threatintel

Malware Analysis – ryuk – 154b73d0a7aa19df12364a78b235f29f

December 20, 2022

Score: 10 MALWARE FAMILY: ryukTAGS:family:ryuk, discovery, evasion, ransomwareMD5: 154b73d0a7aa19df12364a78b235f29fSHA1: 5e39ad8cd8f05d29b7587a876c318be5c0511dccANALYSIS DATE: 2022-12-19T22:04:54ZTTPS: T1490, T1059, T1107, T1222, T1053, T1158, T1012, T1120,...

Malware Analysis – venus – f62590e838b1d13960abb6b363e03ed9

December 20, 2022

Score: 10 MALWARE FAMILY: venusTAGS:family:venus, evasion, persistence, ransomwareMD5: f62590e838b1d13960abb6b363e03ed9SHA1: 66f706a7d39038964471e0a009a76e0f978fb075ANALYSIS DATE: 2022-12-19T21:53:03ZTTPS: T1060, T1112, T1031, T1082, T1018, T1012, T1120 ScoreMeaningExample10Known...

Cobalt Stike Beacon Detected – 43[.]140[.]252[.]193:80

December 20, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – 932e1fdc587695a02489692332c32522

December 20, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 932e1fdc587695a02489692332c32522SHA1: a47ec9890ca5e3cf0f030c0deb117a9cabd1ffeaANALYSIS DATE: 2022-12-19T21:52:51ZTTPS: T1082, T1012, T1053, T1005, T1081, T1060,...

Improve Cyber Security Posture with 2023 Predictions

December 19, 2022

If a stronger cyber security posture is one of your organization’s new year’s resolutions, focus on what matters with these...

A Closer Look at Windows Kernel Threats

December 19, 2022

In this blog entry, we discuss the reasons why malicious actors choose to and opt not to pursue kernel-level access...

Old vulnerabilities in Cisco products actively exploited in the wild

December 19, 2022

IT giant Cisco is warning of threat actors exploiting many old vulnerabilities in attacks in the wild. Cisco has updated...

Kali Linux 2022.4 – Penetration Testing and Ethical Hacking Linux Distribution

December 19, 2022

Time for another Kali Linux release! – Kali Linux 2022.4. This release has various impressive updates.A summary of the changelog...

Malware Analysis – discovery – 620a33b990761a4802b82b6ce657620a

December 19, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: 620a33b990761a4802b82b6ce657620aSHA1: 605b2d0c16e0a903118012e5dfc05165114cf816ANALYSIS DATE: 2022-12-19T16:29:34ZTTPS: T1012, T1082, T1060 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – f9f07daa6ac03183f15c467ac8458946

December 19, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: f9f07daa6ac03183f15c467ac8458946SHA1: ad43ea762aab0e8da955e58dabd42d7d840ffcbdANALYSIS DATE: 2022-12-19T15:01:38ZTTPS: T1005, T1081, T1222, T1082, T1012, T1053,...

Malware Analysis – djvu – 2e7c9cc96fafadb85f03fe0e0d70dbe8

December 19, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: 2e7c9cc96fafadb85f03fe0e0d70dbe8SHA1: cc1aca4021dc1d383b4b2bd55db789b08911e750ANALYSIS DATE: 2022-12-19T16:43:35ZTTPS: T1222, T1082, T1053, T1130, T1112, T1060 ScoreMeaningExample10Known badA...

Malware Analysis – smokeloader – 048c5750cce12e02e62aa2f2b961629d

December 19, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 048c5750cce12e02e62aa2f2b961629dSHA1: f3ada2cb30bb9425ceab9ebc7e862f632c2e1629ANALYSIS DATE: 2022-12-19T15:53:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – neshta – 6aa9acfb386ff6673ed8bd77c459ea5b

December 19, 2022

Score: 10 MALWARE FAMILY: neshtaTAGS:family:neshta, family:phobos, evasion, persistence, ransomware, spyware, stealerMD5: 6aa9acfb386ff6673ed8bd77c459ea5bSHA1: 77e9926caeaf7bd23b832069384e1c02dd4ff78eANALYSIS DATE: 2022-12-19T17:18:03ZTTPS: T1490, T1059, T1107, T1005, T1081,...

Malware Analysis – djvu – 9206dd64291b57ef64ea8fc15cb77b62

December 19, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 9206dd64291b57ef64ea8fc15cb77b62SHA1: 5ca61612241c01ee04cfeebcff6cdb8ab35051e0ANALYSIS DATE: 2022-12-19T17:26:22ZTTPS: T1053, T1005, T1081, T1012, T1060, T1112,...

