threatintel

Malware Analysis – ransomware – 5f8946681a31e505ae08bb52c759adb5

February 13, 2023

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 5f8946681a31e505ae08bb52c759adb5SHA1: 332fcdeffda7aa2927f59438d84038f3d4096f8fANALYSIS DATE: 2023-02-13T05:54:12ZTTPS: T1012, T1082, T1057 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – smokeloader – 46de5533299ec397c04dabb10f3bb157

February 13, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 46de5533299ec397c04dabb10f3bb157SHA1: 764e0fa6f5db8e7f352a632a53e9632ee2fcc772ANALYSIS DATE: 2023-02-13T05:05:30ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – lockbit – e9cd8c321b68118611a0863b0b91b8f5

February 13, 2023

Score: 10 MALWARE FAMILY: lockbitTAGS:family:lockbit, discovery, evasion, persistence, ransomwareMD5: e9cd8c321b68118611a0863b0b91b8f5SHA1: dde3509b41639f4ae7383bcd7b1c17db88b667cfANALYSIS DATE: 2023-02-13T05:20:04ZTTPS: T1490, T1046, T1107, T1491, T1112, T1060, T1018,...

Cobalt Stike Beacon Detected – 217[.]12[.]206[.]146:4433

February 13, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 185[.]25[.]119[.]26:443

February 13, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 167[.]179[.]67[.]5:2087

February 13, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

LockBit 3.0 Ransomware Victim: lhermite-agri[.]com

February 12, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

LockBit 3.0 Ransomware Victim: mhstech[.]com

February 12, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

LockBit 3.0 Ransomware Victim: ppinvestors[.]com

February 12, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

LockBit 3.0 Ransomware Victim: wilsonart[.]co[.]th

February 12, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

LockBit 3.0 Ransomware Victim: olsenlawgroup[.]com

February 12, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

LockBit 3.0 Ransomware Victim: covermeinsurance[.]com

February 12, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

LockBit 3.0 Ransomware Victim: mrkpc[.]com

February 12, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

LockBit 3.0 Ransomware Victim: qsi-q3[.]de

February 12, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Cobalt Stike Beacon Detected – 43[.]136[.]168[.]94:8443

February 12, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 120[.]76[.]205[.]155:8090

February 12, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 104[.]237[.]149[.]115:8084

February 12, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – banker – 757ecb313fa062bd376df95e00b64627

February 12, 2023

Score: 8 MALWARE FAMILY: bankerTAGS:banker, ransomwareMD5: 757ecb313fa062bd376df95e00b64627SHA1: 336fc4bf6a46e78c41b98cdace7348ff70e800f0ANALYSIS DATE: 2023-01-30T09:06:35ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – djvu – a7c1891fa46875989205d76567a8975f

February 12, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:rhadamanthys, family:smokeloader, backdoor, discovery, persistence, ransomware, stealer, trojan, vmprotectMD5: a7c1891fa46875989205d76567a8975fSHA1: 3ccbba1b2ec99f9d6e4eca2332f0d20cb22829dfANALYSIS DATE: 2023-02-12T09:11:04ZTTPS: T1082, T1012,...

Cobalt Stike Beacon Detected – 43[.]142[.]73[.]5:443

February 12, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 108[.]165[.]178[.]42:443

February 12, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 107[.]148[.]149[.]21:80

February 12, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 107[.]172[.]208[.]88:443

February 12, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – 630717681fcc3eea95825d3fd0c489f1

February 12, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 630717681fcc3eea95825d3fd0c489f1SHA1: ba5a2c63e7c4a2ef7587da8c0dfbb5aefb6cef1dANALYSIS DATE: 2023-02-12T09:47:18ZTTPS: T1053, T1005, T1081, T1012,...

threatintel

Malware Analysis – ransomware – 5f8946681a31e505ae08bb52c759adb5

Malware Analysis – smokeloader – 46de5533299ec397c04dabb10f3bb157

Malware Analysis – lockbit – e9cd8c321b68118611a0863b0b91b8f5

Cobalt Stike Beacon Detected – 217[.]12[.]206[.]146:4433

Cobalt Stike Beacon Detected – 185[.]25[.]119[.]26:443

Cobalt Stike Beacon Detected – 167[.]179[.]67[.]5:2087

LockBit 3.0 Ransomware Victim: lhermite-agri[.]com

LockBit 3.0 Ransomware Victim: mhstech[.]com

LockBit 3.0 Ransomware Victim: ppinvestors[.]com

LockBit 3.0 Ransomware Victim: wilsonart[.]co[.]th

LockBit 3.0 Ransomware Victim: olsenlawgroup[.]com

LockBit 3.0 Ransomware Victim: covermeinsurance[.]com

LockBit 3.0 Ransomware Victim: mrkpc[.]com

LockBit 3.0 Ransomware Victim: qsi-q3[.]de

Cobalt Stike Beacon Detected – 43[.]136[.]168[.]94:8443

Cobalt Stike Beacon Detected – 120[.]76[.]205[.]155:8090

Cobalt Stike Beacon Detected – 104[.]237[.]149[.]115:8084

Malware Analysis – banker – 757ecb313fa062bd376df95e00b64627

Malware Analysis – djvu – a7c1891fa46875989205d76567a8975f

Cobalt Stike Beacon Detected – 43[.]142[.]73[.]5:443

Cobalt Stike Beacon Detected – 108[.]165[.]178[.]42:443

Cobalt Stike Beacon Detected – 107[.]148[.]149[.]21:80

Cobalt Stike Beacon Detected – 107[.]172[.]208[.]88:443

Malware Analysis – djvu – 630717681fcc3eea95825d3fd0c489f1

[RHYSIDA] – Ransomware Victim: LMHT Associates

[COINBASECARTEL] – Ransomware Victim: Propertyfinder / PropSpace CRM

[BEAST] – Ransomware Victim: Noroaco

[QILIN] – Ransomware Victim: Gullco International

CVE Alert: CVE-2025-12929 – SourceCodester – Survey Application System

You may have missed