threatintel

Malware Analysis – redline – 60c672bf83f9ee919034423f7c9385f6

December 1, 2022

Score: 10 MALWARE FAMILY: redlineTAGS:family:redline, family:smokeloader, botnet:r102, backdoor, collection, infostealer, ransomware, trojanMD5: 60c672bf83f9ee919034423f7c9385f6SHA1: 4a262fce23796b58a08f7e953f33faf726ed1790ANALYSIS DATE: 2022-12-01T15:34:51ZTTPS: T1012, T1120, T1082, T1114...

Malware Analysis – amadey – 3326681ef0261f9d4ae5251d0c0c3c6b

December 1, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:dcrat, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, infostealer, persistence, ransomware, rat, spyware, stealer, trojanMD5:...

Malware Analysis – ransomware – 4ec86f1eb7f05d34af99885f733c3c5b

December 1, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 4ec86f1eb7f05d34af99885f733c3c5bSHA1: 0d7cdf3d9349911b7922760f697a7bafc745cd18ANALYSIS DATE: 2022-12-01T16:31:03ZTTPS: T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – djvu – f272230670f1b845fdbf007fac1ff9ca

December 1, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: f272230670f1b845fdbf007fac1ff9caSHA1: 09cee6add03d57f94ef2394547b44b9db43cb8b1ANALYSIS DATE: 2022-12-01T16:30:15ZTTPS: T1005, T1081, T1012, T1060,...

Malware Analysis – djvu – e4ac9588fd75fe70172873b5ca0ab847

December 1, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: e4ac9588fd75fe70172873b5ca0ab847SHA1: ba249917c721ed68b568a359a2d54f176fd943beANALYSIS DATE: 2022-12-01T15:51:04ZTTPS: T1012, T1082, T1005, T1081,...

Malware Analysis – globeimposter – fac0564b69ab03050cf82098f98317e1

December 1, 2022

Score: 10 MALWARE FAMILY: globeimposterTAGS:family:globeimposter, persistence, ransomwareMD5: fac0564b69ab03050cf82098f98317e1SHA1: 01d6d9b1acd7c97ddf53fe704bfdd7a587f8884fANALYSIS DATE: 2022-12-01T17:06:08ZTTPS: T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – globeimposter – 190517d80c4edcef8a6c2b0a017941b0

December 1, 2022

Score: 10 MALWARE FAMILY: globeimposterTAGS:family:globeimposter, persistence, ransomwareMD5: 190517d80c4edcef8a6c2b0a017941b0SHA1: 2e03f910b3f9183657c3ec00735aa5b1f03080bbANALYSIS DATE: 2022-12-01T17:06:07ZTTPS: T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – amadey – 59bf7bfb890e96702cfc4f3e9dbfa617

December 1, 2022

Malware Analysis – persistence – 29250c34e78857b17ee2576f68757d01

December 1, 2022

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 29250c34e78857b17ee2576f68757d01SHA1: 41c9109b13d129447ffdf273f78c8fee6096ff81ANALYSIS DATE: 2022-12-01T17:02:07ZTTPS: T1012, T1120, T1082, T1060, T1112 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – medusalocker – 5b780f32105ff92593db7b30ea2ac9ed

December 1, 2022

Score: 10 MALWARE FAMILY: medusalockerTAGS:family:medusalocker, evasion, ransomware, trojanMD5: 5b780f32105ff92593db7b30ea2ac9edSHA1: 6054922a051ce8d25d5d39565a9ad23575b7fe7fANALYSIS DATE: 2022-12-01T17:38:03ZTTPS: T1082, T1112, T1107, T1490, T1088, T1089, T1012, T1120...

Malware Analysis – dcrat – 8d1b8e717d89bdf80df3fe855c4ff19c

December 1, 2022

Score: 10 MALWARE FAMILY: dcratTAGS:family:dcrat, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, infostealer, persistence, ransomware, rat, spyware, stealer, trojanMD5: 8d1b8e717d89bdf80df3fe855c4ff19cSHA1:...

