26T10:38:33ZTTPS: T1222, T1060, T1112, T1053, T1005, T1081,...

Malware Analysis – djvu – ae21cdf16306059d4349c2ca9b0407a0

December 26, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: ae21cdf16306059d4349c2ca9b0407a0SHA1: df213eeffe96661015e29338765459894978628aANALYSIS DATE: 2022-12-26T10:17:27ZTTPS: T1012, T1005, T1081, T1082, T1222, T1060,...

Malware Analysis – amadey – 4151aa03de133d36e235103956f5df73

December 26, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 4151aa03de133d36e235103956f5df73SHA1: 37c6a03bc2066e438cfb68d7ce46dbd0fd33d06fANALYSIS DATE: 2022-12-26T10:48:17ZTTPS: T1005,...

Cobalt Stike Beacon Detected – 47[.]242[.]74[.]51:7676

December 26, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 54[.]92[.]103[.]160:443

December 26, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – phobos – f8cd85837b695b2689a8f3dfb67d415b

December 26, 2022

Score: 10 MALWARE FAMILY: phobosTAGS:family:phobos, evasion, persistence, ransomware, spyware, stealerMD5: f8cd85837b695b2689a8f3dfb67d415bSHA1: fd12b0db64c9d92033e2fd44b7606b7c88a56ca9ANALYSIS DATE: 2022-12-26T10:58:55ZTTPS: T1490, T1059, T1107, T1005, T1081, T1060,...

Malware Analysis – evasion – d7a24de75b761cb98f580dafda4ba885

December 26, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: d7a24de75b761cb98f580dafda4ba885SHA1: 86dc51cfc817937f9525b8aa2fa71e918288a44dANALYSIS DATE: 2022-12-26T10:59:16ZTTPS: T1490, T1059, T1107, T1485, T1053, T1112, T1031, T1089,...

Malware Analysis – persistence – 40efcdc05f8d6151a51ae7ad769c6ee0

December 26, 2022

Score: 8 MALWARE FAMILY: persistenceTAGS:persistence, upxMD5: 40efcdc05f8d6151a51ae7ad769c6ee0SHA1: 42347d5677a5058d748749f08d09e0b4e4b78632ANALYSIS DATE: 2022-12-26T10:59:14ZTTPS: T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – ransomware – bdfbe890594ca1ec7385f0b8b06d4fd2

December 26, 2022

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: bdfbe890594ca1ec7385f0b8b06d4fd2SHA1: 01a310fc267a349d96984965ecbe835ce5536c04ANALYSIS DATE: 2022-12-26T11:06:59ZTTPS: T1491, T1112, T1130, T1005, T1081 ScoreMeaningExample10Known badA malware family...

Cobalt Stike Beacon Detected – 120[.]48[.]124[.]220:3333

December 26, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 170[.]64[.]248[.]225:443

December 26, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 195[.]189[.]99[.]114:9443

December 26, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 1[.]116[.]160[.]39:80

December 26, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – amadey – 80ae4d81fab8357a6d8145c0d081adac

December 26, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 80ae4d81fab8357a6d8145c0d081adacSHA1: c17aa63d8f090b08e05a0558fde91ca064b1e983ANALYSIS DATE: 2022-12-26T11:32:49ZTTPS: T1012,...

Malware Analysis – ransomware – fa2bac4ec3b4956d76019d84f32f742a

December 26, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: fa2bac4ec3b4956d76019d84f32f742aSHA1: de74a1b4d3f5b554da4c9f18f1dbda7b36bb50c8ANALYSIS DATE: 2022-12-26T11:07:03ZTTPS: T1005, T1081, T1491, T1112, T1107, T1490, T1130 ScoreMeaningExample10Known badA...

Malware Analysis – wannacry – da5eee93accd46fe8755b93a19ada407

December 26, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, ransomware, wormMD5: da5eee93accd46fe8755b93a19ada407SHA1: b85e778ccd3ce4248633c5954abefdd8816b5ac0ANALYSIS DATE: 2022-12-26T11:19:04ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – wannacry – 6e72ad805b4322612b9c9c7673a45635

December 26, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, ransomware, wormMD5: 6e72ad805b4322612b9c9c7673a45635SHA1: e3727e0d38ee247b654441df50aa1acdd328eb32ANALYSIS DATE: 2022-12-26T11:22:05ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Cobalt Stike Beacon Detected – 1[.]116[.]160[.]60:80

December 26, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 101[.]43[.]240[.]159:801

December 26, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 58[.]64[.]193[.]172:8800

December 26, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 5[.]181[.]86[.]249:443

December 26, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – dcrat – 11def98517c93e2a955df827ed88a3a2

December 26, 2022

Score: 10 MALWARE FAMILY: dcratTAGS:family:dcrat, infostealer, rat, spyware, stealerMD5: 11def98517c93e2a955df827ed88a3a2SHA1: 12d175a93a7b161bd8d4d6b489e95f15e34ad283ANALYSIS DATE: 2022-12-25T20:57:58ZTTPS: T1005, T1081, T1082, T1053, T1130, T1112 ScoreMeaningExample10Known...

threatintel

Malware Analysis – amadey – e18e31983eaa7f57431e1b1944da462d

Malware Analysis – persistence – bf6f7ef2802705565d33ad4c9225acda

Malware Analysis – djvu – 3692c2bcdbbc9788369d69baf870ca89

Malware Analysis – djvu – ae21cdf16306059d4349c2ca9b0407a0

Malware Analysis – amadey – 4151aa03de133d36e235103956f5df73

Cobalt Stike Beacon Detected – 47[.]242[.]74[.]51:7676

Cobalt Stike Beacon Detected – 54[.]92[.]103[.]160:443

Malware Analysis – phobos – f8cd85837b695b2689a8f3dfb67d415b

Malware Analysis – evasion – d7a24de75b761cb98f580dafda4ba885

Malware Analysis – persistence – 40efcdc05f8d6151a51ae7ad769c6ee0

Malware Analysis – ransomware – bdfbe890594ca1ec7385f0b8b06d4fd2

Cobalt Stike Beacon Detected – 120[.]48[.]124[.]220:3333

Cobalt Stike Beacon Detected – 170[.]64[.]248[.]225:443

Cobalt Stike Beacon Detected – 195[.]189[.]99[.]114:9443

Cobalt Stike Beacon Detected – 1[.]116[.]160[.]39:80

Malware Analysis – amadey – 80ae4d81fab8357a6d8145c0d081adac

Malware Analysis – ransomware – fa2bac4ec3b4956d76019d84f32f742a

Malware Analysis – wannacry – da5eee93accd46fe8755b93a19ada407

Malware Analysis – wannacry – 6e72ad805b4322612b9c9c7673a45635

Cobalt Stike Beacon Detected – 1[.]116[.]160[.]60:80

Cobalt Stike Beacon Detected – 101[.]43[.]240[.]159:801

Cobalt Stike Beacon Detected – 58[.]64[.]193[.]172:8800

Cobalt Stike Beacon Detected – 5[.]181[.]86[.]249:443

Malware Analysis – dcrat – 11def98517c93e2a955df827ed88a3a2

Ubuntu Linux Kernel Multiple Vulnerabilities

CVE Alert: CVE-2025-53501

CVE Alert: CVE-2025-53370

CVE Alert: CVE-2025-6926

CVE Alert: CVE-2025-45809

You may have missed