threatintel

Malware Analysis – djvu – 9d26acad00bf04c06bc71a396f1a2993

November 26, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, backdoor, collection, discovery, persistence, ransomware, trojanMD5: 9d26acad00bf04c06bc71a396f1a2993SHA1: 6e48a13d04b581d31cec0f89d8b4211ed177d929ANALYSIS DATE: 2022-11-25T23:08:31ZTTPS: T1114, T1130, T1112, T1060,...

Malware Analysis – djvu – 544b2995c107dd6bb21b1eb32a883141

November 26, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 544b2995c107dd6bb21b1eb32a883141SHA1: 4bc9b0c6d8e1426bb499809b9107397d48dd22c1ANALYSIS DATE: 2022-11-25T23:33:58ZTTPS: T1012, T1060, T1112, T1222,...

LockBit 3.0 Ransomware Victim: byp-global[.]com

November 25, 2022

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the...

LockBit 3.0 Ransomware Victim: fiscosaudepe[.]com[.]br

November 25, 2022

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

LockBit 3.0 Ransomware Victim: macrotel[.]com[.]ar

November 25, 2022

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

LockBit 3.0 Ransomware Victim: carone[.]com[.]mx

November 25, 2022

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the...

LockBit 3.0 Ransomware Victim: will-b[.]jp

November 25, 2022

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

LockBit 3.0 Ransomware Victim: happmobi[.]com[.]br

November 25, 2022

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Malware Analysis – evasion – 1a2180b48353c1061d8d95731e285875

November 25, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 1a2180b48353c1061d8d95731e285875SHA1: 05eae57548163ac58ea12412917022c8b59422fdANALYSIS DATE: 2022-11-25T09:01:53ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – evasion – d8042bbb920220cca0279aec12c6b361

November 25, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: d8042bbb920220cca0279aec12c6b361SHA1: d1548814555b74bb6b875fc79478ca9db4bfa6a3ANALYSIS DATE: 2022-11-25T09:10:58ZTTPS: T1031, T1060, T1112, T1082, T1088, T1089, T1107, T1490,...

Malware Analysis – ransomware – 3690bb406e09de249faf54abf8e7c785

November 25, 2022

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 3690bb406e09de249faf54abf8e7c785SHA1: d4bcc442cef53b35394e665f823bcb371679ba54ANALYSIS DATE: 2022-11-25T09:06:03ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – banker – a9a693e712778a2b4585e36a1921d246

November 25, 2022

Score: 8 MALWARE FAMILY: bankerTAGS:banker, evasion, ransomwareMD5: a9a693e712778a2b4585e36a1921d246SHA1: 9d97e16d154fc0c8dddd0576526311ecbff7461cANALYSIS DATE: 2022-11-25T09:16:02ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – ransomware – f414edfd28b02d6a80f7549476e441da

November 25, 2022

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: f414edfd28b02d6a80f7549476e441daSHA1: af028d184599515b31c92fcc7ea87f19b6cee735ANALYSIS DATE: 2022-11-25T09:07:10ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – qulab – a3476e4532c77e8ee20ecabd1035d3fd

November 25, 2022

Score: 10 MALWARE FAMILY: qulabTAGS:family:qulab, discovery, evasion, ransomware, spyware, stealer, upxMD5: a3476e4532c77e8ee20ecabd1035d3fdSHA1: 15d58869b7ed04c16b3143ab1ee0e085056363bdANALYSIS DATE: 2022-11-25T09:20:31ZTTPS: T1158, T1082, T1005, T1081, T1012...

Malware Analysis – ransomware – f711366dc0ee0e2b3468867f58abbe15

November 25, 2022

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: f711366dc0ee0e2b3468867f58abbe15SHA1: 8ba469fe3e4614a3674209cecc54e5e9f4087bbeANALYSIS DATE: 2022-11-25T09:16:08ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – evasion – 1dc8b7140dee61b956b5afecd38df9c3

November 25, 2022

Score: 8 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 1dc8b7140dee61b956b5afecd38df9c3SHA1: e1c63236ec35ec81c0845618217a55bdd2349056ANALYSIS DATE: 2022-11-25T09:19:56ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – agent_smith – 8205837d1fe12e2488ebce5152f6f567

November 25, 2022

Score: 10 MALWARE FAMILY: agent_smithTAGS:family:agent_smith, adware, ransomwareMD5: 8205837d1fe12e2488ebce5152f6f567SHA1: 1246804eea6f68eb963751ae0118cc3b8f697611ANALYSIS DATE: 2022-11-25T09:20:16ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – agent_smith – 058f5a4037f42ee67766531988924c73

November 25, 2022

Score: 10 MALWARE FAMILY: agent_smithTAGS:family:agent_smith, adware, evasion, ransomwareMD5: 058f5a4037f42ee67766531988924c73SHA1: 9cd3a910fd8ef392748e964c98dad7dff59fa066ANALYSIS DATE: 2022-11-25T09:33:06ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – evasion – c052e847fbbcc286ba6cfe299d272876

November 25, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, ransomware, spyware, stealerMD5: c052e847fbbcc286ba6cfe299d272876SHA1: 5a67a3e94d41f5d76a714814dd780493ff98283aANALYSIS DATE: 2022-11-25T09:31:59ZTTPS: T1112, T1005, T1081, T1012, T1082, T1130, T1059, T1107,...

