threatintel

Malware Analysis – evasion – 50448dd991e3a795303903da1a313e97

December 28, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 50448dd991e3a795303903da1a313e97SHA1: 8bc29df5fef20df7d8ada903aa6a8efba03d7c9eANALYSIS DATE: 2022-12-27T22:34:03ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – djvu – 8cd13cde3b9cad160fe35cd3f90450b6

December 28, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 8cd13cde3b9cad160fe35cd3f90450b6SHA1: 295ef7114c70dc757b3e77a3528ca0ce76216720ANALYSIS DATE: 2022-12-27T22:19:38ZTTPS: T1005, T1081, T1012, T1082, T1053, T1060,...

Malware Analysis – evasion – a4824e4321a0510726acc06230b22078

December 28, 2022

Score: 6 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: a4824e4321a0510726acc06230b22078SHA1: 3e5077ccb1ce88fcb496b82e15318382191a9747ANALYSIS DATE: 2022-12-27T22:12:02ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – phobos – b2f083ee365141030c49ddffc325f6be

December 27, 2022

Score: 10 MALWARE FAMILY: phobosTAGS:family:phobos, evasion, persistence, ransomware, spyware, stealerMD5: b2f083ee365141030c49ddffc325f6beSHA1: f1091be7e566d068403a87b0e7ed4b959c952c8eANALYSIS DATE: 2022-12-27T15:34:01ZTTPS: T1490, T1059, T1107, T1005, T1081, T1112,...

Royal Ransomware Victim: Inforlandia

December 27, 2022

RoyalRansomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the...

Royal Ransomware Victim: HELMA Eigenheimbau AG

December 27, 2022

RoyalRansomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the...

Royal Ransomware Victim: Grupo Ibiapina Ltda

December 27, 2022

RoyalRansomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the...

Royal Ransomware Victim: INTRADO

December 27, 2022

RoyalRansomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the...

Malware Analysis – evasion – 58bfb77a4d2a255dbb215eacddc00550

December 27, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 58bfb77a4d2a255dbb215eacddc00550SHA1: e0fd8e025ed77e78453754a2c4a5775cfceee8d3ANALYSIS DATE: 2022-12-27T15:48:02ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – evasion – 3b2f57aa973b07e8404a4eef7f7cf5e1

December 27, 2022

Score: 6 MALWARE FAMILY: evasionTAGS:evasionMD5: 3b2f57aa973b07e8404a4eef7f7cf5e1SHA1: 6da8b70124e75c5e33b7ffe0a2ffaefdb8e3cad1ANALYSIS DATE: 2022-12-27T16:08:03ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – ec879183dee40f1831338a7a80a25c5e

December 27, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: ec879183dee40f1831338a7a80a25c5eSHA1: 0a095bd1188716fe1c19640dc2aa7f971b689995ANALYSIS DATE: 2022-12-27T15:54:22ZTTPS: T1053, T1005, T1081, T1012, T1082, T1060,...

Malware Analysis – persistence – fb8898216510c6af50a7aa81e23c35cb

December 27, 2022

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealer, upxMD5: fb8898216510c6af50a7aa81e23c35cbSHA1: 41d42f120ba66bc69efb3a2e1af47e197242f3a2ANALYSIS DATE: 2022-12-27T15:58:42ZTTPS: T1018, T1060, T1112, T1005, T1081 ScoreMeaningExample10Known badA...

Malware Analysis – ransomware – 1f61c4e1e363f44094432045b2251497

December 27, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 1f61c4e1e363f44094432045b2251497SHA1: 7edc1d692db2773ba66b82ea2c172d08dc482e87ANALYSIS DATE: 2022-12-27T16:44:54ZTTPS: T1012, T1120, T1082, T1005, T1081 ScoreMeaningExample10Known badA malware family...

Malware Analysis – djvu – 05784bfeb8c4ecb901759c534bcf76f1

December 27, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 05784bfeb8c4ecb901759c534bcf76f1SHA1: aad54cf506c6ea8515c51f7afe154a4f0c298c00ANALYSIS DATE: 2022-12-27T17:12:33ZTTPS: T1060, T1112, T1082, T1053, T1012, T1005,...

Malware Analysis – evasion – d226117dc0f123c745efcc800490cba5

December 27, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: d226117dc0f123c745efcc800490cba5SHA1: d303ba484dbb987c607dd88c75e59f937982ce08ANALYSIS DATE: 2022-12-27T16:32:02ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – djvu – 79548c48bb7206ecfdde7186eff2838f

December 27, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 79548c48bb7206ecfdde7186eff2838fSHA1: 3a4e5c1b44ee18f6c3de578c5acbdb396a105e3dANALYSIS DATE: 2022-12-27T17:04:57ZTTPS: T1053, T1005, T1081, T1012, T1222, T1060,...

