threatintel

Malware Analysis – blackbasta – 267d5c3137d313ce1a86c2f255a835e6

December 1, 2022

Score: 10 MALWARE FAMILY: blackbastaTAGS:family:blackbasta, ransomware, spyware, stealerMD5: 267d5c3137d313ce1a86c2f255a835e6SHA1: c7a37c0edeffd23777cca44f9b49076be1bd43e6ANALYSIS DATE: 2022-11-30T23:08:46ZTTPS: T1491, T1112, T1005, T1081 ScoreMeaningExample10Known badA malware family...

Cobalt Stike Beacon Detected – 1[.]14[.]107[.]106:4433

December 1, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – blackbasta – adb3cf03e9be744107e61bd7de4c26bd

December 1, 2022

Score: 10 MALWARE FAMILY: blackbastaTAGS:family:blackbasta, ransomwareMD5: adb3cf03e9be744107e61bd7de4c26bdSHA1: cc7ea6bb6787df664adb69022546c42f5f409653ANALYSIS DATE: 2022-11-30T23:37:05ZTTPS: T1107, T1490, T1491, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 7349fec1e2af4aee2a5548a8ed226641

December 1, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 7349fec1e2af4aee2a5548a8ed226641SHA1: bd74b4df28c8f147e1d36808419b6607a67e37d5ANALYSIS DATE: 2022-11-30T23:31:03ZTTPS: T1082, T1053, T1012, T1060,...

Malware Analysis – blackbasta – fe8dae06d4b9165c6be675e184bfaca9

December 1, 2022

Score: 10 MALWARE FAMILY: blackbastaTAGS:family:blackbasta, ransomwareMD5: fe8dae06d4b9165c6be675e184bfaca9SHA1: 5244f99411acdf30ca6832b2e6352afdd68c88f3ANALYSIS DATE: 2022-11-30T23:43:11ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – blackbasta – f05dac112cd3174c385d10158b6080fb

December 1, 2022

Score: 10 MALWARE FAMILY: blackbastaTAGS:family:blackbasta, ransomwareMD5: f05dac112cd3174c385d10158b6080fbSHA1: 579b245a6609903d804f957083b9e0b2ed145f5aANALYSIS DATE: 2022-11-30T23:49:27ZTTPS: T1107, T1490, T1491, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Cobalt Stike Beacon Detected – 42[.]192[.]55[.]149:8888

December 1, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 82[.]156[.]166[.]154:443

December 1, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 121[.]40[.]50[.]219:9999

December 1, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 38[.]242[.]255[.]222:443

December 1, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Google links three exploitation frameworks to Spanish commercial spyware vendor Variston

November 30, 2022

Google’s Threat Analysis Group (TAG) linked three exploitation frameworks to a Spanish surveillance spyware vendor named Variston. While tracking the...

Malware Analysis – – 0a2495eb99d3ec6f57d00b58f390e840

November 30, 2022

Score: 3 MALWARE FAMILY: TAGS:MD5: 0a2495eb99d3ec6f57d00b58f390e840SHA1: 50051ae2a4f3656eaf0400f54d6d19510642a73cANALYSIS DATE: 2022-11-29T10:23:36ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – evasion – 3e55f3f5c1b95a60a127ff835216c973

November 30, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 3e55f3f5c1b95a60a127ff835216c973SHA1: 7391def32cf4fd471d747168374283fcfc94ebb4ANALYSIS DATE: 2022-11-29T09:54:55ZTTPS: T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – discovery – 249b082c5c864e497bc8fe3e122f3fd0

November 30, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploitMD5: 249b082c5c864e497bc8fe3e122f3fd0SHA1: 244b0104a4541e81d50e871cff7a9e0bc9996662ANALYSIS DATE: 2022-11-29T10:01:08ZTTPS: T1082, T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – evasion – 6c6056a7353a8cf8744fe608cea84730

November 30, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 6c6056a7353a8cf8744fe608cea84730SHA1: 6734e499e0de7fe55b3959d4cab063c6da33ca21ANALYSIS DATE: 2022-11-29T11:12:24ZTTPS: T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – evasion – 0f0c5c2b3c33b906025d2f5b8a280ddb

November 30, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomwareMD5: 0f0c5c2b3c33b906025d2f5b8a280ddbSHA1: 24b8e47c4f379b750fe76899a5c39277569081c6ANALYSIS DATE: 2022-11-30T15:11:14ZTTPS: T1491, T1112, T1004 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – evasion – a82dcf64bdb9fd771f16a7a8141b07ed

November 30, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomwareMD5: a82dcf64bdb9fd771f16a7a8141b07edSHA1: d86f53260e2bf58310cb8e9a8bb189b7f482ad77ANALYSIS DATE: 2022-11-30T15:11:10ZTTPS: T1060, T1112, T1031, T1562, T1489 ScoreMeaningExample10Known badA malware family...

