threatintel

Malware Analysis – djvu – 670936165fe244e2905fbc7354f0ba35

February 10, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:546, backdoor, discovery, evasion, persistence, ransomware, stealer, themida, trojan, vmprotectMD5: 670936165fe244e2905fbc7354f0ba35SHA1: aaed184b2c9991afe8d1db5af006220ef6a0d3c1ANALYSIS DATE:...

Malware Analysis – djvu – b83ea35b0ed8ecdc998e9fffeb694da4

February 10, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: b83ea35b0ed8ecdc998e9fffeb694da4SHA1: 673a7442d490c9c6eabc3f43bc8299ff68f8106fANALYSIS DATE: 2023-02-10T15:35:44ZTTPS: T1082, T1012, T1060, T1112, T1222 ScoreMeaningExample10Known badA malware...

Malware Analysis – djvu – ca6745b53c57a5d2353781f173126a26

February 10, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, backdoor, discovery, persistence, ransomware, trojan, vmprotectMD5: ca6745b53c57a5d2353781f173126a26SHA1: 648541dc24452c5363f5f6885a5f1b121760af2dANALYSIS DATE: 2023-02-10T16:40:27ZTTPS: T1012, T1120, T1082, T1060,...

Malware Analysis – djvu – d014aa8d507c1461690db496c97cb16a

February 10, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: d014aa8d507c1461690db496c97cb16aSHA1: abaa15064b543bb6e4e0ece2743fe88864eef1c7ANALYSIS DATE: 2023-02-10T16:58:56ZTTPS: T1082, T1005, T1081, T1012,...

Malware Analysis – djvu – abd9de0a607b47e396cae4b372c69879

February 10, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:19, backdoor, discovery, persistence, ransomware, stealer, trojan, vmprotectMD5: abd9de0a607b47e396cae4b372c69879SHA1: c55a2208cc2b3eabfb10bd499a6e88c41de05906ANALYSIS DATE: 2023-02-10T17:13:19ZTTPS: T1012,...

Malware Analysis – adware – 11ff322997d98d02afe198c20b613ff3

February 10, 2023

Score: 8 MALWARE FAMILY: adwareTAGS:adware, discovery, exploit, persistence, ransomware, stealer, upxMD5: 11ff322997d98d02afe198c20b613ff3SHA1: 48e70395f187454bddc01484a6cbcf1c5f1753fcANALYSIS DATE: 2023-02-10T17:50:24ZTTPS: T1060, T1012, T1120, T1082, T1222,...

LockBit 3.0 Ransomware Victim: merlinpcbgroup[.]com

February 10, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Cobalt Stike Beacon Detected – 112[.]74[.]177[.]62:443

February 10, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 5[.]181[.]86[.]249:4433

February 10, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 37[.]220[.]87[.]31:80

February 10, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 20[.]190[.]109[.]205:443

February 10, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Empire C2 Detected – 149[.]28[.]146[.]251:80

February 10, 2023

The Information provided at the time of posting was detected as "Empire C2". Depending on when you are viewing this...

Malware Analysis – chaos – 4cc6ec4d961a14c4fc4b45dfe939ca00

February 10, 2023

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, evasion, ransomware, spyware, stealerMD5: 4cc6ec4d961a14c4fc4b45dfe939ca00SHA1: 7a115dcc3ca91877b70de091b122259503d7109fANALYSIS DATE: 2023-02-10T05:37:03ZTTPS: T1490, T1059, T1107, T1005, T1081, T1082 ScoreMeaningExample10Known...

Malware Analysis – djvu – 20d5e3daaa4f8ce2e83c91861f2a8ade

February 10, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 20d5e3daaa4f8ce2e83c91861f2a8adeSHA1: 4a555a39d41a0d10d35cbe5f78682a00210be6a0ANALYSIS DATE: 2023-02-10T05:55:27ZTTPS: T1012, T1082, T1005, T1081,...

Malware Analysis – discovery – e5f2fcd6f0327a18366243c8c657eb8d

February 10, 2023

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploit, upxMD5: e5f2fcd6f0327a18366243c8c657eb8dSHA1: 0d195362be5e95e4c6efc264c8027c0720d344f5ANALYSIS DATE: 2023-02-10T03:24:24ZTTPS: T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – ransomware – 50f4469ad4b9bf352c5c9604ef913ccf

February 10, 2023

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 50f4469ad4b9bf352c5c9604ef913ccfSHA1: 5c82d5155c9151115346efd94e1b1da34cced32cANALYSIS DATE: 2023-02-10T05:42:47ZTTPS: T1005, T1081, T1107, T1490, T1082 ScoreMeaningExample10Known badA malware family...

threatintel

Malware Analysis – djvu – 670936165fe244e2905fbc7354f0ba35

Malware Analysis – djvu – b83ea35b0ed8ecdc998e9fffeb694da4

Malware Analysis – djvu – ca6745b53c57a5d2353781f173126a26

Malware Analysis – djvu – d014aa8d507c1461690db496c97cb16a

Malware Analysis – djvu – abd9de0a607b47e396cae4b372c69879

Malware Analysis – adware – 11ff322997d98d02afe198c20b613ff3

LockBit 3.0 Ransomware Victim: merlinpcbgroup[.]com

Cobalt Stike Beacon Detected – 112[.]74[.]177[.]62:443

Cobalt Stike Beacon Detected – 5[.]181[.]86[.]249:4433

Cobalt Stike Beacon Detected – 37[.]220[.]87[.]31:80

Cobalt Stike Beacon Detected – 20[.]190[.]109[.]205:443

Empire C2 Detected – 149[.]28[.]146[.]251:80

Malware Analysis – chaos – 4cc6ec4d961a14c4fc4b45dfe939ca00

Malware Analysis – djvu – 20d5e3daaa4f8ce2e83c91861f2a8ade

Malware Analysis – discovery – e5f2fcd6f0327a18366243c8c657eb8d

Malware Analysis – ransomware – 50f4469ad4b9bf352c5c9604ef913ccf

Weee – 1,117,405 breached accounts

Play Ransomware Victim: M???????? S??

Cobalt Stike Beacon Detected – 84[.]32[.]131[.]91:443

Cobalt Stike Beacon Detected – 194[.]165[.]16[.]56:443

Cobalt Stike Beacon Detected – 47[.]243[.]185[.]202:8099

Cobalt Stike Beacon Detected – 43[.]137[.]8[.]159:443

Cobalt Stike Beacon Detected – 216[.]83[.]46[.]88:8080

Cobalt Stike Beacon Detected – 192[.]3[.]127[.]76:443

[RHYSIDA] – Ransomware Victim: LMHT Associates

[COINBASECARTEL] – Ransomware Victim: Propertyfinder / PropSpace CRM

[BEAST] – Ransomware Victim: Noroaco

[QILIN] – Ransomware Victim: Gullco International

CVE Alert: CVE-2025-12929 – SourceCodester – Survey Application System

You may have missed