threatintel

Malware Analysis – – 11578332b3c64fc862691ee0321b3b73

November 30, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: 11578332b3c64fc862691ee0321b3b73SHA1: 9af1e5a19ef42ac2a269dd3346e0ad34501e6264ANALYSIS DATE: 2022-11-30T10:56:05ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – magniber – 0362769fcb15c6e11528373bb98a572e

November 30, 2022

Score: 10 MALWARE FAMILY: magniberTAGS:family:magniber, ransomwareMD5: 0362769fcb15c6e11528373bb98a572eSHA1: 62f14e27becef8c7c889e5083c0341992e4bd57bANALYSIS DATE: 2022-11-30T10:55:09ZTTPS: T1107, T1490, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – – 287980881973f971e06cf79804f83c83

November 30, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: 287980881973f971e06cf79804f83c83SHA1: 3fbbc869fee083733b9e2d8e4ab65999ce5af322ANALYSIS DATE: 2022-11-30T10:57:04ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – – 82787952e4b6540a9ec9a904a016f9bc

November 30, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: 82787952e4b6540a9ec9a904a016f9bcSHA1: 6ae7c1ce67148be5552f3b63f93a72276c14d5ebANALYSIS DATE: 2022-11-30T10:56:05ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – – be362957cdc5989cb7fa325aa80fe73d

November 30, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: be362957cdc5989cb7fa325aa80fe73dSHA1: 3f316e0e25e26001a17858f62145565d50845ff3ANALYSIS DATE: 2022-11-30T10:58:04ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – – a321bfd6a861472a160fca2928eb51a6

November 30, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: a321bfd6a861472a160fca2928eb51a6SHA1: b99efdaf0046e1902be87fc9388288aa4edcd1faANALYSIS DATE: 2022-11-30T10:57:04ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – – bfabbee8c708860eb6dfea2265cd35c9

November 30, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: bfabbee8c708860eb6dfea2265cd35c9SHA1: 53e7468eb78e2387e7df6ae0a70c53bea692e151ANALYSIS DATE: 2022-11-30T10:58:04ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – – a33c505f1229865a7b9af6df243a3017

November 30, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: a33c505f1229865a7b9af6df243a3017SHA1: 3a79187c482a59c3c30cb2fef37141085dbd8b7eANALYSIS DATE: 2022-11-30T10:57:04ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Cobalt Stike Beacon Detected – 43[.]142[.]23[.]167:443

November 30, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 1[.]12[.]55[.]126:443

November 30, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 120[.]24[.]84[.]16:80

November 30, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Posh C2 Detected – 34[.]235[.]5[.]141:443

November 30, 2022

The Information provided at the time of posting was detected as "Posh C2". Depending on when you are viewing this...

ENC Security, the encryption provider for Sony and Lexar, leaked sensitive data for over a year

November 30, 2022

CyberNews experts discovered that ENC Security, a Netherlands software company, had been leaking critical business data since May 2021. Original...

Karakurt Ransomware Victim: LIBERTY PULTRUSIONS

November 30, 2022

KARAKURT RANSOMWARE NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of...

Malware Analysis – smokeloader – ed8ca6815d1d329d56119d23293c39c7

November 30, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: ed8ca6815d1d329d56119d23293c39c7SHA1: 062a04b195e54b0052f4fa075a19affa1a1f5bf7ANALYSIS DATE: 2022-11-30T03:18:41ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – xorist – ae52ae883b02a0c96aff6ebd68203589

November 30, 2022

Score: 10 MALWARE FAMILY: xoristTAGS:family:xorist, discovery, persistence, ransomware, spyware, stealer, upxMD5: ae52ae883b02a0c96aff6ebd68203589SHA1: f7d44b9fc385ff312e283e6259194da112024ed5ANALYSIS DATE: 2022-11-29T03:02:02ZTTPS: T1005, T1081, T1012, T1082, T1060,...

Malware Analysis – xorist – 846b3e30cd174661265a4c925cf73865

November 30, 2022

Score: 10 MALWARE FAMILY: xoristTAGS:family:xorist, persistence, ransomware, spyware, stealer, upxMD5: 846b3e30cd174661265a4c925cf73865SHA1: 78be287dfd593ec5e87b31ef20347bebb61abfcbANALYSIS DATE: 2022-11-29T04:08:13ZTTPS: T1060, T1112, T1005, T1081 ScoreMeaningExample10Known badA...

