Year: 2022

Malware Analysis – djvu – 77ee4427946d7f5dbed308448c45d399

December 24, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 77ee4427946d7f5dbed308448c45d399SHA1: a1d206b38ec8dad5af63384f0568cb6c6e56f48fANALYSIS DATE: 2022-12-24T17:28:03ZTTPS: T1222, T1012, T1005, T1081, T1082, T1060,...

Malware Analysis – eternity – 45e4485a5ca1845bddd704822f5dfabb

December 24, 2022

Score: 10 MALWARE FAMILY: eternityTAGS:family:eternity, evasion, ransomwareMD5: 45e4485a5ca1845bddd704822f5dfabbSHA1: 6239167355c534a1c86073b738f998d95cb81b42ANALYSIS DATE: 2022-12-24T17:04:49ZTTPS: T1082, T1053, T1012, T1018 ScoreMeaningExample10Known badA malware family was...

LockBit 3.0 Ransomware Victim: aristopharma[.]com

December 24, 2022

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Malware Analysis – smokeloader – 647a46b2dfca464acac5fb0dc474c8a3

December 24, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 647a46b2dfca464acac5fb0dc474c8a3SHA1: b6e2894d8d071d3faff7cf227ff2f665e86518eaANALYSIS DATE: 2022-12-24T09:03:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

BlackCat/ALPHV Ransomware Victim: Bregman Berbert Schwartz & Gilday

December 24, 2022

BlackCat / ALPHV Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the...

BlackCat/ALPHV Ransomware Victim: Protecmedia

December 24, 2022

BlackCat / ALPHV Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the...

Malware Analysis – bootkit – 3701dc535fb395d6a1fb557a3aeec5e9

December 24, 2022

Score: 10 MALWARE FAMILY: bootkitTAGS:bootkit, discovery, evasion, persistence, ransomware, spyware, stealer, trojanMD5: 3701dc535fb395d6a1fb557a3aeec5e9SHA1: ef517659229ddc6ecfc02481c3953ac9322dae35ANALYSIS DATE: 2022-12-24T09:47:02ZTTPS: T1060, T1112, T1012, T1082,...

Malware Analysis – evasion – 6e07363bcb0d53ab35788ca6355d4c9a

December 24, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealer, trojanMD5: 6e07363bcb0d53ab35788ca6355d4c9aSHA1: ff83f33d03f91f14896b6075f4c868b46ac192feANALYSIS DATE: 2022-12-24T09:28:23ZTTPS: T1031, T1053, T1107, T1490, T1112, T1088,...

Malware Analysis – djvu – 7d1c36a7f705e7ad6facd4e9621ee8b5

December 24, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 7d1c36a7f705e7ad6facd4e9621ee8b5SHA1: 848673dc5523002d241ee660ad3e592f4f52c652ANALYSIS DATE: 2022-12-24T09:13:30ZTTPS: T1012, T1082, T1005, T1081, T1060, T1112,...

Malware Analysis – smokeloader – 5df72ca427104352637a5ef056030e3b

December 24, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 5df72ca427104352637a5ef056030e3bSHA1: 626e79a6af439050ef99af38bc275d2116ee4e7aANALYSIS DATE: 2022-12-24T09:31:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Cobalt Stike Beacon Detected – 47[.]114[.]151[.]215:8088

December 24, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 43[.]139[.]225[.]176:443

December 24, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – ae54ef9519196ced8a45354ab938551f

December 24, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: ae54ef9519196ced8a45354ab938551fSHA1: 27d50e391bb3da764dd365fe53fbf538179b4d5cANALYSIS DATE: 2022-12-24T10:10:06ZTTPS: T1012, T1222, T1082, T1053, T1005, T1081,...

Cobalt Stike Beacon Detected – 180[.]76[.]115[.]62:8989

December 24, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – 4a9bff8242e34c49b4ac9380686ff219

December 24, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 4a9bff8242e34c49b4ac9380686ff219SHA1: 7d65d6a5ca3ef29cb4052a515b981e9e59f483fbANALYSIS DATE: 2022-12-24T10:27:18ZTTPS: T1053, T1005, T1081, T1012, T1082, T1222,...