Malware Analysis – ransomware – 0ca54a12dfeb248b5c0c2400ec288266

December 19, 2022

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 0ca54a12dfeb248b5c0c2400ec288266SHA1: 9ef4d6cdc12fd7451dee17088de7adc85ffcc7caANALYSIS DATE: 2022-12-19T16:52:04ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – 6512331eb3bda65b6ae1205d0633a1e1

December 19, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 6512331eb3bda65b6ae1205d0633a1e1SHA1: 5ffe12c70577d58db50393b83599c3227c877282ANALYSIS DATE: 2022-12-19T17:05:50ZTTPS: T1005, T1081, T1222, T1082, T1012, T1053,...

Malware Analysis – djvu – 4d0d3ce86f2f7edc9cf08d3393e516e3

December 19, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: 4d0d3ce86f2f7edc9cf08d3393e516e3SHA1: c1dcb2c412f0512adcd8e287ca332435e0672818ANALYSIS DATE: 2022-12-19T17:30:57ZTTPS: T1222, T1082, T1053, T1130, T1112, T1060 ScoreMeaningExample10Known badA...

Malware Analysis – persistence – e27b637abe523503b19e6b57b95489ea

December 19, 2022

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: e27b637abe523503b19e6b57b95489eaSHA1: 875c3af49522b74045c7ac5cc7f07308e6091b02ANALYSIS DATE: 2022-12-19T17:46:04ZTTPS: T1060, T1112, T1082, T1012, T1120 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – evasion – fbb796cc4209793257bc08943e9bfa29

December 19, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomwareMD5: fbb796cc4209793257bc08943e9bfa29SHA1: 5200d89104d66cab7ee6418e1dc5eccc13bc5193ANALYSIS DATE: 2022-12-19T17:46:03ZTTPS: T1082, T1491, T1112, T1004, T1070, T1060, T1012, T1120, T1490...

Malware Analysis – djvu – 9228f870c82e0b331680b9fe90486722

December 19, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 9228f870c82e0b331680b9fe90486722SHA1: f91f48f62bff5b8291589ccc150c7e8339daf66eANALYSIS DATE: 2022-12-19T17:50:17ZTTPS: T1060, T1112, T1082, T1005, T1081, T1012,...

threatintel

Malware Analysis – ryuk – 154b73d0a7aa19df12364a78b235f29f

Malware Analysis – venus – f62590e838b1d13960abb6b363e03ed9

Cobalt Stike Beacon Detected – 43[.]140[.]252[.]193:80

Malware Analysis – djvu – 932e1fdc587695a02489692332c32522

Improve Cyber Security Posture with 2023 Predictions

A Closer Look at Windows Kernel Threats

Old vulnerabilities in Cisco products actively exploited in the wild

Kali Linux 2022.4 – Penetration Testing and Ethical Hacking Linux Distribution

Malware Analysis – discovery – 620a33b990761a4802b82b6ce657620a

Malware Analysis – djvu – f9f07daa6ac03183f15c467ac8458946

Malware Analysis – djvu – 2e7c9cc96fafadb85f03fe0e0d70dbe8

Malware Analysis – smokeloader – 048c5750cce12e02e62aa2f2b961629d

Malware Analysis – neshta – 6aa9acfb386ff6673ed8bd77c459ea5b

Malware Analysis – djvu – 9206dd64291b57ef64ea8fc15cb77b62

Malware Analysis – ransomware – 0ca54a12dfeb248b5c0c2400ec288266

Malware Analysis – djvu – 6512331eb3bda65b6ae1205d0633a1e1

Malware Analysis – djvu – 4d0d3ce86f2f7edc9cf08d3393e516e3

Malware Analysis – persistence – e27b637abe523503b19e6b57b95489ea

Malware Analysis – evasion – fbb796cc4209793257bc08943e9bfa29

Malware Analysis – djvu – 9228f870c82e0b331680b9fe90486722

LockBit 3.0 Ransomware Victim: senateshj[.]com

LockBit 3.0 Ransomware Victim: mercuryit[.]co[.]nz

LockBit 3.0 Ransomware Victim: polyflor[.]co[.]nz

LockBit 3.0 Ransomware Victim: Monte Cristalina S[.]A[.]

CVE Alert: CVE-2025-24328

CVE Alert: CVE-2025-6464

CVE Alert: CVE-2025-6017

CVE Alert: CVE-2024-13786

CVE Alert: CVE-2025-24334

You may have missed