threatintel

Malware Analysis – djvu – 0347b3417f6fcf5d58ef9d6c1f9c1404

February 18, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 0347b3417f6fcf5d58ef9d6c1f9c1404SHA1: e3ff63b00704de67d0f9f70f24f4566579d80ef2ANALYSIS DATE: 2023-02-18T17:32:03ZTTPS: T1222, T1082, T1005, T1081,...

Malware Analysis – djvu – 7ff5343fece92fb5d5428a984f89e3bc

February 18, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:laplas, family:smokeloader, family:vidar, botnet:19, backdoor, clipper, discovery, evasion, persistence, ransomware, spyware, stealer, themida, trojan, vmprotectMD5:...

LockBit 3.0 Ransomware Victim: primorossi[.]com[.]br

February 18, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

LockBit 3.0 Ransomware Victim: diavaz[.]com

February 18, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

LockBit 3.0 Ransomware Victim: inowai[.]com

February 18, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

LockBit 3.0 Ransomware Victim: isosteo[.]fr

February 18, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

LockBit 3.0 Ransomware Victim: aguasdoporto[.]pt

February 18, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

GoDaddy Discloses Multi-Year Security Breach Causing Malware Installations and Source Code Theft

February 18, 2023

Web hosting services provider GoDaddy on Friday disclosed a multi-year security breach that enabled unknown threat actors to install malware...

6d25b2587b1abe3b99f67e2fbc8769a79970aed4237af3023a79a72066e6bd70

Twitter Limits SMS-Based 2-Factor Authentication to Blue Subscribers Only

February 18, 2023

Twitter has announced that it's limiting the use of SMS-based two-factor authentication (2FA) to its Blue subscribers. "While historically a...

Cobalt Stike Beacon Detected – 147[.]182[.]250[.]103:443

February 18, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 119[.]91[.]148[.]9:443

February 18, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 146[.]190[.]118[.]40:443

February 18, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 45[.]92[.]158[.]220:8000

February 18, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 101[.]34[.]36[.]50:3333

February 18, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – smokeloader – f16b0526c3c7082918f6abf8fd944664

February 18, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: f16b0526c3c7082918f6abf8fd944664SHA1: 8c6df4532d47296d62b5d935120a5d2e788978e8ANALYSIS DATE: 2023-02-18T09:18:08ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – – 1ce725c0dc288d7789a0ba52a54726ac

February 18, 2023

Score: 1 MALWARE FAMILY: TAGS:MD5: 1ce725c0dc288d7789a0ba52a54726acSHA1: 20dcfb326a66350af7aea504277d7cc97caa420cANALYSIS DATE: 2023-02-18T09:22:35ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – 087f75c142ef66212e79e99f26abf68a

February 18, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 087f75c142ef66212e79e99f26abf68aSHA1: 44999a5c4ad01c3cc48868a49c81ef79d183d429ANALYSIS DATE: 2023-02-18T09:34:52ZTTPS: T1005, T1081, T1012, T1222,...

Malware Analysis – djvu – 036b724993d70eeada2c2607e0d5028e

February 18, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 036b724993d70eeada2c2607e0d5028eSHA1: 0bafca071bac6f6dff62841419a50ee070d5ba33ANALYSIS DATE: 2023-02-18T09:21:36ZTTPS: T1060, T1112, T1012, T1082,...

Cobalt Stike Beacon Detected – 43[.]143[.]195[.]119:2121

February 18, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 180[.]76[.]247[.]230:8082

February 18, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 43[.]143[.]130[.]125:8809

February 18, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 146[.]190[.]164[.]193:443

February 18, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – discovery – 87cee2eb9b9190baf07970bbf9b2975c

February 18, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, phishing, ransomwareMD5: 87cee2eb9b9190baf07970bbf9b2975cSHA1: 156dbed1d99359a498021e7684f518a926630814ANALYSIS DATE: 2023-02-18T09:57:53ZTTPS: T1012, T1082, T1112, T1060, T1042 ScoreMeaningExample10Known badA malware...

Malware Analysis – banker – ba1e76cfbd9461a75cea4976aec75450

February 18, 2023

Score: 8 MALWARE FAMILY: bankerTAGS:banker, evasion, ransomwareMD5: ba1e76cfbd9461a75cea4976aec75450SHA1: d031a3a2a9880ff09589d5b8d5fc0cadee3fa73aANALYSIS DATE: 2023-02-18T10:55:08ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

threatintel

Malware Analysis – djvu – 0347b3417f6fcf5d58ef9d6c1f9c1404

Malware Analysis – djvu – 7ff5343fece92fb5d5428a984f89e3bc

LockBit 3.0 Ransomware Victim: primorossi[.]com[.]br

LockBit 3.0 Ransomware Victim: diavaz[.]com

LockBit 3.0 Ransomware Victim: inowai[.]com

LockBit 3.0 Ransomware Victim: isosteo[.]fr

LockBit 3.0 Ransomware Victim: aguasdoporto[.]pt

GoDaddy Discloses Multi-Year Security Breach Causing Malware Installations and Source Code Theft

Twitter Limits SMS-Based 2-Factor Authentication to Blue Subscribers Only

Cobalt Stike Beacon Detected – 147[.]182[.]250[.]103:443

Cobalt Stike Beacon Detected – 119[.]91[.]148[.]9:443

Cobalt Stike Beacon Detected – 146[.]190[.]118[.]40:443

Cobalt Stike Beacon Detected – 45[.]92[.]158[.]220:8000

Cobalt Stike Beacon Detected – 101[.]34[.]36[.]50:3333

Malware Analysis – smokeloader – f16b0526c3c7082918f6abf8fd944664

Malware Analysis – – 1ce725c0dc288d7789a0ba52a54726ac

Malware Analysis – djvu – 087f75c142ef66212e79e99f26abf68a

Malware Analysis – djvu – 036b724993d70eeada2c2607e0d5028e

Cobalt Stike Beacon Detected – 43[.]143[.]195[.]119:2121

Cobalt Stike Beacon Detected – 180[.]76[.]247[.]230:8082

Cobalt Stike Beacon Detected – 43[.]143[.]130[.]125:8809

Cobalt Stike Beacon Detected – 146[.]190[.]164[.]193:443

Malware Analysis – discovery – 87cee2eb9b9190baf07970bbf9b2975c

Malware Analysis – banker – ba1e76cfbd9461a75cea4976aec75450

CVE Alert: CVE-2025-10058 – smackcoders – WP Import – Ultimate CSV XML Importer for WordPress

CVE Alert: CVE-2025-10057 – smackcoders – WP Import – Ultimate CSV XML Importer for WordPress

CVE Alert: CVE-2025-10143 – catchthemes – Catch Dark Mode

CVE Alert: CVE-2025-10589 – N-Partner – N-Reporter

Cobalt Strike Beacon Detected – 38[.]173[.]19[.]175:8731

You may have missed