threatintel

Malware Analysis – djvu – a3dd84a411b7edddae84278455400dd5

January 29, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: a3dd84a411b7edddae84278455400dd5SHA1: 4e9ba9788414d152ae656adf75939d3724c4ec0eANALYSIS DATE: 2023-01-29T09:23:23ZTTPS: T1053, T1012, T1060, T1112,...

Malware Analysis – smokeloader – 84afdad4a70a6122c3f157100a197db7

January 29, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 84afdad4a70a6122c3f157100a197db7SHA1: 22afcb3520b8bfe314e7f505ccee14ae81f8e547ANALYSIS DATE: 2023-01-29T09:49:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – – fc50e05b611db89a9c7eb359e68ebc5f

January 29, 2023

Score: 10 MALWARE FAMILY: TAGS:MD5: fc50e05b611db89a9c7eb359e68ebc5fSHA1: 72e31f940f1214e1c36a34a69b53b0d07d4c61efANALYSIS DATE: 2023-01-29T09:34:19ZTTPS: T1012, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Cobalt Stike Beacon Detected – 47[.]244[.]167[.]171:4545

January 29, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – discovery – 4b51df4028f1d801c45f07daa07d9c90

January 29, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: 4b51df4028f1d801c45f07daa07d9c90SHA1: 0a46c206f4abd891bb67d9ebfd55d572aa0456d3ANALYSIS DATE: 2023-01-29T11:01:21ZTTPS: T1012, T1082, T1112, T1042, T1060 ScoreMeaningExample10Known badA malware family...

Malware Analysis – – 45f3f9b201644ddadf6204497c9adb49

January 29, 2023

Score: 3 MALWARE FAMILY: TAGS:MD5: 45f3f9b201644ddadf6204497c9adb49SHA1: 78a9c9c95fceaa63083eb466d013c16da9c07f4cANALYSIS DATE: 2023-01-29T09:54:56ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – f6d4d4b428393d0d8b55165c2a9076dd

January 29, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: f6d4d4b428393d0d8b55165c2a9076ddSHA1: 75a3f25169fd56e7932a5ddfc3ec7616558791f1ANALYSIS DATE: 2023-01-29T11:05:05ZTTPS: T1060, T1112, T1082, T1005,...

Malware Analysis – djvu – d16e82ba2c319750e888f763d98a3a8c

January 29, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:19, backdoor, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: d16e82ba2c319750e888f763d98a3a8cSHA1: f2be4e0a2b06c80db9f3320b7db1c8c15e80aa19ANALYSIS DATE: 2023-01-29T10:48:08ZTTPS:...

Cobalt Stike Beacon Detected – 109[.]172[.]45[.]28:443

January 29, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 54[.]188[.]58[.]32:443

January 29, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 3[.]29[.]24[.]212:8080

January 29, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – – bfe6ee8069f6e7c572382a97fd16d104

January 29, 2023

Score: 3 MALWARE FAMILY: TAGS:MD5: bfe6ee8069f6e7c572382a97fd16d104SHA1: e017c8f52a53cd0374d7867af14e567b79d6cffdANALYSIS DATE: 2023-01-29T11:33:49ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – discovery – 360ef53ce1b09b03998bf2ab743f7dc7

January 29, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomware, spyware, stealerMD5: 360ef53ce1b09b03998bf2ab743f7dc7SHA1: 9166c3760b1d1cf9a395e344858e4e01158795bcANALYSIS DATE: 2023-01-29T11:09:44ZTTPS: T1060, T1012, T1005, T1081, T1082, T1059, T1102,...

Malware Analysis – smokeloader – da627411e7e85229355ed325520a7d4e

January 29, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: da627411e7e85229355ed325520a7d4eSHA1: 3a603f52b7285be51b1533815eecc67b0447af35ANALYSIS DATE: 2023-01-29T11:35:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Cobalt Stike Beacon Detected – 20[.]189[.]74[.]59:8443

January 29, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – spyware – 5e887fdac8a3cac0b047a737043789a8

January 29, 2023

Score: 7 MALWARE FAMILY: spywareTAGS:spyware, stealerMD5: 5e887fdac8a3cac0b047a737043789a8SHA1: 8c9745138d835b783278cb61170a7153bb003784ANALYSIS DATE: 2023-01-29T11:17:02ZTTPS: T1005, T1081 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

BreachForums Database Leak Alert: TSA NoFly List

January 29, 2023

BreachForums - Databreach discussion & leaks forum. NOTE: No files or stolen information are by RedPacket Security. Any legal issues...