Malware Analysis – discovery – 46e1bdd9a828684370e0f3092e5a703f

December 27, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, ransomwareMD5: 46e1bdd9a828684370e0f3092e5a703fSHA1: 95e27dba9aeb537a7121e792547caa022f9aa80cANALYSIS DATE: 2022-12-27T17:23:53ZTTPS: T1057, T1012, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – ransomware – f541b62a0468037217d3019235ecebe5

December 27, 2022

Score: 5 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: f541b62a0468037217d3019235ecebe5SHA1: edb734f77cce742cc40094936f6b353b6c3a06baANALYSIS DATE: 2022-12-27T17:18:02ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – – 791cfbe9555ac5e4dbec97017cf730eb

December 27, 2022

Score: 8 MALWARE FAMILY: TAGS:MD5: 791cfbe9555ac5e4dbec97017cf730ebSHA1: 0f0d60ee9ffa04947cd04ba7d71be34791265a47ANALYSIS DATE: 2022-12-27T17:20:02ZTTPS: T1082, T1012 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – evasion – b7371f8c3225b925d83661976e14d1be

December 27, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: b7371f8c3225b925d83661976e14d1beSHA1: 0435b56cf0e18d2d0f9fc77f6220562d04a3df96ANALYSIS DATE: 2022-12-27T17:19:46ZTTPS: T1102 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – djvu – 6513626f59c47a89ba4271b478b5034d

December 27, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 6513626f59c47a89ba4271b478b5034dSHA1: 22d8570da5321ba2f6d6eb12f1c23a0878dfc593ANALYSIS DATE: 2022-12-27T17:50:51ZTTPS: T1060, T1112, T1082, T1053, T1005, T1081,...

Malware Analysis – discovery – b91868decda0959a07f20d69a800d786

December 27, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, ransomwareMD5: b91868decda0959a07f20d69a800d786SHA1: 71864ca3a0805cb4f937e5a597cebd7563557890ANALYSIS DATE: 2022-12-27T17:30:48ZTTPS: T1082, T1012 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – evasion – 876bb144464baf4cfc0a89c015e61e8f

December 27, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 876bb144464baf4cfc0a89c015e61e8fSHA1: 99437ed2a0c3c2d7b6ca27c30ee6b3ae4c8e6f24ANALYSIS DATE: 2022-12-27T17:32:03ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – ransomware – 6f84511085f94b11046f1cea1966e4f6

December 27, 2022

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 6f84511085f94b11046f1cea1966e4f6SHA1: aab2e0cf75ad96a70b64b5035c213c91d24e7cf3ANALYSIS DATE: 2022-12-27T17:44:02ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

threatintel

Malware Analysis – evasion – 50448dd991e3a795303903da1a313e97

Malware Analysis – djvu – 8cd13cde3b9cad160fe35cd3f90450b6

Malware Analysis – evasion – a4824e4321a0510726acc06230b22078

Malware Analysis – phobos – b2f083ee365141030c49ddffc325f6be

Royal Ransomware Victim: Inforlandia

Royal Ransomware Victim: HELMA Eigenheimbau AG

Royal Ransomware Victim: Grupo Ibiapina Ltda

Royal Ransomware Victim: INTRADO

Malware Analysis – evasion – 58bfb77a4d2a255dbb215eacddc00550

Malware Analysis – evasion – 3b2f57aa973b07e8404a4eef7f7cf5e1

Malware Analysis – djvu – ec879183dee40f1831338a7a80a25c5e

Malware Analysis – persistence – fb8898216510c6af50a7aa81e23c35cb

Malware Analysis – ransomware – 1f61c4e1e363f44094432045b2251497

Malware Analysis – djvu – 05784bfeb8c4ecb901759c534bcf76f1

Malware Analysis – evasion – d226117dc0f123c745efcc800490cba5

Malware Analysis – djvu – 79548c48bb7206ecfdde7186eff2838f

Malware Analysis – discovery – 46e1bdd9a828684370e0f3092e5a703f

Malware Analysis – ransomware – f541b62a0468037217d3019235ecebe5

Malware Analysis – – 791cfbe9555ac5e4dbec97017cf730eb

Malware Analysis – evasion – b7371f8c3225b925d83661976e14d1be

Malware Analysis – djvu – 6513626f59c47a89ba4271b478b5034d

Malware Analysis – discovery – b91868decda0959a07f20d69a800d786

Malware Analysis – evasion – 876bb144464baf4cfc0a89c015e61e8f

Malware Analysis – ransomware – 6f84511085f94b11046f1cea1966e4f6

[QILIN] – Ransomware Victim: Scouts Canada

[QILIN] – Ransomware Victim: JC Auto Accident Law Firm

[DRAGONFORCE] – Ransomware Victim: Ponzini S[.]p[.]A[.]

[MEDUSA] – Ransomware Victim: Simon Property Group

CVE Alert: CVE-2025-12399 – alexreservations – Alex Reservations: Smart Restaurant Booking

You may have missed