threatintel

Malware Analysis – amadey – 7dc5c70b9d7bfeb2dcbf7347794b0057

March 16, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:laplas, family:pseudomanuscrypt, family:redline, family:smokeloader, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, botnet:pub1, botnet:sprg, backdoor, clipper, discovery, infostealer, loader, persistence,...

Malware Analysis – – c19548ebf324b01ddc5cdf18480f7a24

March 16, 2023

Score: 1 MALWARE FAMILY: TAGS:MD5: c19548ebf324b01ddc5cdf18480f7a24SHA1: 4afa21eb10b55b08289706b71c9a693937284432ANALYSIS DATE: 2023-03-16T03:58:06ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – – e8340564caba7a2635af2c79cb7103eb

March 16, 2023

Score: 1 MALWARE FAMILY: TAGS:MD5: e8340564caba7a2635af2c79cb7103ebSHA1: 8c62c79508abe5ffa36608d1846dcb20b2a27137ANALYSIS DATE: 2023-03-16T04:27:05ZTTPS: T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – chaos – ae7795f6305ad315589ff4846ad1ef14

March 16, 2023

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, evasion, ransomwareMD5: ae7795f6305ad315589ff4846ad1ef14SHA1: 71f4143d89ce0dcb5729e2a8b2cd54bc9b423e65ANALYSIS DATE: 2023-03-16T04:06:04ZTTPS: T1490, T1059, T1107, T1082, T1012 ScoreMeaningExample10Known badA malware family...

Malware Analysis – discovery – d28e88e6e9ad654f81909e605f3398c1

March 16, 2023

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploit, persistence, spyware, stealerMD5: d28e88e6e9ad654f81909e605f3398c1SHA1: 84726882c606eec6b7ed7d0ba1d9acdd13390e45ANALYSIS DATE: 2023-03-16T04:21:02ZTTPS: T1060, T1112, T1005, T1081, T1222 ScoreMeaningExample10Known badA...

Malware Analysis – chaos – 8f033c07f57f8ce2e62e3a327f423d55

March 16, 2023

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, evasion, persistence, ransomware, spyware, stealerMD5: 8f033c07f57f8ce2e62e3a327f423d55SHA1: 57ac411652d7b1d9accaa8a1af5f4b6a45ef7448ANALYSIS DATE: 2023-03-16T04:07:10ZTTPS: T1490, T1059, T1107, T1112, T1082, T1012,...

Malware Analysis – djvu – 93b3449417b91a339c37b9647d884db6

March 16, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, discovery, persistence, ransomware, spyware, stealerMD5: 93b3449417b91a339c37b9647d884db6SHA1: c7a40ac43987a5d519e95b4fc3b1acb6eae8ac05ANALYSIS DATE: 2023-03-16T04:38:16ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – evasion – 6c782f5f5a64c0b2d9b1db4c774e416e

March 16, 2023

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 6c782f5f5a64c0b2d9b1db4c774e416eSHA1: 536d5cf87af69245644efd7c06a06616eee3ff7bANALYSIS DATE: 2023-03-16T05:16:45ZTTPS: T1490, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – amadey – 6aefc29eb3e1f666cba3c09647d9c187

March 16, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:laplas, family:smokeloader, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, botnet:pub1, botnet:sprg, backdoor, clipper, discovery, persistence, ransomware, spyware, stealer, trojanMD5:...

Malware Analysis – djvu – 55d0959d9de905e03b833891efa6cddf

March 16, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, discovery, persistence, ransomware, spyware, stealerMD5: 55d0959d9de905e03b833891efa6cddfSHA1: 07511e4f5ac903ec1a43ded40d3bd9ac0dc758a0ANALYSIS DATE: 2023-03-16T05:14:03ZTTPS: T1005, T1081, T1060, T1112,...

CISA Issues Urgent Warning: Adobe ColdFusion Vulnerability Exploited in the Wild

March 16, 2023

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on March 15 added a security vulnerability impacting Adobe ColdFusion to its...

Malware Analysis – ransomware – d1e8c1498d56e7da0e8fc0671b5ab2b5

March 16, 2023

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: d1e8c1498d56e7da0e8fc0671b5ab2b5SHA1: 8276facc6ef40df6385dd3dd49e41848228c7735ANALYSIS DATE: 2023-03-15T21:04:23ZTTPS: T1012, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – eternity – 5f4b0475c50266443e5d50ed496912ef

March 16, 2023

Score: 10 MALWARE FAMILY: eternityTAGS:family:eternity, evasion, ransomwareMD5: 5f4b0475c50266443e5d50ed496912efSHA1: 6e97a7131a9285e3a182e739017e5bde4548f6ddANALYSIS DATE: 2023-03-15T21:53:11ZTTPS: T1053, T1107, T1490, T1082, T1018 ScoreMeaningExample10Known badA malware family...

Malware Analysis – amadey – 7f707db90b2c23dad5bd0ee1951ffc05

March 16, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:rhadamanthys, family:smokeloader, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, botnet:pub1, botnet:sprg, backdoor, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 7f707db90b2c23dad5bd0ee1951ffc05SHA1:...

Malware Analysis – djvu – aaa532c24ef3e42b4fad1997a49a13fb

March 16, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, discovery, persistence, ransomware, spyware, stealerMD5: aaa532c24ef3e42b4fad1997a49a13fbSHA1: dec412fc077ac69b21fe869ae37ec8761ad52c5bANALYSIS DATE: 2023-03-15T21:25:50ZTTPS: T1222, T1082, T1053, T1012,...