Malware Analysis – evasion – 2cec47e2b7aea7befe8c882becdbbee5

November 25, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 2cec47e2b7aea7befe8c882becdbbee5SHA1: a977002faaff96f3d39920e30a0cd5d030d8fa26ANALYSIS DATE: 2022-11-25T09:23:53ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – ransomware – 2df4253f3810fe295b4f37897f249792

November 25, 2022

Score: 5 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 2df4253f3810fe295b4f37897f249792SHA1: 15eeedbea75b2b5eeea07c71d827ca9d72f078fdANALYSIS DATE: 2022-11-25T09:22:04ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – 7acc9328af4bc6e969fc8d4a4ae7fd02

November 25, 2022

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 7acc9328af4bc6e969fc8d4a4ae7fd02SHA1: 7aac9d7f950afb0acbada6b480040a8acc39340aANALYSIS DATE: 2022-11-25T09:38:14ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ryuk – b160ba8945e6d1d8612da6f1a7409621

November 25, 2022

Score: 10 MALWARE FAMILY: ryukTAGS:family:ryuk, dave, discovery, ransomwareMD5: b160ba8945e6d1d8612da6f1a7409621SHA1: 5e59d635511f9f3e9abadf2d8040f7383af41716ANALYSIS DATE: 2022-11-25T09:33:31ZTTPS: T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – ransomware – c8cd5664518678ad81a7b54850826e27

November 25, 2022

Score: 5 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: c8cd5664518678ad81a7b54850826e27SHA1: 9457da87080218fca37b6719a9501339f6bc3b7fANALYSIS DATE: 2022-11-25T09:37:32ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

threatintel

Malware Analysis – djvu – 9d26acad00bf04c06bc71a396f1a2993

Malware Analysis – djvu – 544b2995c107dd6bb21b1eb32a883141

LockBit 3.0 Ransomware Victim: byp-global[.]com

LockBit 3.0 Ransomware Victim: fiscosaudepe[.]com[.]br

LockBit 3.0 Ransomware Victim: macrotel[.]com[.]ar

LockBit 3.0 Ransomware Victim: carone[.]com[.]mx

LockBit 3.0 Ransomware Victim: will-b[.]jp

LockBit 3.0 Ransomware Victim: happmobi[.]com[.]br

Malware Analysis – evasion – 1a2180b48353c1061d8d95731e285875

Malware Analysis – evasion – d8042bbb920220cca0279aec12c6b361

Malware Analysis – ransomware – 3690bb406e09de249faf54abf8e7c785

Malware Analysis – banker – a9a693e712778a2b4585e36a1921d246

Malware Analysis – ransomware – f414edfd28b02d6a80f7549476e441da

Malware Analysis – qulab – a3476e4532c77e8ee20ecabd1035d3fd

Malware Analysis – ransomware – f711366dc0ee0e2b3468867f58abbe15

Malware Analysis – evasion – 1dc8b7140dee61b956b5afecd38df9c3

Malware Analysis – agent_smith – 8205837d1fe12e2488ebce5152f6f567

Malware Analysis – agent_smith – 058f5a4037f42ee67766531988924c73

Malware Analysis – evasion – c052e847fbbcc286ba6cfe299d272876

Malware Analysis – evasion – 2cec47e2b7aea7befe8c882becdbbee5

Malware Analysis – ransomware – 2df4253f3810fe295b4f37897f249792

Malware Analysis – ransomware – 7acc9328af4bc6e969fc8d4a4ae7fd02

Malware Analysis – ryuk – b160ba8945e6d1d8612da6f1a7409621

Malware Analysis – ransomware – c8cd5664518678ad81a7b54850826e27

US-CERT Vulnerability Summary for the Week of September 8, 2025

HackerOne Bug Bounty Disclosure: stack-buffer-overflow-in-curl-cookie-parsing-leads-to-rce-batuhanilgarr

BugCrowd Bug Bounty Disclosure: P3 – Publicly Editable Google Docs Linked from NASA SnowEx PPT –

BugCrowd Bug Bounty Disclosure: P3 – Details of the collaboration between NASA and Inmarsat Government and the type of contract –

Apple Products Multiple Vulnerabilities

You may have missed