threatintel

Malware Analysis – smokeloader – 0188b2bb7e59afd6100b75775561f073

January 29, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 0188b2bb7e59afd6100b75775561f073SHA1: c29f3865c7e5dcbc53535eec9906f992153c7227ANALYSIS DATE: 2023-01-29T04:16:02ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – chaos – 3fdd9b2402350844b482aa6076e18d22

January 29, 2023

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, evasion, ransomware, spyware, stealerMD5: 3fdd9b2402350844b482aa6076e18d22SHA1: 81034b4deb144ecdf21cb213e455a84ea319812cANALYSIS DATE: 2023-01-29T05:23:06ZTTPS: T1490, T1059, T1107, T1005, T1081, T1491, T1112,...

Malware Analysis – chaos – d80c38192b6a2eb32833de68de263c66

January 29, 2023

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, ransomwareMD5: d80c38192b6a2eb32833de68de263c66SHA1: c896d5f151481f5b4078f7ff67f3957abb9d97b8ANALYSIS DATE: 2023-01-29T05:23:03ZTTPS: T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – chaos – 99cc504910231308cd759c3c0b1a00ac

January 29, 2023

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, ransomwareMD5: 99cc504910231308cd759c3c0b1a00acSHA1: f884e5fcd3da589a0ee6036cb970e704cf511599ANALYSIS DATE: 2023-01-29T05:24:03ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – lockbit – 2525d5867b27f5ee3949880186c35ed7

January 29, 2023

Score: 10 MALWARE FAMILY: lockbitTAGS:family:lockbit, discovery, evasion, persistence, ransomwareMD5: 2525d5867b27f5ee3949880186c35ed7SHA1: 8fc6dd893d10eb3f4d7c06fda1d3e05a8c7ba8adANALYSIS DATE: 2023-01-29T05:23:02ZTTPS: T1490, T1046, T1082, T1107, T1060, T1112 ScoreMeaningExample10Known...

Vice Society Ransomware Victim: Seguros Equinoccial

January 29, 2023

Vice Society Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Vice Society Ransomware Victim: EGR

January 29, 2023

Vice Society Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Malware Analysis – ransomware – f1c1bb775bdefa793a8c6add1e10ab04

January 29, 2023

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: f1c1bb775bdefa793a8c6add1e10ab04SHA1: beacb14113de8642e32b0ebbc41e3eb4a6146548ANALYSIS DATE: 2023-01-28T21:06:36ZTTPS: T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Cobalt Stike Beacon Detected – 107[.]189[.]28[.]121:443

January 29, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 43[.]143[.]211[.]165:801

January 29, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – 82fddf18257b88127a7ec61e79a5208a

January 29, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 82fddf18257b88127a7ec61e79a5208aSHA1: 3733c9040487eb9b815da7d6b0fac4c1ff47c297ANALYSIS DATE: 2023-01-28T21:31:16ZTTPS: T1060, T1112, T1053, T1012,...

Malware Analysis – – 8d7df991938615da66351c6ff74b9d3d

January 29, 2023

Score: 1 MALWARE FAMILY: TAGS:MD5: 8d7df991938615da66351c6ff74b9d3dSHA1: c578d96f7a34816ba3b2cf2ace512e9d0da9e437ANALYSIS DATE: 2023-01-28T21:21:33ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – discovery – 93dc9f86cc0b02d0c89599099447ab86

January 29, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, ransomwareMD5: 93dc9f86cc0b02d0c89599099447ab86SHA1: 2536fa3fdbf311fa0bfb8e7a7c1851b547c65935ANALYSIS DATE: 2023-01-28T22:37:32ZTTPS: T1012, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – smokeloader – 292c2041324167f161a057a980b1e6d0

January 29, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 292c2041324167f161a057a980b1e6d0SHA1: 78fb694be9dc448909344f6aebd0e2f69b95b920ANALYSIS DATE: 2023-01-28T22:30:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – wannacry – c1f8ec1bc65359d192fcd18d7cffb958

January 29, 2023

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, persistence, ransomware, wormMD5: c1f8ec1bc65359d192fcd18d7cffb958SHA1: aa89fef9d4ec07191c2a0b034a1c3694d94cf4cfANALYSIS DATE: 2023-01-28T23:50:13ZTTPS: T1012, T1082, T1060, T1112, T1491, T1222, T1107,...

