threatintel

Malware Analysis – djvu – 449277c34c45a5a7e0b9b366a42854b0

March 6, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 449277c34c45a5a7e0b9b366a42854b0SHA1: 163fb2d2c6fa956afef9d29a45acade5db89a12dANALYSIS DATE: 2023-03-06T05:31:52ZTTPS: T1005, T1081, T1060, T1112, T1222,...

Malware Analysis – djvu – 7f136de7223a572a2fc577f6423b647d

March 6, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 7f136de7223a572a2fc577f6423b647dSHA1: 7cf22e2a8194e2d99157c0b051d10b7a5ee057b5ANALYSIS DATE: 2023-03-06T05:40:18ZTTPS: T1012, T1005, T1081, T1082, T1053,...

Malware Analysis – djvu – b66b5d51679cd1f46f708ab234e4227f

March 6, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: b66b5d51679cd1f46f708ab234e4227fSHA1: c8d5949541be77acfa25dc684590846edcb4f803ANALYSIS DATE: 2023-03-06T05:42:05ZTTPS: T1222, T1012, T1082, T1005, T1081,...

LBB – 39,288 breached accounts

March 6, 2023

HIBP In August 2022, customer data of the Indian shopping site "LBB" (Little Black Book) was posted to a popular...

GunAuction.com – 565,470 breached accounts

March 6, 2023

HIBP In December 2022, the online firearms auction website GunAuction.com suffered a data breach which was later discovered left unprotected...

Vice Society Ransomware Victim: HAW Hamburg

March 6, 2023

Vice Society Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Malware Analysis – persistence – 23ed5b08fd2575622addefa1b07adc1e

March 6, 2023

Score: 6 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 23ed5b08fd2575622addefa1b07adc1eSHA1: efee24317ff461103fa7f72b5f8b986f3c6eff50ANALYSIS DATE: 2023-03-05T21:03:20ZTTPS: T1491, T1112, T1060 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – djvu – 7dbba7788d5ab9706aa1a3ac1cde5b79

March 6, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 7dbba7788d5ab9706aa1a3ac1cde5b79SHA1: bc4d6ced2ec3137206cd4379e172632360be6f39ANALYSIS DATE: 2023-03-05T21:48:58ZTTPS: T1053, T1005, T1081, T1222, T1082,...

Malware Analysis – djvu – df2e55e02bed6ff498732664504ca465

March 6, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: df2e55e02bed6ff498732664504ca465SHA1: 0cf21403bef8c801b84d934b738fb1f30cd1df94ANALYSIS DATE: 2023-03-05T21:35:07ZTTPS: T1060, T1112, T1082, T1005, T1081,...

Malware Analysis – djvu – e5a6fdb93a403d174e1f51d52baaf410

March 6, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: e5a6fdb93a403d174e1f51d52baaf410SHA1: 9862d7fd9b8fb94651dc1792c985886997f57f5bANALYSIS DATE: 2023-03-05T21:36:24ZTTPS: T1005, T1081, T1222, T1082, T1012,...

Malware Analysis – djvu – bd584c26eb1bde0cf75b0ccf64f4b64a

March 6, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: bd584c26eb1bde0cf75b0ccf64f4b64aSHA1: ce6ca89cf1ed0be301ccdceab75968fc2a6582a6ANALYSIS DATE: 2023-03-05T21:40:47ZTTPS: T1222, T1012, T1082, T1005, T1081,...

Malware Analysis – banker – 5b022926422f01bcd2439853b16ec38b

March 6, 2023

Score: 8 MALWARE FAMILY: bankerTAGS:banker, evasion, ransomwareMD5: 5b022926422f01bcd2439853b16ec38bSHA1: 5c90b4cb247bada9c082a03e4265fdf8d5177e32ANALYSIS DATE: 2023-03-05T23:10:19ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – evasion – f5d73448dbe1ec4f9a8ec187f216d9e5

March 6, 2023

Score: 8 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomwareMD5: f5d73448dbe1ec4f9a8ec187f216d9e5SHA1: 6f76561bd09833c75ae8f0035dcb2bc87709e2e5ANALYSIS DATE: 2023-03-05T22:00:11ZTTPS: T1491, T1112, T1004, T1012, T1120, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – b75c02144d45715bf0cab2c2076104db

March 6, 2023

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: b75c02144d45715bf0cab2c2076104dbSHA1: 5dbf8b9d17fc58045fe59a3191fec2a05b5198edANALYSIS DATE: 2023-03-05T23:39:44ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – ef2cc8c767116bf59422002e4e54f28b

March 6, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: ef2cc8c767116bf59422002e4e54f28bSHA1: 1fc0a1115912a2fdfbd25761fa7ad4242e8d1ca2ANALYSIS DATE: 2023-03-05T23:00:55ZTTPS: T1222, T1005, T1081, T1012, T1060,...

