threatintel

Malware Analysis – djvu – d74a0dc62986de2c0dc1386a0f27df7c

December 19, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: d74a0dc62986de2c0dc1386a0f27df7cSHA1: cdd0b78d4efa72029e1e6a5f8273904c1ba55fc6ANALYSIS DATE: 2022-12-19T05:32:27ZTTPS: T1060, T1112, T1012, T1082, T1005, T1081,...

Malware Analysis – djvu – 4d166f22b6002cc5de2e127f9896c8ef

December 19, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 4d166f22b6002cc5de2e127f9896c8efSHA1: 6008c5993a49782ef49ba03a8c4cd8aa9f793962ANALYSIS DATE: 2022-12-18T21:35:26ZTTPS: T1053, T1005, T1081, T1012, T1082, T1060,...

Malware Analysis – djvu – 1a53998a5d3e71f0ccdfe220c8646fe1

December 19, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 1a53998a5d3e71f0ccdfe220c8646fe1SHA1: 670c135cb9c0c1e96cf643ffff145bac9d760056ANALYSIS DATE: 2022-12-18T21:41:19ZTTPS: T1005, T1081, T1012, T1082, T1060, T1112,...

Cobalt Stike Beacon Detected – 179[.]43[.]142[.]47:8443

December 19, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 143[.]198[.]243[.]87:443

December 19, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – – f7cfde09766f705aa7717231944be39f

December 19, 2022

Score: 8 MALWARE FAMILY: TAGS:MD5: f7cfde09766f705aa7717231944be39fSHA1: 0600a2b770ef58d04d1697f5de02393ce7f9511bANALYSIS DATE: 2022-12-18T22:09:09ZTTPS: T1082, T1012, T1120 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – discovery – 713ffacc6fedcfb758c95ae0a6e8cffc

December 19, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, evasion, persistence, ransomwareMD5: 713ffacc6fedcfb758c95ae0a6e8cffcSHA1: 700cb7f2233537cb59d7dcb9908533a64c9bbdedANALYSIS DATE: 2022-12-18T22:01:28ZTTPS: T1018, T1060, T1112, T1107, T1490, T1070, T1082, T1222,...

Malware Analysis – djvu – e042f4ff059f6cc2d7ff9b7264ab0ac6

December 19, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: e042f4ff059f6cc2d7ff9b7264ab0ac6SHA1: 92c04e46499feea5044ec106befa6860ed69bfdbANALYSIS DATE: 2022-12-18T21:52:17ZTTPS: T1053, T1005, T1081, T1082, T1012, T1060,...

Malware Analysis – djvu – 72b2a065abf168e59664b44decd2ef35

December 19, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 72b2a065abf168e59664b44decd2ef35SHA1: d160b6d3e25af6517a3bf689aabb7b5cbc2a128cANALYSIS DATE: 2022-12-18T23:18:24ZTTPS: T1005, T1081, T1012, T1082, T1053, T1060,...

Security Affairs newsletter Round 398 by Pierluigi Paganini

December 18, 2022

A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs free for...

Google announced end-to-end encryption for Gmail web

December 18, 2022

Google introduces end-to-end encryption for Gmail web to its Workspace and education customers to protect emails sent using the web...

laZzzy – Shellcode Loader, Developed Using Different Open-Source Libraries, That Demonstrates Different Execution Techniques

December 18, 2022

laZzzy is a shellcode loader that demonstrates different execution ClickOnce Publishing Python3 and the required modules: python3 -m pip install...

Cobalt Stike Beacon Detected – 35[.]92[.]32[.]1:8086

December 18, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 198[.]98[.]55[.]58:443

December 18, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 195[.]189[.]96[.]208:443

December 18, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 179[.]43[.]142[.]137:80

December 18, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 103[.]234[.]72[.]142:86

December 18, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 116[.]62[.]207[.]46:80

December 18, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 84[.]32[.]191[.]131:443

December 18, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Royal Ransomware Victim: Conform

December 18, 2022

RoyalRansomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the...

