threatintel

Malware Analysis – adware – 904ea4ab8e83c9da097992e3074f7c30

November 26, 2022

Score: 9 MALWARE FAMILY: adwareTAGS:adware, discovery, exploit, persistence, stealer, upxMD5: 904ea4ab8e83c9da097992e3074f7c30SHA1: 5c2aba18286c7b375e7087a44ea1326b2960036eANALYSIS DATE: 2022-11-26T00:14:20ZTTPS: T1012, T1120, T1082, T1112, T1176, T1060,...

Malware Analysis – djvu – e054f0c83023d1414143cb43e0e99ced

November 26, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: e054f0c83023d1414143cb43e0e99cedSHA1: 570d8ec32ce32407bc2a3b338b250d1f181182beANALYSIS DATE: 2022-11-26T09:37:02ZTTPS:...

Malware Analysis – persistence – 9aa95b27ff879d63f093759239086a50

November 26, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 9aa95b27ff879d63f093759239086a50SHA1: 889325176e8c14cf31f0d940abcb0c027af5072bANALYSIS DATE: 2022-11-26T00:21:55ZTTPS: T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 5827e0e1155bfeb117d59500880594ee

November 26, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 5827e0e1155bfeb117d59500880594eeSHA1: 683a2b4b03efe5beb7c0988123caf91f085ac759ANALYSIS DATE: 2022-11-26T09:37:45ZTTPS: T1060, T1112, T1005, T1081,...

Malware Analysis – discovery – 258df8a124d09fe96fcc237521c23ad8

November 26, 2022

Score: 9 MALWARE FAMILY: discoveryTAGS:discovery, exploit, persistence, upxMD5: 258df8a124d09fe96fcc237521c23ad8SHA1: 68a593b1faa78e2bba81732ed22da02e57291a23ANALYSIS DATE: 2022-11-26T00:24:08ZTTPS: T1060, T1112, T1082, T1222, T1012 ScoreMeaningExample10Known badA malware...

Cobalt Stike Beacon Detected – 146[.]70[.]147[.]29:443

November 26, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 87[.]120[.]254[.]95:80

November 26, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 120[.]55[.]77[.]27:443

November 26, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – 9100c922c30fa97bfd28bca79b05370f

November 26, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 9100c922c30fa97bfd28bca79b05370fSHA1: 631d68e1a96c9d45d27991c6f913375cd44d44bbANALYSIS DATE: 2022-11-26T10:07:02ZTTPS: T1005, T1081, T1012, T1060,...

Malware Analysis – – f41e454bd8f94376f0fe048abfe9b593

November 26, 2022

Score: 7 MALWARE FAMILY: TAGS:MD5: f41e454bd8f94376f0fe048abfe9b593SHA1: f8ad417688ce8954e11052c681fc10db203f932dANALYSIS DATE: 2022-11-26T10:32:04ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – 3c30d848c6bfd14d392dc1f896bdd2bd

November 26, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 3c30d848c6bfd14d392dc1f896bdd2bdSHA1: 01652e13cacdd2a27fddb724567287a8a5f9ffe0ANALYSIS DATE: 2022-11-26T10:22:57ZTTPS:...

Malware Analysis – amadey – e9f6fccda69077cfc6d220e0f665264c

November 26, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, collection, spyware, stealer, trojanMD5: e9f6fccda69077cfc6d220e0f665264cSHA1: 87be46433353c2f746df5f84f14fd21bcd50e55bANALYSIS DATE: 2022-11-26T10:01:05ZTTPS: T1082, T1053, T1005, T1081, T1114 ScoreMeaningExample10Known badA...

Cobalt Stike Beacon Detected – 1[.]12[.]55[.]126:1111

November 26, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 117[.]50[.]190[.]207:443

November 26, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 38[.]54[.]32[.]75:443

November 26, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 194[.]135[.]24[.]250:80

November 26, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

sl-abstract-screens-big-data-resized-990x400-1

Who tracked internet users in 2021–2022

November 26, 2022

Every time you go online, someone is watching over you. The services you use, the websites you visit, the apps...

Royal Ransomware Victim: Law Firm of Friedman + Bartoumian

November 26, 2022

RoyalRansomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the...

