threatintel

Malware Analysis – evasion – 5db22ff59ff6dc30ed8ae5133954f6bd

December 10, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 5db22ff59ff6dc30ed8ae5133954f6bdSHA1: f8a218eddd1c53390aa71c967eb842f4fe8e5054ANALYSIS DATE: 2022-12-10T05:23:04ZTTPS: T1031 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – dcrat – a53e90033448a8156937bb17eddfc43b

December 10, 2022

Score: 10 MALWARE FAMILY: dcratTAGS:family:dcrat, family:djvu, family:redline, family:vidar, botnet:517, botnet:mario23_10, bootkit, collection, discovery, infostealer, persistence, ransomware, rat, spyware, stealerMD5: a53e90033448a8156937bb17eddfc43bSHA1:...

threatintel

Malware Analysis – evasion – 5db22ff59ff6dc30ed8ae5133954f6bd

Malware Analysis – dcrat – a53e90033448a8156937bb17eddfc43b

Cobalt Stike Beacon Detected – 162[.]14[.]83[.]232:80

Cobalt Stike Beacon Detected – 157[.]245[.]50[.]113:443

Cobalt Stike Beacon Detected – 85[.]208[.]136[.]130:8443

Black Basta Ransomware Victim: Cleveland Brothers

Black Basta Ransomware Victim: Dingbro Ltd

Black Basta Ransomware Victim: A[.]R[.] Thomson Group

Black Basta Ransomware Victim: Panolam Surface Systems

Black Basta Ransomware Victim: Maney | Gordon | Zeller, P[.]A[.]

Black Basta Ransomware Victim: SEACAST

Black Basta Ransomware Victim: AIRCOMECHANICAL

Cobalt Stike Beacon Detected – 121[.]4[.]102[.]199:8004

Cobalt Stike Beacon Detected – 43[.]154[.]196[.]141:8088

Cobalt Stike Beacon Detected – 111[.]90[.]151[.]229:443

Cobalt Stike Beacon Detected – 43[.]140[.]244[.]151:6666

Black Basta Ransomware Victim: Pella

Cobalt Stike Beacon Detected – 154[.]39[.]0[.]141:443

Cobalt Stike Beacon Detected – 175[.]178[.]243[.]43:2052

Cobalt Stike Beacon Detected – 207[.]246[.]112[.]192:4433

Cobalt Stike Beacon Detected – 18[.]222[.]142[.]185:443

Cobalt Stike Beacon Detected – 154[.]7[.]253[.]226:80

Cobalt Stike Beacon Detected – 121[.]41[.]167[.]39:8888

Cobalt Stike Beacon Detected – 107[.]173[.]122[.]167:443

CVE Alert: CVE-2025-49601

CVE Alert: CVE-2025-49600

CVE Alert: CVE-2025-52497

CVE Alert: CVE-2025-52496

CVE Alert: CVE-2025-7067

You may have missed