Malware Analysis – djvu – b640036fab21df416f292a9c540421e5

November 30, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: b640036fab21df416f292a9c540421e5SHA1: 49f30be1ad1181cf8decff8fd036ec0fa0b6e294ANALYSIS DATE: 2022-11-30T05:41:51ZTTPS: T1060, T1112, T1082, T1053,...

Malware Analysis – djvu – 8f1ffbd841ae305c5297476d38aeabf3

November 30, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 8f1ffbd841ae305c5297476d38aeabf3SHA1: ef06b7fc7740d78662fda0b9e2b7179a4a8ac782ANALYSIS DATE: 2022-11-30T04:05:01ZTTPS: T1222, T1082, T1053, T1005,...

Malware Analysis – amadey – ca94e554bf77b157d780d454e38afb80

November 30, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, backdoor, ransomware, spyware, stealer, trojanMD5: ca94e554bf77b157d780d454e38afb80SHA1: 860ef500c61be60f1a1514c5cf60447ce0c729bdANALYSIS DATE: 2022-11-30T04:22:11ZTTPS: T1012, T1082, T1053, T1005,...

Malware Analysis – djvu – 924cedaa60e2eba5624e7b2cb03f3ff2

November 30, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 924cedaa60e2eba5624e7b2cb03f3ff2SHA1: 34d61d5edf80b5dd7cdc7cccc4ca3dcf96115eb6ANALYSIS DATE: 2022-11-30T03:31:03ZTTPS: T1222, T1005, T1081, T1060,...

Malware Analysis – ransomware – 1022a2c4eaa199f75ebce324e214b9a2

November 30, 2022

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 1022a2c4eaa199f75ebce324e214b9a2SHA1: 199c72ebc27ab44a58ec70bfe7885189b8f8f522ANALYSIS DATE: 2022-11-28T14:31:11ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – b68602c4a39048ba6bf905198b7218b9

November 30, 2022

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: b68602c4a39048ba6bf905198b7218b9SHA1: 4571b54859801b5ed8d5d48d167eef5b327c2787ANALYSIS DATE: 2022-11-28T14:29:43ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – acff34e3eda63363b3355e2b539bdbbe

November 30, 2022

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: acff34e3eda63363b3355e2b539bdbbeSHA1: ab80245ba1abca5cb39c2c9208c2768f2ccde86aANALYSIS DATE: 2022-11-28T14:32:47ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

threatintel

Malware Analysis – – 11578332b3c64fc862691ee0321b3b73

Malware Analysis – magniber – 0362769fcb15c6e11528373bb98a572e

Malware Analysis – – 287980881973f971e06cf79804f83c83

Malware Analysis – – 82787952e4b6540a9ec9a904a016f9bc

Malware Analysis – – be362957cdc5989cb7fa325aa80fe73d

Malware Analysis – – a321bfd6a861472a160fca2928eb51a6

Malware Analysis – – bfabbee8c708860eb6dfea2265cd35c9

Malware Analysis – – a33c505f1229865a7b9af6df243a3017

Cobalt Stike Beacon Detected – 43[.]142[.]23[.]167:443

Cobalt Stike Beacon Detected – 1[.]12[.]55[.]126:443

Cobalt Stike Beacon Detected – 120[.]24[.]84[.]16:80

Posh C2 Detected – 34[.]235[.]5[.]141:443

ENC Security, the encryption provider for Sony and Lexar, leaked sensitive data for over a year

Karakurt Ransomware Victim: LIBERTY PULTRUSIONS

Malware Analysis – smokeloader – ed8ca6815d1d329d56119d23293c39c7

Malware Analysis – xorist – ae52ae883b02a0c96aff6ebd68203589

Malware Analysis – xorist – 846b3e30cd174661265a4c925cf73865

Malware Analysis – djvu – b640036fab21df416f292a9c540421e5

Malware Analysis – djvu – 8f1ffbd841ae305c5297476d38aeabf3

Malware Analysis – amadey – ca94e554bf77b157d780d454e38afb80

Malware Analysis – djvu – 924cedaa60e2eba5624e7b2cb03f3ff2

Malware Analysis – ransomware – 1022a2c4eaa199f75ebce324e214b9a2

Malware Analysis – ransomware – b68602c4a39048ba6bf905198b7218b9

Malware Analysis – ransomware – acff34e3eda63363b3355e2b539bdbbe

CVE Alert: CVE-2025-8182

CVE Alert: CVE-2025-7501

CVE Alert: CVE-2025-6989

CVE Alert: CVE-2025-6991

CVE Alert: CVE-2025-5529

You may have missed