Malware Analysis – discovery – c515ac89abcc0c7a8b538bc6e85c0387

November 30, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploitMD5: c515ac89abcc0c7a8b538bc6e85c0387SHA1: 5ff15522ec5f4ff00ddfc4da811dbede8a6bdb5eANALYSIS DATE: 2022-11-29T10:44:58ZTTPS: T1082, T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – mafiaware666 – 6b3db1e9dba9d6fc75f90d047067395d

November 30, 2022

Score: 10 MALWARE FAMILY: mafiaware666TAGS:family:mafiaware666, ransomwareMD5: 6b3db1e9dba9d6fc75f90d047067395dSHA1: f2eb7dac455ffd5d646375be74b75469faeb68baANALYSIS DATE: 2022-11-30T15:12:09ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – mafiaware666 – b14abcb0015ada422421d982cf1f0946

November 30, 2022

Score: 10 MALWARE FAMILY: mafiaware666TAGS:family:mafiaware666, ransomwareMD5: b14abcb0015ada422421d982cf1f0946SHA1: afcfe143fff8d1a1d40acc6c8e84ff19658274b1ANALYSIS DATE: 2022-11-30T15:15:16ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – ransomware – 042d41a6bc6e86969e9c668ab158addd

November 30, 2022

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 042d41a6bc6e86969e9c668ab158adddSHA1: 4df6ff4dd4e9a5f74298c856b6efccfc347d821dANALYSIS DATE: 2022-11-30T15:14:09ZTTPS: T1005, T1081 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – ransomware – a869c914ee041895194d39d6bd412508

November 30, 2022

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: a869c914ee041895194d39d6bd412508SHA1: 93e3451ffafcb71d96b909d7a6926d23388eabafANALYSIS DATE: 2022-11-30T15:12:06ZTTPS: T1005, T1081 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – djvu – 1b912539242fc9ce1eb94c368a426b1c

November 30, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: 1b912539242fc9ce1eb94c368a426b1cSHA1: 8b2c0af34e04019ef0a7f2ae22e7f47926514823ANALYSIS DATE: 2022-11-30T15:19:16ZTTPS: T1130, T1112, T1060, T1222, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – mafiaware666 – 1bf9ba066c58d63fe622378e42c5a95b

November 30, 2022

Score: 10 MALWARE FAMILY: mafiaware666TAGS:family:mafiaware666, ransomwareMD5: 1bf9ba066c58d63fe622378e42c5a95bSHA1: c884f707f77be72e777f9788a57bca599f703566ANALYSIS DATE: 2022-11-30T15:21:16ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

threatintel

Malware Analysis – blackbasta – 267d5c3137d313ce1a86c2f255a835e6

Cobalt Stike Beacon Detected – 1[.]14[.]107[.]106:4433

Malware Analysis – blackbasta – adb3cf03e9be744107e61bd7de4c26bd

Malware Analysis – djvu – 7349fec1e2af4aee2a5548a8ed226641

Malware Analysis – blackbasta – fe8dae06d4b9165c6be675e184bfaca9

Malware Analysis – blackbasta – f05dac112cd3174c385d10158b6080fb

Cobalt Stike Beacon Detected – 42[.]192[.]55[.]149:8888

Cobalt Stike Beacon Detected – 82[.]156[.]166[.]154:443

Cobalt Stike Beacon Detected – 121[.]40[.]50[.]219:9999

Cobalt Stike Beacon Detected – 38[.]242[.]255[.]222:443

Google links three exploitation frameworks to Spanish commercial spyware vendor Variston

Malware Analysis – – 0a2495eb99d3ec6f57d00b58f390e840

Malware Analysis – evasion – 3e55f3f5c1b95a60a127ff835216c973

Malware Analysis – discovery – 249b082c5c864e497bc8fe3e122f3fd0

Malware Analysis – evasion – 6c6056a7353a8cf8744fe608cea84730

Malware Analysis – evasion – 0f0c5c2b3c33b906025d2f5b8a280ddb

Malware Analysis – evasion – a82dcf64bdb9fd771f16a7a8141b07ed

Malware Analysis – discovery – c515ac89abcc0c7a8b538bc6e85c0387

Malware Analysis – mafiaware666 – 6b3db1e9dba9d6fc75f90d047067395d

Malware Analysis – mafiaware666 – b14abcb0015ada422421d982cf1f0946

Malware Analysis – ransomware – 042d41a6bc6e86969e9c668ab158addd

Malware Analysis – ransomware – a869c914ee041895194d39d6bd412508

Malware Analysis – djvu – 1b912539242fc9ce1eb94c368a426b1c

Malware Analysis – mafiaware666 – 1bf9ba066c58d63fe622378e42c5a95b

Brute Ratel C4 Detected – 2[.]37[.]23[.]207:9002

CVE Alert: CVE-2025-46993

CVE Alert: CVE-2025-46996

CVE Alert: CVE-2025-8114

CVE Alert: CVE-2025-47061

You may have missed