threatintel

Malware Analysis – djvu – 5dbee5162f032bf484ddbcc68eebbf42

October 6, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 5dbee5162f032bf484ddbcc68eebbf42SHA1: 07e86d83adc3e04caf149922c48085b7639b6837ANALYSIS DATE: 2022-10-06T16:38:20ZTTPS:...

Cisco fixed two high-severity bugs in Communications, Networking Products

October 6, 2022

Cisco fixed high-severity flaws in some of its networking and communications products, including Enterprise NFV, Expressway and TelePresence. Cisco announced...

City of Tucson Data Breach impacted 123,500 individuals

October 6, 2022

The City of Tucson, Arizona disclosed a data breach, the incident was discovered in May 2022 and impacted 123,500 individuals....

Arsenal – Recon Tool installer

October 6, 2022

Arsenal is a Simple shell script (Bash) used to install the most important tools and requirements for your environment and...

19-Year-Old man arrested for misusing leaked record from Optus Breach

October 6, 2022

The Australian Federal Police (AFP) arrested a 19-year-old teen from Sydney for attempting to use data from the Optus data...

Black Basta Ransomware Victim: Willemen Group

October 6, 2022

Black Basta Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Cobalt Stike Beacon Detected – 23[.]224[.]42[.]32:443

October 6, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – evasion – b1315f90a7f98c5f7e187104615bf20f

October 6, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: b1315f90a7f98c5f7e187104615bf20fSHA1: 49f773c7e7cf66d715de2c2f7fd5352515918c0dANALYSIS DATE: 2022-10-06T08:28:22ZTTPS: T1082, T1088, T1089, T1112, T1031, T1107, T1490, T1098,...

Malware Analysis – ransomware – a1ffce6c80f805b72c61cc6225457c8b

October 6, 2022

Score: 5 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: a1ffce6c80f805b72c61cc6225457c8bSHA1: 47b2e3cd345f535da7abfa4a02284dcdb2fe177cANALYSIS DATE: 2022-10-06T08:15:46ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – cd13e52122e4ea82def4bd8303bfa3fb

October 6, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: cd13e52122e4ea82def4bd8303bfa3fbSHA1: 7f4f730b297d30a04364360ccf06636dcd1d25c5ANALYSIS DATE: 2022-10-06T08:28:04ZTTPS: T1005, T1081, T1012, T1082,...

Cobalt Stike Beacon Detected – 49[.]234[.]137[.]223:80

October 6, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 43[.]143[.]172[.]113:443

October 6, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 62[.]182[.]159[.]147:443

October 6, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 120[.]25[.]167[.]104:443

October 6, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – smokeloader – 34a120c01759401577fc71beca944aa4

October 6, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 34a120c01759401577fc71beca944aa4SHA1: c569f5a37ef5d5e8bbfabc059b3e712491dc88ffANALYSIS DATE: 2022-10-06T08:31:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 34a120c01759401577fc71beca944aa4

October 6, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 34a120c01759401577fc71beca944aa4SHA1: c569f5a37ef5d5e8bbfabc059b3e712491dc88ffANALYSIS DATE: 2022-10-06T08:30:48ZTTPS:...

Malware Analysis – djvu – 2867c3287900f54a65dc7654ba2d2f5b

October 6, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 2867c3287900f54a65dc7654ba2d2f5bSHA1: 6ba0115dd269992658cfa0b1a6d1b10bd2c48947ANALYSIS DATE: 2022-10-06T08:35:27ZTTPS: T1060, T1112, T1082, T1005,...

Malware Analysis – ransomware – 176c0e35328b032619dc485652148f6c

October 6, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 176c0e35328b032619dc485652148f6cSHA1: 00772f0f4bc58c23b4e1d338ba9ee3a1abd0aebdANALYSIS DATE: 2022-10-06T09:11:03ZTTPS: T1107, T1490, T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Cobalt Stike Beacon Detected – 161[.]97[.]161[.]77:8443

October 6, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 149[.]28[.]76[.]119:80

October 6, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 125[.]124[.]182[.]109:9000

October 6, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 109[.]94[.]208[.]57:443

October 6, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – ransomware – 176c0e35328b032619dc485652148f6c

October 6, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 176c0e35328b032619dc485652148f6cSHA1: 00772f0f4bc58c23b4e1d338ba9ee3a1abd0aebdANALYSIS DATE: 2022-10-06T09:12:30ZTTPS: T1082, T1012, T1120, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 4d9cd2ec3ce1522427e4654d3d7744da

October 6, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 4d9cd2ec3ce1522427e4654d3d7744daSHA1: ac29cd9beb1754cab94c3f650b22006b6374ec0aANALYSIS DATE: 2022-10-06T09:32:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

threatintel

Malware Analysis – djvu – 5dbee5162f032bf484ddbcc68eebbf42

Cisco fixed two high-severity bugs in Communications, Networking Products

City of Tucson Data Breach impacted 123,500 individuals

Arsenal – Recon Tool installer

19-Year-Old man arrested for misusing leaked record from Optus Breach

Black Basta Ransomware Victim: Willemen Group

Cobalt Stike Beacon Detected – 23[.]224[.]42[.]32:443

Malware Analysis – evasion – b1315f90a7f98c5f7e187104615bf20f

Malware Analysis – ransomware – a1ffce6c80f805b72c61cc6225457c8b

Malware Analysis – djvu – cd13e52122e4ea82def4bd8303bfa3fb

Cobalt Stike Beacon Detected – 49[.]234[.]137[.]223:80

Cobalt Stike Beacon Detected – 43[.]143[.]172[.]113:443

Cobalt Stike Beacon Detected – 62[.]182[.]159[.]147:443

Cobalt Stike Beacon Detected – 120[.]25[.]167[.]104:443

Malware Analysis – smokeloader – 34a120c01759401577fc71beca944aa4

Malware Analysis – djvu – 34a120c01759401577fc71beca944aa4

Malware Analysis – djvu – 2867c3287900f54a65dc7654ba2d2f5b

Malware Analysis – ransomware – 176c0e35328b032619dc485652148f6c

Cobalt Stike Beacon Detected – 161[.]97[.]161[.]77:8443

Cobalt Stike Beacon Detected – 149[.]28[.]76[.]119:80

Cobalt Stike Beacon Detected – 125[.]124[.]182[.]109:9000

Cobalt Stike Beacon Detected – 109[.]94[.]208[.]57:443

Malware Analysis – ransomware – 176c0e35328b032619dc485652148f6c

Malware Analysis – smokeloader – 4d9cd2ec3ce1522427e4654d3d7744da

[NOVA] – Ransomware Victim: Castilla

CVE Alert: CVE-2025-12595 – Tenda – AC23

CVE Alert: CVE-2025-12596 – Tenda – AC23

[QILIN] – Ransomware Victim: Deco Dental

Vodafonethree To Offshore Uk Network Jobs To India

You may have missed