Malware Analysis – smokeloader – 6febc6df81ab3b8f32c13a2dbe232676

December 24, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 6febc6df81ab3b8f32c13a2dbe232676SHA1: 50fec1c2b794a2663bfe0c1d189391e56c4061b5ANALYSIS DATE: 2022-12-24T10:33:08ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 53d8cc9b0d19488282cd39f464dddfc5

December 24, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 53d8cc9b0d19488282cd39f464dddfc5SHA1: 29faa33dc825038db12e1a883bb0f1fd3a946571ANALYSIS DATE: 2022-12-24T10:02:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 9cf5b0996cdf6ba6b34d85abdb85c0f5

December 24, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 9cf5b0996cdf6ba6b34d85abdb85c0f5SHA1: ff3f3db3868f37453335c0aa4fc0df30813769f0ANALYSIS DATE: 2022-12-24T10:41:27ZTTPS: T1222, T1082, T1053, T1012, T1005, T1081,...

Malware Analysis – djvu – 9babcbfae5216b1f3db8282790438586

December 24, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: 9babcbfae5216b1f3db8282790438586SHA1: e7c8fcc78bdaacaad85cacea73b209897f42f33aANALYSIS DATE: 2022-12-24T11:15:10ZTTPS: T1053, T1130, T1112, T1060, T1222, T1082 ScoreMeaningExample10Known badA...

Malware Analysis – smokeloader – 5265d31c93441df607ce7b0dae3e680e

December 24, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 5265d31c93441df607ce7b0dae3e680eSHA1: 557ca000136c84344aadf189710c22b2dc5e13a0ANALYSIS DATE: 2022-12-24T11:31:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 74315c762fbc50c9e128e4736af6451e

December 24, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: 74315c762fbc50c9e128e4736af6451eSHA1: 9676acee4631cba43064fcbcc07d2e5e145ec9a5ANALYSIS DATE: 2022-12-24T11:15:19ZTTPS: T1053, T1060, T1112, T1222, T1082, T1130 ScoreMeaningExample10Known badA...

Year: 2022

Malware Analysis – djvu – 77ee4427946d7f5dbed308448c45d399

Malware Analysis – eternity – 45e4485a5ca1845bddd704822f5dfabb

LockBit 3.0 Ransomware Victim: aristopharma[.]com

Malware Analysis – smokeloader – 647a46b2dfca464acac5fb0dc474c8a3

BlackCat/ALPHV Ransomware Victim: Bregman Berbert Schwartz & Gilday

BlackCat/ALPHV Ransomware Victim: Protecmedia

Malware Analysis – bootkit – 3701dc535fb395d6a1fb557a3aeec5e9

Malware Analysis – evasion – 6e07363bcb0d53ab35788ca6355d4c9a

Malware Analysis – djvu – 7d1c36a7f705e7ad6facd4e9621ee8b5

Malware Analysis – smokeloader – 5df72ca427104352637a5ef056030e3b

Cobalt Stike Beacon Detected – 47[.]114[.]151[.]215:8088

Cobalt Stike Beacon Detected – 43[.]139[.]225[.]176:443

Malware Analysis – djvu – ae54ef9519196ced8a45354ab938551f

Cobalt Stike Beacon Detected – 180[.]76[.]115[.]62:8989

Malware Analysis – djvu – 4a9bff8242e34c49b4ac9380686ff219

Malware Analysis – smokeloader – 6febc6df81ab3b8f32c13a2dbe232676

Malware Analysis – smokeloader – 53d8cc9b0d19488282cd39f464dddfc5

Malware Analysis – djvu – 9cf5b0996cdf6ba6b34d85abdb85c0f5

Malware Analysis – djvu – 9babcbfae5216b1f3db8282790438586

Malware Analysis – smokeloader – 5265d31c93441df607ce7b0dae3e680e

Malware Analysis – djvu – 74315c762fbc50c9e128e4736af6451e

Daily Vulnerability Trends: Sat Dec 24 2022

Cobalt Stike Beacon Detected – 124[.]223[.]181[.]21:8080

Cobalt Stike Beacon Detected – 179[.]43[.]187[.]247:80

Cobalt Strike Beacon Detected – 111[.]119[.]217[.]51:8889

Cobalt Strike Beacon Detected – 115[.]120[.]210[.]236:9999

Cobalt Strike Beacon Detected – 23[.]94[.]169[.]124:9090

Cobalt Strike Beacon Detected – 8[.]217[.]7[.]159:1234

Cobalt Strike Beacon Detected – 106[.]14[.]69[.]133:8999

You may have missed