BreachForums Database Leak Alert: demo[.]zeeroq[.]com

January 29, 2023

BreachForums - Databreach discussion & leaks forum. NOTE: No files or stolen information are by RedPacket Security. Any legal issues...

Vice Society Ransomware Victim: Seguros Equinoccial

January 29, 2023

Vice Society Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Malware Analysis – djvu – cce7765c14bdcec1e907d013a875be01

January 29, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: cce7765c14bdcec1e907d013a875be01SHA1: 776c2ab297b6a69ce27041b748413bd25133030eANALYSIS DATE: 2023-01-29T03:01:08ZTTPS: T1082, T1053, T1005, T1081,...

Malware Analysis – smokeloader – a36b584de10085f700f75c6f21620bd2

January 29, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: a36b584de10085f700f75c6f21620bd2SHA1: 8c8006245b3be3a36dfebeab999d8d01826cbe1cANALYSIS DATE: 2023-01-29T03:25:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – chaos – cc4c6842f8a31ee3ac6477b42d34acba

January 29, 2023

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, persistence, ransomware, spyware, stealerMD5: cc4c6842f8a31ee3ac6477b42d34acbaSHA1: ce6e9918189e9187143e0e012356bec98988c035ANALYSIS DATE: 2023-01-29T05:22:04ZTTPS: T1005, T1081, T1082, T1060, T1112 ScoreMeaningExample10Known badA...

Malware Analysis – djvu – 5b1d27c0cc55349def2cd69b3d33fdd9

January 29, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 5b1d27c0cc55349def2cd69b3d33fdd9SHA1: 20e54017c0112e97fdf95c1d46801a5b6c0e5c2cANALYSIS DATE: 2023-01-29T05:03:58ZTTPS: T1060, T1112, T1012, T1082,...

Malware Analysis – djvu – 376a3ccb90224d2ad5712bf04c0b9578

January 29, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, family:vidar, botnet:19, botnet:@2023@new, backdoor, discovery, infostealer, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: 376a3ccb90224d2ad5712bf04c0b9578SHA1:...

threatintel

Malware Analysis – djvu – a3dd84a411b7edddae84278455400dd5

Malware Analysis – smokeloader – 84afdad4a70a6122c3f157100a197db7

Malware Analysis – – fc50e05b611db89a9c7eb359e68ebc5f

Cobalt Stike Beacon Detected – 47[.]244[.]167[.]171:4545

Malware Analysis – discovery – 4b51df4028f1d801c45f07daa07d9c90

Malware Analysis – – 45f3f9b201644ddadf6204497c9adb49

Malware Analysis – djvu – f6d4d4b428393d0d8b55165c2a9076dd

Malware Analysis – djvu – d16e82ba2c319750e888f763d98a3a8c

Cobalt Stike Beacon Detected – 109[.]172[.]45[.]28:443

Cobalt Stike Beacon Detected – 54[.]188[.]58[.]32:443

Cobalt Stike Beacon Detected – 3[.]29[.]24[.]212:8080

Malware Analysis – – bfe6ee8069f6e7c572382a97fd16d104

Malware Analysis – discovery – 360ef53ce1b09b03998bf2ab743f7dc7

Malware Analysis – smokeloader – da627411e7e85229355ed325520a7d4e

Cobalt Stike Beacon Detected – 20[.]189[.]74[.]59:8443

Malware Analysis – spyware – 5e887fdac8a3cac0b047a737043789a8

BreachForums Database Leak Alert: TSA NoFly List

BreachForums Database Leak Alert: demo[.]zeeroq[.]com

Vice Society Ransomware Victim: Seguros Equinoccial

Malware Analysis – djvu – cce7765c14bdcec1e907d013a875be01

Malware Analysis – smokeloader – a36b584de10085f700f75c6f21620bd2

Malware Analysis – chaos – cc4c6842f8a31ee3ac6477b42d34acba

Malware Analysis – djvu – 5b1d27c0cc55349def2cd69b3d33fdd9

Malware Analysis – djvu – 376a3ccb90224d2ad5712bf04c0b9578

[RHYSIDA] – Ransomware Victim: LMHT Associates

[COINBASECARTEL] – Ransomware Victim: Propertyfinder / PropSpace CRM

[BEAST] – Ransomware Victim: Noroaco

[QILIN] – Ransomware Victim: Gullco International

CVE Alert: CVE-2025-12929 – SourceCodester – Survey Application System

You may have missed