Malware Analysis – discovery – 3b7fca0e31846825a61766dad02a8823

December 1, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: 3b7fca0e31846825a61766dad02a8823SHA1: a7d768e4be6c6361c8d11ae8110e3d4826728f4fANALYSIS DATE: 2022-12-01T17:18:11ZTTPS: T1082, T1112, T1042, T1060, T1012 ScoreMeaningExample10Known badA malware family...

Malware Analysis – – 6953d6e1a2d8df8e0d2e76263e8b3115

December 1, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: 6953d6e1a2d8df8e0d2e76263e8b3115SHA1: 7c281b3f1f1340db2a76ec34adb0a3d16f2789a7ANALYSIS DATE: 2022-12-01T17:32:06ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

3 of the Worst Data Breaches in the World That Could Have Been Prevented

December 1, 2022

Data breaches can be devastating for organizations, these are 3 of the worst incidents that could have been prevented Data...

Cuba Ransomware Victim: Landaumedia

December 1, 2022

Cuba Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of...

Cuba Ransomware Victim: Generator-power

December 1, 2022

Cuba Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of...

Cuba Ransomware Victim: Boss-inc

December 1, 2022

Cuba Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of...

DomainDouche – OSINT Tool to Abuse SecurityTrails Domain Suggestion API To Find Potentially Related Domains By Keyword And Brute Force

December 1, 2022

Abusing SecurityTrails domain suggestion API to find potentially related domains by keyword and brute force. Use it while it still...

threatintel

Malware Analysis – redline – 60c672bf83f9ee919034423f7c9385f6

Malware Analysis – amadey – 3326681ef0261f9d4ae5251d0c0c3c6b

Malware Analysis – ransomware – 4ec86f1eb7f05d34af99885f733c3c5b

Malware Analysis – djvu – f272230670f1b845fdbf007fac1ff9ca

Malware Analysis – djvu – e4ac9588fd75fe70172873b5ca0ab847

Malware Analysis – globeimposter – fac0564b69ab03050cf82098f98317e1

Malware Analysis – globeimposter – 190517d80c4edcef8a6c2b0a017941b0

Malware Analysis – amadey – 59bf7bfb890e96702cfc4f3e9dbfa617

Malware Analysis – persistence – 29250c34e78857b17ee2576f68757d01

Malware Analysis – medusalocker – 5b780f32105ff92593db7b30ea2ac9ed

Malware Analysis – dcrat – 8d1b8e717d89bdf80df3fe855c4ff19c

Malware Analysis – discovery – 3b7fca0e31846825a61766dad02a8823

Malware Analysis – – 6953d6e1a2d8df8e0d2e76263e8b3115

3 of the Worst Data Breaches in the World That Could Have Been Prevented

Cuba Ransomware Victim: Landaumedia

Cuba Ransomware Victim: Generator-power

Cuba Ransomware Victim: Boss-inc

DomainDouche – OSINT Tool to Abuse SecurityTrails Domain Suggestion API To Find Potentially Related Domains By Keyword And Brute Force

Cobalt Stike Beacon Detected – 139[.]224[.]202[.]28:80

Cobalt Stike Beacon Detected – 8[.]134[.]90[.]91:6666

Cobalt Stike Beacon Detected – 1[.]117[.]231[.]225:80

Cobalt Stike Beacon Detected – 45[.]227[.]252[.]253:443

Cobalt Stike Beacon Detected – 43[.]142[.]23[.]167:9999

Cobalt Stike Beacon Detected – 23[.]227[.]194[.]86:80

Cobalt Strike Beacon Detected – 1[.]15[.]34[.]67:7777

Cobalt Strike Beacon Detected – 39[.]104[.]78[.]25:8443

Cobalt Strike Beacon Detected – 1[.]15[.]25[.]148:9080

Cobalt Strike Beacon Detected – 47[.]245[.]90[.]197:80

Cobalt Strike Beacon Detected – 43[.]163[.]116[.]82:81

You may have missed