threatintel

Malware Analysis – evasion – 5c45fe68c9deb91837db542bc8187bf7

November 29, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 5c45fe68c9deb91837db542bc8187bf7SHA1: 27eb61a2a96f2f3b9deb60370837d69776b84957ANALYSIS DATE: 2022-11-27T22:27:48ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Royal Ransomware Victim: Cates Control Systems

November 29, 2022

RoyalRansomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the...

Malware Analysis – evasion – 8b70746a13c1ee8ca07ebf9c06a0a8f3

November 29, 2022

Score: 8 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 8b70746a13c1ee8ca07ebf9c06a0a8f3SHA1: 8f6f6426a2acb4affb64ba636937efbcc670480aANALYSIS DATE: 2022-11-27T22:33:12ZTTPS: T1082, T1112, T1491 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – evasion – 71b724e61b63bfcc364b9950428a0721

November 29, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 71b724e61b63bfcc364b9950428a0721SHA1: 58655008efa896251cef645b67d82fe4b1cf3282ANALYSIS DATE: 2022-11-27T22:30:27ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – ransomware – c379b276550eb406c4c294ddb77baae4

November 29, 2022

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: c379b276550eb406c4c294ddb77baae4SHA1: d45e082f566ba81d7bc06fadca23136527c944dcANALYSIS DATE: 2022-11-27T22:34:40ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – evasion – 1b038e5617f685a71e6100071c469d30

November 29, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 1b038e5617f685a71e6100071c469d30SHA1: 308c751f9ac5d628f17be7fe74ef69944ac412f2ANALYSIS DATE: 2022-11-27T22:45:28ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – ransomware – 9995dffe2ee432e7135b37c93ef0661f

November 29, 2022

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 9995dffe2ee432e7135b37c93ef0661fSHA1: 726be2ace4a8677f4044c9f9125cf674eb12d0fcANALYSIS DATE: 2022-11-27T22:47:27ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – fc0956357b92f4c0db8817ccec0587cd

November 29, 2022

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: fc0956357b92f4c0db8817ccec0587cdSHA1: b3ced3aa100ab5ffb86ecc003bafb479e8073482ANALYSIS DATE: 2022-11-27T22:48:02ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – discovery – 291c6983919cf96defb04dc705d71b80

November 29, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploitMD5: 291c6983919cf96defb04dc705d71b80SHA1: ecaef7540497fadef77d80542a7633e2e7422bb8ANALYSIS DATE: 2022-11-27T22:50:28ZTTPS: T1082, T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – ransomware – 58db33d73a9407d09b03bb649d41069a

November 29, 2022

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 58db33d73a9407d09b03bb649d41069aSHA1: 897a0a7878a9a573ed52fa5c7546a9f068151944ANALYSIS DATE: 2022-11-27T22:55:35ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – amadey – f7a4cd5f0ccd2170beaff3d99e75f86d

November 29, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: f7a4cd5f0ccd2170beaff3d99e75f86dSHA1: 2859320404113b17455db1ede06390cb2fdd249fANALYSIS DATE:...

Malware Analysis – – 057e5fa8d05a2106572cfab80687b0b5

November 29, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: 057e5fa8d05a2106572cfab80687b0b5SHA1: 853d6ac9cdd629b38e0312a008dafceb1f674a49ANALYSIS DATE: 2022-11-28T22:11:39ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – amadey – 6771e329be1dc02ec4868a92ae48c395

November 29, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:redline, family:smokeloader, family:vidar, botnet:517, botnet:pops, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5:...

Malware Analysis – ransomware – 116f1068d1213b7ed910ad0eccb37a27

November 29, 2022

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 116f1068d1213b7ed910ad0eccb37a27SHA1: d25a07e3fe55f0d90037aad8406eba017ca5d180ANALYSIS DATE: 2022-11-27T23:01:19ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Cobalt Stike Beacon Detected – 47[.]106[.]91[.]17:9999

November 29, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 43[.]143[.]136[.]106:8001

November 29, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 175[.]178[.]243[.]43:80

November 29, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – 55ca818117630f3d7a6a7d342ba4709a

November 29, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 55ca818117630f3d7a6a7d342ba4709aSHA1: 218cef30a801952ff782ca50e16990a91a4fea0aANALYSIS DATE: 2022-11-28T23:42:41ZTTPS: T1060, T1112, T1053, T1222,...

