threatintel

Malware Analysis – djvu – fc83c3d6765a19bad4b98d25d999bbac

December 25, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: fc83c3d6765a19bad4b98d25d999bbacSHA1: 4e46236df5816bcbbcc22da5cd3fdd0302aab228ANALYSIS DATE: 2022-12-25T17:00:05ZTTPS: T1012, T1222, T1005, T1081, T1082, T1053,...

Malware Analysis – amadey – 129a8da914ebc1e3b73dd61a51f39129

December 25, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:dcrat, family:djvu, family:smokeloader, backdoor, collection, discovery, infostealer, persistence, ransomware, rat, spyware, stealer, trojanMD5: 129a8da914ebc1e3b73dd61a51f39129SHA1: 71fb39b940654f3c988c0fad929074315921387dANALYSIS...

Malware Analysis – smokeloader – 1947b12fce9748b5283230f1c10c4761

December 25, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 1947b12fce9748b5283230f1c10c4761SHA1: 10924809069e4abcf3930bd8aad1437a1a1817f7ANALYSIS DATE: 2022-12-25T15:08:39ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 3621b7eb0ed318b4e3a4aa5e329dbd21

December 25, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 3621b7eb0ed318b4e3a4aa5e329dbd21SHA1: 86f9061fd47f7df0b20d74b209d6c7f870117f93ANALYSIS DATE: 2022-12-25T17:04:18ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 210833411dfb3d09154f4e18ae7b61ed

December 25, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 210833411dfb3d09154f4e18ae7b61edSHA1: bf6f34517db7a00446b2258b22bf8adf986493a0ANALYSIS DATE: 2022-12-25T17:02:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – c3fadd562016e4a7c25fbbf4f47f27b4

December 25, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: c3fadd562016e4a7c25fbbf4f47f27b4SHA1: 563dd3f0192c941c6c8069dfdca84fc0cb6fe133ANALYSIS DATE: 2022-12-25T17:01:08ZTTPS: T1053, T1130, T1112, T1060, T1222, T1082 ScoreMeaningExample10Known badA...

Malware Analysis – amadey – 1a15aa18ae8129dfcfe983f75b2b1b17

December 25, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:eternity, family:redline, botnet:trud, botnet:upppppp555555, collection, discovery, evasion, infostealer, persistence, ransomware, spyware, stealer, trojanMD5: 1a15aa18ae8129dfcfe983f75b2b1b17SHA1: 7debeced715b48e2de1d9905b56b84bc2148b5c4ANALYSIS...

Malware Analysis – amadey – 999d8ae721958772b0b61d72b3ea20b9

December 25, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:dcrat, family:djvu, family:redline, family:smokeloader, botnet:rocketssss, botnet:upppppp555555, backdoor, brand:microsoft, collection, discovery, infostealer, persistence, phishing, ransomware, rat,...

Malware Analysis – djvu – fb9d2488001ea8c7ea768c22cea0c865

December 25, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: fb9d2488001ea8c7ea768c22cea0c865SHA1: 01b09dc4646464ad6eb50d9c567492bc97613bb9ANALYSIS DATE: 2022-12-25T17:12:28ZTTPS: T1005, T1081, T1012, T1082, T1060, T1112,...

Malware Analysis – djvu – 7b96061b71c234da6fdb208fbab96b83

December 25, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 7b96061b71c234da6fdb208fbab96b83SHA1: bd6a7d267b183da41e2983ebf2dae768775b43dfANALYSIS DATE: 2022-12-25T17:48:22ZTTPS: T1060, T1112, T1222, T1082, T1005, T1081,...

Malware Analysis – amadey – 033f1c8d781800f686ef0666280c1bae

December 25, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:redline, botnet:trud, botnet:upppppp555555, collection, discovery, infostealer, persistence, spyware, stealer, trojanMD5: 033f1c8d781800f686ef0666280c1baeSHA1: fe5495be3a1464eb5cbd78b5193c2a45d49beb28ANALYSIS DATE: 2022-12-25T17:33:03ZTTPS: T1082,...

threatintel

Malware Analysis – djvu – fc83c3d6765a19bad4b98d25d999bbac

Malware Analysis – amadey – 129a8da914ebc1e3b73dd61a51f39129

Malware Analysis – smokeloader – 1947b12fce9748b5283230f1c10c4761

Malware Analysis – smokeloader – 3621b7eb0ed318b4e3a4aa5e329dbd21

Malware Analysis – smokeloader – 210833411dfb3d09154f4e18ae7b61ed

Malware Analysis – djvu – c3fadd562016e4a7c25fbbf4f47f27b4

Malware Analysis – amadey – 1a15aa18ae8129dfcfe983f75b2b1b17

Malware Analysis – amadey – 999d8ae721958772b0b61d72b3ea20b9

Malware Analysis – djvu – fb9d2488001ea8c7ea768c22cea0c865

Malware Analysis – djvu – 7b96061b71c234da6fdb208fbab96b83

Malware Analysis – amadey – 033f1c8d781800f686ef0666280c1bae

BreachForums Database Leak Alert: Trackitt

BreachForums Database Leak Alert: LucasForums

BreachForums Database Leak Alert: Jeep Enthusiast Forums

BreachForums Database Leak Alert: Deezer

BreachForums Database Leak Alert: BEUTiFi

BlackCat/ALPHV Ransomware Victim: PARIC CORPORATION

New info-stealer malware infects software pirates via fake cracks sites

Hackers exploit bug in WordPress gift card plugin with 50K installs

Massive Twitter data leak investigated by EU privacy watchdog

The Week in Ransomware – December 23rd 2022 – Targeting Microsoft Exchange

Cobalt Stike Beacon Detected – 43[.]249[.]9[.]15:2233

Cobalt Stike Beacon Detected – 77[.]73[.]133[.]84:8443

Cobalt Stike Beacon Detected – 45[.]227[.]252[.]252:443

CVE Alert: CVE-2025-49595

CVE Alert: CVE-2025-43713

CVE Alert: CVE-2025-3702

CVE Alert: CVE-2025-2932

CVE Alert: CVE-2025-49032

You may have missed