Malware Analysis – djvu – c10db6b82a25aea13403618169daf2b4

December 18, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: c10db6b82a25aea13403618169daf2b4SHA1: e6079184cec5366be1d581b8b8cfe26e786c2da6ANALYSIS DATE: 2022-12-18T09:11:50ZTTPS: T1012, T1082, T1053, T1005, T1081, T1222,...

Malware Analysis – djvu – 7f1463076388a2f31943ecbf984b82ad

December 18, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 7f1463076388a2f31943ecbf984b82adSHA1: 912091744c8083ace3d8ccc8f941d1ee857af913ANALYSIS DATE: 2022-12-18T09:33:09ZTTPS: T1012, T1222, T1082, T1053, T1005, T1081,...

Malware Analysis – djvu – 1f251fecef351df9530bb76b5044e2d3

December 18, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 1f251fecef351df9530bb76b5044e2d3SHA1: 92436cc6ac90ad654da9218a948cd39e639a549eANALYSIS DATE: 2022-12-18T11:33:44ZTTPS: T1012, T1082, T1005, T1081, T1060, T1112,...

Malware Analysis – chaos – dd6b2c4c8aa41639409f24413a3c5879

December 18, 2022

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, evasion, ransomware, spyware, stealerMD5: dd6b2c4c8aa41639409f24413a3c5879SHA1: 4ae29959377d36544a7207c5a140bfff56c7fb82ANALYSIS DATE: 2022-12-18T11:58:03ZTTPS: T1490, T1059, T1107, T1082, T1491, T1112, T1005,...

threatintel

Malware Analysis – djvu – d74a0dc62986de2c0dc1386a0f27df7c

Malware Analysis – djvu – 4d166f22b6002cc5de2e127f9896c8ef

Malware Analysis – djvu – 1a53998a5d3e71f0ccdfe220c8646fe1

Cobalt Stike Beacon Detected – 179[.]43[.]142[.]47:8443

Cobalt Stike Beacon Detected – 143[.]198[.]243[.]87:443

Malware Analysis – – f7cfde09766f705aa7717231944be39f

Malware Analysis – discovery – 713ffacc6fedcfb758c95ae0a6e8cffc

Malware Analysis – djvu – e042f4ff059f6cc2d7ff9b7264ab0ac6

Malware Analysis – djvu – 72b2a065abf168e59664b44decd2ef35

Security Affairs newsletter Round 398 by Pierluigi Paganini

Google announced end-to-end encryption for Gmail web

laZzzy – Shellcode Loader, Developed Using Different Open-Source Libraries, That Demonstrates Different Execution Techniques

Cobalt Stike Beacon Detected – 35[.]92[.]32[.]1:8086

Cobalt Stike Beacon Detected – 198[.]98[.]55[.]58:443

Cobalt Stike Beacon Detected – 195[.]189[.]96[.]208:443

Cobalt Stike Beacon Detected – 179[.]43[.]142[.]137:80

Cobalt Stike Beacon Detected – 103[.]234[.]72[.]142:86

Cobalt Stike Beacon Detected – 116[.]62[.]207[.]46:80

Cobalt Stike Beacon Detected – 84[.]32[.]191[.]131:443

Royal Ransomware Victim: Conform

Malware Analysis – djvu – c10db6b82a25aea13403618169daf2b4

Malware Analysis – djvu – 7f1463076388a2f31943ecbf984b82ad

Malware Analysis – djvu – 1f251fecef351df9530bb76b5044e2d3

Malware Analysis – chaos – dd6b2c4c8aa41639409f24413a3c5879

CVE Alert: CVE-2025-12161 – burhandodhy – Smart Auto Upload Images – Import External Images

CVE Alert: CVE-2025-11452 – asgaros – Asgaros Forum

China Uses Mars Orbiter To Snap Interstellar Comet 3i/atlas

[DRAGONFORCE] – Ransomware Victim: GB Mail

[AKIRA] – Ransomware Victim: Mold In Graphic Systems

You may have missed