Malware Analysis – chaos – e654d76dadfd3cefd9052a116afd0e00

November 29, 2022

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, family:satana, evasion, ransomware, spyware, stealerMD5: e654d76dadfd3cefd9052a116afd0e00SHA1: 0774c3f2cdf2ef9760d1cacaeb9464e6f59cf745ANALYSIS DATE: 2022-11-28T23:49:53ZTTPS: T1059, T1107, T1490, T1005, T1081, T1082,...

Malware Analysis – amadey – ed825538b098836508f416d290fca2cd

November 29, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, backdoor, ransomware, trojanMD5: ed825538b098836508f416d290fca2cdSHA1: 526de1fc99079b354cc88ae4f0edc7af1d4f3345ANALYSIS DATE: 2022-11-28T23:03:47ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – persistence – 74161da72b92f3dc29efa72b75dcf86c

November 29, 2022

Score: 8 MALWARE FAMILY: persistenceTAGS:persistence, upxMD5: 74161da72b92f3dc29efa72b75dcf86cSHA1: 8490c1331b1c40ce986306d5dda51670f93fd78cANALYSIS DATE: 2022-11-28T23:44:23ZTTPS: T1082, T1112, T1060 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

threatintel

Malware Analysis – evasion – 5c45fe68c9deb91837db542bc8187bf7

Royal Ransomware Victim: Cates Control Systems

Malware Analysis – evasion – 8b70746a13c1ee8ca07ebf9c06a0a8f3

Malware Analysis – evasion – 71b724e61b63bfcc364b9950428a0721

Malware Analysis – ransomware – c379b276550eb406c4c294ddb77baae4

Malware Analysis – evasion – 1b038e5617f685a71e6100071c469d30

Malware Analysis – ransomware – 9995dffe2ee432e7135b37c93ef0661f

Malware Analysis – ransomware – fc0956357b92f4c0db8817ccec0587cd

Malware Analysis – discovery – 291c6983919cf96defb04dc705d71b80

Malware Analysis – ransomware – 58db33d73a9407d09b03bb649d41069a

Malware Analysis – amadey – f7a4cd5f0ccd2170beaff3d99e75f86d

Malware Analysis – – 057e5fa8d05a2106572cfab80687b0b5

Malware Analysis – amadey – 6771e329be1dc02ec4868a92ae48c395

Malware Analysis – ransomware – 116f1068d1213b7ed910ad0eccb37a27

Cobalt Stike Beacon Detected – 47[.]106[.]91[.]17:9999

Cobalt Stike Beacon Detected – 43[.]143[.]136[.]106:8001

Cobalt Stike Beacon Detected – 175[.]178[.]243[.]43:80

Malware Analysis – djvu – 55ca818117630f3d7a6a7d342ba4709a

Malware Analysis – chaos – e654d76dadfd3cefd9052a116afd0e00

Malware Analysis – amadey – ed825538b098836508f416d290fca2cd

Malware Analysis – persistence – 74161da72b92f3dc29efa72b75dcf86c

Cobalt Stike Beacon Detected – 37[.]72[.]175[.]30:8443

Cobalt Stike Beacon Detected – 43[.]139[.]129[.]211:4433

Cobalt Stike Beacon Detected – 13[.]212[.]194[.]232:444

CVE Alert: CVE-2025-8411 – Dokuzsoft Technology – E-Commerce Web Design Product

CVE Alert: CVE-2025-9216 – kodezen – StoreEngine – Powerful WordPress eCommerce Plugin for Payments, Memberships, Affiliates, Sales & More

CVE Alert: CVE-2025-10058 – smackcoders – WP Import – Ultimate CSV XML Importer for WordPress

CVE Alert: CVE-2025-10057 – smackcoders – WP Import – Ultimate CSV XML Importer for WordPress

CVE Alert: CVE-2025-10143 – catchthemes – Catch Dark Mode

You may have missed