Malware Analysis – djvu – 3cb60ddc5d349a8ffbda640f3c201884

March 16, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, discovery, persistence, ransomware, spyware, stealerMD5: 3cb60ddc5d349a8ffbda640f3c201884SHA1: 87a887303c616bd350e8ed890941240d5faa5610ANALYSIS DATE: 2023-03-15T21:36:18ZTTPS: T1222, T1012, T1082, T1005,...

Malware Analysis – djvu – a176a3f60922d66d161c83d726602fbf

March 16, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, discovery, persistence, ransomware, spyware, stealerMD5: a176a3f60922d66d161c83d726602fbfSHA1: ece19fee8629873a2722407a33f1d2803e21efceANALYSIS DATE: 2023-03-15T23:00:09ZTTPS: T1060, T1112, T1082, T1005,...

Malware Analysis – djvu – c2dbc2aee5f07914fac16075c857bca9

March 16, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, discovery, persistence, ransomware, spyware, stealerMD5: c2dbc2aee5f07914fac16075c857bca9SHA1: bf011ffe863fd1ed73cad62fb5002a97bceaa090ANALYSIS DATE: 2023-03-15T22:50:29ZTTPS: T1060, T1112, T1222, T1082,...

Malware Analysis – xworm – dcf97bdb41eb351d2fc4ea91f624423d

March 16, 2023

Score: 10 MALWARE FAMILY: xwormTAGS:family:xworm, evasion, persistence, ransomware, rat, trojanMD5: dcf97bdb41eb351d2fc4ea91f624423dSHA1: d3715326aebfa2e71c1e7a56567fabfafb4728faANALYSIS DATE: 2023-03-15T22:30:53ZTTPS: T1491, T1112, T1053, T1012, T1082, T1088,...

Malware Analysis – amadey – b59b3a9cc2547eef5e6e51e0d7e5aa33

March 16, 2023

Cl0p Ransomware Victim: RUBRIK[.]COM

March 15, 2023

Cl0p Logo NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of...

Cl0p Ransomware Victim: ONEX[.]COM

March 15, 2023

Cl0p Logo NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of...

Malware Analysis – lockbit – 85ca694de55c02d285e997e7671c9e43

March 15, 2023

Score: 10 MALWARE FAMILY: lockbitTAGS:family:lockbit, ransomwareMD5: 85ca694de55c02d285e997e7671c9e43SHA1: e4ecabeb1f0df4ae69a9408d6522f039fd3a4968ANALYSIS DATE: 2023-03-15T15:56:06ZTTPS: T1491, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – – bcc2e38c80b962e6990f7f0538ce4cc4

March 15, 2023

Score: 3 MALWARE FAMILY: TAGS:MD5: bcc2e38c80b962e6990f7f0538ce4cc4SHA1: bfa80f1fbb9407e6e284ae68502c889d66c4b582ANALYSIS DATE: 2023-03-15T15:32:44ZTTPS: T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

threatintel

Malware Analysis – amadey – 7dc5c70b9d7bfeb2dcbf7347794b0057

Malware Analysis – – c19548ebf324b01ddc5cdf18480f7a24

Malware Analysis – – e8340564caba7a2635af2c79cb7103eb

Malware Analysis – chaos – ae7795f6305ad315589ff4846ad1ef14

Malware Analysis – discovery – d28e88e6e9ad654f81909e605f3398c1

Malware Analysis – chaos – 8f033c07f57f8ce2e62e3a327f423d55

Malware Analysis – djvu – 93b3449417b91a339c37b9647d884db6

Malware Analysis – evasion – 6c782f5f5a64c0b2d9b1db4c774e416e

Malware Analysis – amadey – 6aefc29eb3e1f666cba3c09647d9c187

Malware Analysis – djvu – 55d0959d9de905e03b833891efa6cddf

CISA Issues Urgent Warning: Adobe ColdFusion Vulnerability Exploited in the Wild

Malware Analysis – ransomware – d1e8c1498d56e7da0e8fc0671b5ab2b5

Malware Analysis – eternity – 5f4b0475c50266443e5d50ed496912ef

Malware Analysis – amadey – 7f707db90b2c23dad5bd0ee1951ffc05

Malware Analysis – djvu – aaa532c24ef3e42b4fad1997a49a13fb

Malware Analysis – djvu – 3cb60ddc5d349a8ffbda640f3c201884

Malware Analysis – djvu – a176a3f60922d66d161c83d726602fbf

Malware Analysis – djvu – c2dbc2aee5f07914fac16075c857bca9

Malware Analysis – xworm – dcf97bdb41eb351d2fc4ea91f624423d

Malware Analysis – amadey – b59b3a9cc2547eef5e6e51e0d7e5aa33

Cl0p Ransomware Victim: RUBRIK[.]COM

Cl0p Ransomware Victim: ONEX[.]COM

Malware Analysis – lockbit – 85ca694de55c02d285e997e7671c9e43

Malware Analysis – – bcc2e38c80b962e6990f7f0538ce4cc4

CVE Alert: CVE-2025-12863 – Red Hat – Red Hat Enterprise Linux 10

Cobalt Strike Beacon Detected – 8[.]153[.]205[.]30:8080

Cobalt Strike Beacon Detected – 83[.]229[.]126[.]65:8080

Cobalt Strike Beacon Detected – 38[.]162[.]117[.]244:1099

Cobalt Strike Beacon Detected – 143[.]92[.]43[.]231:8011

You may have missed