threatintel

Malware Analysis – smokeloader – 048c5750cce12e02e62aa2f2b961629d

December 19, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 048c5750cce12e02e62aa2f2b961629dSHA1: f3ada2cb30bb9425ceab9ebc7e862f632c2e1629ANALYSIS DATE: 2022-12-19T15:53:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – neshta – 6aa9acfb386ff6673ed8bd77c459ea5b

December 19, 2022

Score: 10 MALWARE FAMILY: neshtaTAGS:family:neshta, family:phobos, evasion, persistence, ransomware, spyware, stealerMD5: 6aa9acfb386ff6673ed8bd77c459ea5bSHA1: 77e9926caeaf7bd23b832069384e1c02dd4ff78eANALYSIS DATE: 2022-12-19T17:18:03ZTTPS: T1490, T1059, T1107, T1005, T1081,...

Malware Analysis – djvu – 9206dd64291b57ef64ea8fc15cb77b62

December 19, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 9206dd64291b57ef64ea8fc15cb77b62SHA1: 5ca61612241c01ee04cfeebcff6cdb8ab35051e0ANALYSIS DATE: 2022-12-19T17:26:22ZTTPS: T1053, T1005, T1081, T1012, T1060, T1112,...

Malware Analysis – ransomware – 0ca54a12dfeb248b5c0c2400ec288266

December 19, 2022

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 0ca54a12dfeb248b5c0c2400ec288266SHA1: 9ef4d6cdc12fd7451dee17088de7adc85ffcc7caANALYSIS DATE: 2022-12-19T16:52:04ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – 6512331eb3bda65b6ae1205d0633a1e1

December 19, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 6512331eb3bda65b6ae1205d0633a1e1SHA1: 5ffe12c70577d58db50393b83599c3227c877282ANALYSIS DATE: 2022-12-19T17:05:50ZTTPS: T1005, T1081, T1222, T1082, T1012, T1053,...

Malware Analysis – djvu – 4d0d3ce86f2f7edc9cf08d3393e516e3

December 19, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: 4d0d3ce86f2f7edc9cf08d3393e516e3SHA1: c1dcb2c412f0512adcd8e287ca332435e0672818ANALYSIS DATE: 2022-12-19T17:30:57ZTTPS: T1222, T1082, T1053, T1130, T1112, T1060 ScoreMeaningExample10Known badA...

Malware Analysis – persistence – e27b637abe523503b19e6b57b95489ea

December 19, 2022

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: e27b637abe523503b19e6b57b95489eaSHA1: 875c3af49522b74045c7ac5cc7f07308e6091b02ANALYSIS DATE: 2022-12-19T17:46:04ZTTPS: T1060, T1112, T1082, T1012, T1120 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – evasion – fbb796cc4209793257bc08943e9bfa29

December 19, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomwareMD5: fbb796cc4209793257bc08943e9bfa29SHA1: 5200d89104d66cab7ee6418e1dc5eccc13bc5193ANALYSIS DATE: 2022-12-19T17:46:03ZTTPS: T1082, T1491, T1112, T1004, T1070, T1060, T1012, T1120, T1490...

Malware Analysis – djvu – 9228f870c82e0b331680b9fe90486722

December 19, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 9228f870c82e0b331680b9fe90486722SHA1: f91f48f62bff5b8291589ccc150c7e8339daf66eANALYSIS DATE: 2022-12-19T17:50:17ZTTPS: T1060, T1112, T1082, T1005, T1081, T1012,...

threatintel

Malware Analysis – smokeloader – 048c5750cce12e02e62aa2f2b961629d

Malware Analysis – neshta – 6aa9acfb386ff6673ed8bd77c459ea5b

Malware Analysis – djvu – 9206dd64291b57ef64ea8fc15cb77b62

Malware Analysis – ransomware – 0ca54a12dfeb248b5c0c2400ec288266

Malware Analysis – djvu – 6512331eb3bda65b6ae1205d0633a1e1

Malware Analysis – djvu – 4d0d3ce86f2f7edc9cf08d3393e516e3

Malware Analysis – persistence – e27b637abe523503b19e6b57b95489ea

Malware Analysis – evasion – fbb796cc4209793257bc08943e9bfa29

Malware Analysis – djvu – 9228f870c82e0b331680b9fe90486722

LockBit 3.0 Ransomware Victim: senateshj[.]com

LockBit 3.0 Ransomware Victim: mercuryit[.]co[.]nz

LockBit 3.0 Ransomware Victim: polyflor[.]co[.]nz

LockBit 3.0 Ransomware Victim: stmc[.]edu[.]hk

LockBit 3.0 Ransomware Victim: Monte Cristalina S[.]A[.]

LockBit 3.0 Ransomware Victim: businesscentral[.]org[.]nz

LockBit 3.0 Ransomware Victim: rgvfirm[.]com

LockBit 3.0 Ransomware Victim: mayflowerdentalgroup[.]com

LockBit 3.0 Ransomware Victim: womgroup[.]com

LockBit 3.0 Ransomware Victim: jka[.]co[.]uk

LockBit 3.0 Ransomware Victim: agriobtentions[.]com

Experts spotted a variant of the Agenda Ransomware written in Rust

LockBit 3.0 Ransomware Victim: accuro[.]co[.]nz

LockBit 3.0 Ransomware Victim: catalyst-group[.]co[.]nz

US Gov warns of BEC attacks to hijack shipments of food products

[FLOCKER] – Ransomware Victim: G*********************y[.]org

CVE Alert: CVE-2025-53101

CVE Alert: CVE-2025-53019

CVE Alert: CVE-2025-53819

CVE Alert: CVE-2025-53821

You may have missed