threatintel

Malware Analysis – ransomware – 005c8975c5aeeeb883b178da8179478c

November 7, 2022

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 005c8975c5aeeeb883b178da8179478cSHA1: 1e2eb9855e058a1bfa1f8ec7caa56d2f260a8b35ANALYSIS DATE: 2022-11-07T05:24:35ZTTPS: T1491, T1112, T1082, T1012 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – ransomware – 2dc0dad1939edfdf997525bac94cdc21

November 7, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 2dc0dad1939edfdf997525bac94cdc21SHA1: e3e398a3eed8ffc0266dbe37c396909eee150cf4ANALYSIS DATE: 2022-11-07T05:05:04ZTTPS: T1012, T1120, T1082, T1107, T1490, T1112 ScoreMeaningExample10Known badA malware family was...

BlackCat/ALPHV Ransomware Victim: HUSSEY GAY BELL

November 7, 2022

BlackCat / ALPHV Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the...

Cobalt Stike Beacon Detected – 109[.]206[.]241[.]178:443

November 7, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 120[.]48[.]89[.]148:80

November 7, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 176[.]113[.]115[.]3:8080

November 7, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – 3993a37920a429f540d76263b393e202

November 7, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, family:vidar, botnet:517, botnet:google2, botnet:mario23_10, botnet:slovarik1btc, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer,...

Malware Analysis – persistence – a571141acbb53620cf110300c9d91479

November 7, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: a571141acbb53620cf110300c9d91479SHA1: f7dd5af916b7f90da4fcbaaeac53e13afd15ced7ANALYSIS DATE: 2022-11-06T21:39:24ZTTPS: T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ransomware – 58abef933e19ccd34e3ff2578f20d356

November 7, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 58abef933e19ccd34e3ff2578f20d356SHA1: 150558be301b5732c8d621257f969316ea6e5792ANALYSIS DATE: 2022-11-06T21:06:14ZTTPS: T1005, T1081, T1012, T1082 ScoreMeaningExample10Known badA malware family was...

Cobalt Stike Beacon Detected – 150[.]158[.]212[.]148:7443

November 7, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 18[.]208[.]157[.]91:80

November 7, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 101[.]34[.]117[.]22:2083

November 7, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 154[.]209[.]71[.]98:443

November 7, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – persistence – dc5c71aef24a5899f63c3f9c15993697

November 7, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: dc5c71aef24a5899f63c3f9c15993697SHA1: 2905771c826c7d9f183c73d6e97c990c022f1ef8ANALYSIS DATE: 2022-11-06T21:53:28ZTTPS: T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 650536755ab3775ecd90c0a29f7e0704

November 7, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 650536755ab3775ecd90c0a29f7e0704SHA1: 86197295e51cf34a650aa6e0e168eb1cd5cdc1c8ANALYSIS DATE: 2022-11-06T21:52:09ZTTPS: T1005, T1081, T1060, T1112,...

Malware Analysis – djvu – b2341e87cc2f11dbe53b6fb5902f75e3

November 7, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, family:vidar, botnet:517, botnet:mario23_10, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5: b2341e87cc2f11dbe53b6fb5902f75e3SHA1:...

Malware Analysis – persistence – 7a4a85bbf4526153d36d3397c1bbc013

November 7, 2022

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 7a4a85bbf4526153d36d3397c1bbc013SHA1: 1f599499aedf2b0c7f1d588c15cf7dce45dbd992ANALYSIS DATE: 2022-11-06T22:33:42ZTTPS: T1082, T1012, T1120, T1060, T1112 ScoreMeaningExample10Known badA malware family was...

Cobalt Stike Beacon Detected – 5[.]44[.]42[.]51:80

November 7, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 150[.]242[.]219[.]35:443

November 7, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 5[.]44[.]42[.]20:443

November 7, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 81[.]68[.]155[.]184:8080

November 7, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – amadey – 65957edc33a7f7300446430c58d4f198

November 7, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:redline, family:smokeloader, family:vidar, botnet:517, botnet:google2, botnet:mario23_10, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer,...

Malware Analysis – djvu – e26e9679c6496d64b73069b417019374

November 7, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: e26e9679c6496d64b73069b417019374SHA1: 99638604cd08e9f520e4dd2d5bde1a51f3201e30ANALYSIS DATE: 2022-11-06T23:50:31ZTTPS: T1060, T1112, T1005, T1081,...

Malware Analysis – amadey – be3e3d3a8c802fb640843455f08a5ad8

November 7, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:redline, family:smokeloader, family:vidar, botnet:517, botnet:google2, botnet:mario23_10, botnet:slovarik1btc, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware,...

threatintel

Malware Analysis – ransomware – 005c8975c5aeeeb883b178da8179478c

Malware Analysis – ransomware – 2dc0dad1939edfdf997525bac94cdc21

BlackCat/ALPHV Ransomware Victim: HUSSEY GAY BELL

Cobalt Stike Beacon Detected – 109[.]206[.]241[.]178:443

Cobalt Stike Beacon Detected – 120[.]48[.]89[.]148:80

Cobalt Stike Beacon Detected – 176[.]113[.]115[.]3:8080

Malware Analysis – djvu – 3993a37920a429f540d76263b393e202

Malware Analysis – persistence – a571141acbb53620cf110300c9d91479

Malware Analysis – ransomware – 58abef933e19ccd34e3ff2578f20d356

Cobalt Stike Beacon Detected – 150[.]158[.]212[.]148:7443

Cobalt Stike Beacon Detected – 18[.]208[.]157[.]91:80

Cobalt Stike Beacon Detected – 101[.]34[.]117[.]22:2083

Cobalt Stike Beacon Detected – 154[.]209[.]71[.]98:443

Malware Analysis – persistence – dc5c71aef24a5899f63c3f9c15993697

Malware Analysis – djvu – 650536755ab3775ecd90c0a29f7e0704

Malware Analysis – djvu – b2341e87cc2f11dbe53b6fb5902f75e3

Malware Analysis – persistence – 7a4a85bbf4526153d36d3397c1bbc013

Cobalt Stike Beacon Detected – 5[.]44[.]42[.]51:80

Cobalt Stike Beacon Detected – 150[.]242[.]219[.]35:443

Cobalt Stike Beacon Detected – 5[.]44[.]42[.]20:443

Cobalt Stike Beacon Detected – 81[.]68[.]155[.]184:8080

Malware Analysis – amadey – 65957edc33a7f7300446430c58d4f198

Malware Analysis – djvu – e26e9679c6496d64b73069b417019374

Malware Analysis – amadey – be3e3d3a8c802fb640843455f08a5ad8

CVE Alert: CVE-2024-51473

CVE Alert: CVE-2024-42655

CVE Alert: CVE-2025-36071

CVE Alert: CVE-2024-52894

CVE Alert: CVE-2024-49828

You may have missed