Malware Analysis – djvu – f2a5e61709415d155b3a251f5bae6a2f

January 29, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: f2a5e61709415d155b3a251f5bae6a2fSHA1: 52b259d18e24b11d0d9bd4e6378c52b59ec86a68ANALYSIS DATE: 2023-01-28T23:22:45ZTTPS: T1222, T1005, T1081, T1012,...

Malware Analysis – discovery – bfb5e25db4aa506dd821667fe22d8a0e

January 29, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, evasion, persistence, ransomwareMD5: bfb5e25db4aa506dd821667fe22d8a0eSHA1: ee722c8ed6130adb7790b7d943721d1fd1ae216aANALYSIS DATE: 2023-01-28T23:23:44ZTTPS: T1060, T1102, T1012, T1112, T1031, T1120, T1082, T1107,...

Malware Analysis – djvu – 970848bfcc1c80ef7334112696e02b2c

January 29, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:vidar, botnet:19, botnet:@2023@new, discovery, infostealer, persistence, ransomware, spyware, stealer, vmprotectMD5: 970848bfcc1c80ef7334112696e02b2cSHA1: 92ff514819f602d9bbd93757b096226e0661d277ANALYSIS DATE: 2023-01-28T23:13:38ZTTPS:...

LockBit 3.0 Ransomware Victim: ylresin[.]com

January 28, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the...

BlackCat/ALPHV Ransomware Victim: Westmont Hospitality Group

January 28, 2023

BlackCat / ALPHV Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the...

BlackCat/ALPHV Ransomware Victim: Ultrabulk

January 28, 2023

BlackCat / ALPHV Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the...

BlackCat/ALPHV Ransomware Victim: Portnoff Law Associates

January 28, 2023

BlackCat / ALPHV Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the...

Vice Society Ransomware Victim: EGR

January 28, 2023

Vice Society Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Malware Analysis – smokeloader – 033292eea92f116fd01a9543d0baac9d

January 28, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 033292eea92f116fd01a9543d0baac9dSHA1: bd40c4afe760682ef7e1c636220470668a815207ANALYSIS DATE: 2023-01-28T15:55:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

threatintel

Malware Analysis – smokeloader – 0188b2bb7e59afd6100b75775561f073

Malware Analysis – chaos – 3fdd9b2402350844b482aa6076e18d22

Malware Analysis – chaos – d80c38192b6a2eb32833de68de263c66

Malware Analysis – chaos – 99cc504910231308cd759c3c0b1a00ac

Malware Analysis – lockbit – 2525d5867b27f5ee3949880186c35ed7

Vice Society Ransomware Victim: Seguros Equinoccial

Vice Society Ransomware Victim: EGR

Malware Analysis – ransomware – f1c1bb775bdefa793a8c6add1e10ab04

Cobalt Stike Beacon Detected – 107[.]189[.]28[.]121:443

Cobalt Stike Beacon Detected – 43[.]143[.]211[.]165:801

Malware Analysis – djvu – 82fddf18257b88127a7ec61e79a5208a

Malware Analysis – – 8d7df991938615da66351c6ff74b9d3d

Malware Analysis – discovery – 93dc9f86cc0b02d0c89599099447ab86

Malware Analysis – smokeloader – 292c2041324167f161a057a980b1e6d0

Malware Analysis – wannacry – c1f8ec1bc65359d192fcd18d7cffb958

Malware Analysis – djvu – f2a5e61709415d155b3a251f5bae6a2f

Malware Analysis – discovery – bfb5e25db4aa506dd821667fe22d8a0e

Malware Analysis – djvu – 970848bfcc1c80ef7334112696e02b2c

LockBit 3.0 Ransomware Victim: ylresin[.]com

BlackCat/ALPHV Ransomware Victim: Westmont Hospitality Group

BlackCat/ALPHV Ransomware Victim: Ultrabulk

BlackCat/ALPHV Ransomware Victim: Portnoff Law Associates

Vice Society Ransomware Victim: EGR

Malware Analysis – smokeloader – 033292eea92f116fd01a9543d0baac9d

[RHYSIDA] – Ransomware Victim: LMHT Associates

[COINBASECARTEL] – Ransomware Victim: Propertyfinder / PropSpace CRM

[BEAST] – Ransomware Victim: Noroaco

[QILIN] – Ransomware Victim: Gullco International

CVE Alert: CVE-2025-12929 – SourceCodester – Survey Application System

You may have missed