Cobalt Stike Beacon Detected – 8[.]142[.]124[.]166:8443

March 6, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 152[.]89[.]196[.]12:82

March 6, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 120[.]25[.]236[.]78:80

March 6, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 1[.]13[.]82[.]101:4443

March 6, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – hive – da13022097518d123a91a3958be326da

March 5, 2023

Score: 10 MALWARE FAMILY: hiveTAGS:family:hive, evasion, ransomware, spyware, stealer, trojan, upxMD5: da13022097518d123a91a3958be326daSHA1: 24a71ab462594d5a159bbf176588af951aba1381ANALYSIS DATE: 2023-03-05T16:36:37ZTTPS: T1005, T1081, T1107, T1490, T1112,...

Malware Analysis – djvu – dd8d98e1131e47cdb37a6cc78f94e6d1

March 5, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: dd8d98e1131e47cdb37a6cc78f94e6d1SHA1: bde5f558557f59556a00c3c7891564a271be4c49ANALYSIS DATE: 2023-03-05T15:11:43ZTTPS: T1060, T1112, T1222, T1012, T1005,...

Malware Analysis – djvu – baa8a14fa8c2b2db1b0b74ff0e4c1af3

March 5, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: baa8a14fa8c2b2db1b0b74ff0e4c1af3SHA1: f1788b075e799ea0c0f5d6a3b56ae157343c4161ANALYSIS DATE: 2023-03-05T17:10:49ZTTPS: T1222, T1005, T1081, T1060, T1112,...

Malware Analysis – djvu – 295dbead840d8746dd01b5a7ef6683ca

March 5, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 295dbead840d8746dd01b5a7ef6683caSHA1: 80c626286a6db802e56a8f40dd5078c7a5fc8794ANALYSIS DATE: 2023-03-05T17:26:24ZTTPS: T1060, T1112, T1005, T1081, T1222,...

Malware Analysis – evasion – f4dcbd5f5b985250924631a998237d27

March 5, 2023

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, ransomware, upxMD5: f4dcbd5f5b985250924631a998237d27SHA1: 432199480a137cdd63dc90255211cea766bb37d5ANALYSIS DATE: 2023-03-05T17:36:51ZTTPS: T1490, T1082, T1012, T1120, T1031, T1562, T1489 ScoreMeaningExample10Known badA...

threatintel

Malware Analysis – djvu – 449277c34c45a5a7e0b9b366a42854b0

Malware Analysis – djvu – 7f136de7223a572a2fc577f6423b647d

Malware Analysis – djvu – b66b5d51679cd1f46f708ab234e4227f

LBB – 39,288 breached accounts

GunAuction.com – 565,470 breached accounts

Vice Society Ransomware Victim: HAW Hamburg

Malware Analysis – persistence – 23ed5b08fd2575622addefa1b07adc1e

Malware Analysis – djvu – 7dbba7788d5ab9706aa1a3ac1cde5b79

Malware Analysis – djvu – df2e55e02bed6ff498732664504ca465

Malware Analysis – djvu – e5a6fdb93a403d174e1f51d52baaf410

Malware Analysis – djvu – bd584c26eb1bde0cf75b0ccf64f4b64a

Malware Analysis – banker – 5b022926422f01bcd2439853b16ec38b

Malware Analysis – evasion – f5d73448dbe1ec4f9a8ec187f216d9e5

Malware Analysis – ransomware – b75c02144d45715bf0cab2c2076104db

Malware Analysis – djvu – ef2cc8c767116bf59422002e4e54f28b

Cobalt Stike Beacon Detected – 8[.]142[.]124[.]166:8443

Cobalt Stike Beacon Detected – 152[.]89[.]196[.]12:82

Cobalt Stike Beacon Detected – 120[.]25[.]236[.]78:80

Cobalt Stike Beacon Detected – 1[.]13[.]82[.]101:4443

Malware Analysis – hive – da13022097518d123a91a3958be326da

Malware Analysis – djvu – dd8d98e1131e47cdb37a6cc78f94e6d1

Malware Analysis – djvu – baa8a14fa8c2b2db1b0b74ff0e4c1af3

Malware Analysis – djvu – 295dbead840d8746dd01b5a7ef6683ca

Malware Analysis – evasion – f4dcbd5f5b985250924631a998237d27

[DRAGONFORCE] – Ransomware Victim: Ponzini S[.]p[.]A[.]

[MEDUSA] – Ransomware Victim: Simon Property Group

CVE Alert: CVE-2025-12399 – alexreservations – Alex Reservations: Smart Restaurant Booking

CVE Alert: CVE-2025-12099 – academylms – Academy LMS – WordPress LMS Plugin for Complete eLearning Solution

CVE Alert: CVE-2025-9334 – codesolz – Better Find and Replace – AI-Powered Suggestions

You may have missed