Malware Analysis – infostealer – 04ed7aab42570d8fadd7c198758be716

November 26, 2022

Score: 7 MALWARE FAMILY: infostealerTAGS:infostealer, ransomwareMD5: 04ed7aab42570d8fadd7c198758be716SHA1: 070609fcdabd223d8359458014aa247a4c0b9e53ANALYSIS DATE: 2022-11-25T19:03:18ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – infostealer – 1947bef533b3cad7c7ffa5f2351d3b2e

November 26, 2022

Score: 7 MALWARE FAMILY: infostealerTAGS:infostealer, ransomwareMD5: 1947bef533b3cad7c7ffa5f2351d3b2eSHA1: 770e6783b100196f463d6467dbdb015b36f27c5fANALYSIS DATE: 2022-11-25T18:57:32ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – infostealer – 9b3ba6776b2aa31472e7894ea3b5b2b5

November 26, 2022

Score: 7 MALWARE FAMILY: infostealerTAGS:infostealer, ransomwareMD5: 9b3ba6776b2aa31472e7894ea3b5b2b5SHA1: 578f4c9bee0f2f9f8fd4cbe3a394bc0cd26dbcb5ANALYSIS DATE: 2022-11-25T18:58:53ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – ransomware – 5f01792a9084e926ffd9004d90dfa3c4

November 26, 2022

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 5f01792a9084e926ffd9004d90dfa3c4SHA1: c2f34ffd3ffe6a19bd348b5e5cb85848db3dee7bANALYSIS DATE: 2022-11-25T18:54:35ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – 76c1070a673007b161f938eb1b48f3e0

November 26, 2022

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 76c1070a673007b161f938eb1b48f3e0SHA1: dbbacac215dc0d3f4c119674ceb4689799db2b42ANALYSIS DATE: 2022-11-25T19:17:15ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – evasion – 7ffc2f56be26eb249106c3456e0d88b6

November 26, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 7ffc2f56be26eb249106c3456e0d88b6SHA1: aa7d64b328d255ffc09e03493d1995396a30d0d9ANALYSIS DATE: 2022-11-25T19:11:21ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

threatintel

Malware Analysis – adware – 904ea4ab8e83c9da097992e3074f7c30

Malware Analysis – djvu – e054f0c83023d1414143cb43e0e99ced

Malware Analysis – persistence – 9aa95b27ff879d63f093759239086a50

Malware Analysis – djvu – 5827e0e1155bfeb117d59500880594ee

Malware Analysis – discovery – 258df8a124d09fe96fcc237521c23ad8

Cobalt Stike Beacon Detected – 146[.]70[.]147[.]29:443

Cobalt Stike Beacon Detected – 87[.]120[.]254[.]95:80

Cobalt Stike Beacon Detected – 120[.]55[.]77[.]27:443

Malware Analysis – djvu – 9100c922c30fa97bfd28bca79b05370f

Malware Analysis – – f41e454bd8f94376f0fe048abfe9b593

Malware Analysis – djvu – 3c30d848c6bfd14d392dc1f896bdd2bd

Malware Analysis – amadey – e9f6fccda69077cfc6d220e0f665264c

Cobalt Stike Beacon Detected – 1[.]12[.]55[.]126:1111

Cobalt Stike Beacon Detected – 117[.]50[.]190[.]207:443

Cobalt Stike Beacon Detected – 38[.]54[.]32[.]75:443

Cobalt Stike Beacon Detected – 194[.]135[.]24[.]250:80

Who tracked internet users in 2021–2022

Royal Ransomware Victim: Law Firm of Friedman + Bartoumian

Malware Analysis – infostealer – 04ed7aab42570d8fadd7c198758be716

Malware Analysis – infostealer – 1947bef533b3cad7c7ffa5f2351d3b2e

Malware Analysis – infostealer – 9b3ba6776b2aa31472e7894ea3b5b2b5

Malware Analysis – ransomware – 5f01792a9084e926ffd9004d90dfa3c4

Malware Analysis – ransomware – 76c1070a673007b161f938eb1b48f3e0

Malware Analysis – evasion – 7ffc2f56be26eb249106c3456e0d88b6

CVE Alert: CVE-2025-8579

CVE Alert: CVE-2025-8577

CVE Alert: CVE-2025-8580

CVE Alert: CVE-2025-8581

CVE Alert: CVE-2025-8578

You may have missed