Year: 2022

Malware Analysis – djvu – 0ffeb9f5001377ea8c199cf13dcd5f2b

October 19, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 0ffeb9f5001377ea8c199cf13dcd5f2bSHA1: 644bc255288ee4a7664540e1c55872fdb533bc6dANALYSIS DATE: 2022-10-19T09:39:49ZTTPS: T1005, T1081, T1222, T1053,...

Malware Analysis – danabot – 072433c8fab1e14873361e2a95ec5d37

October 19, 2022

Score: 10 MALWARE FAMILY: danabotTAGS:family:danabot, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, banker, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 072433c8fab1e14873361e2a95ec5d37SHA1: 8d1b707184f7f20950643bc82db590edd081a71bANALYSIS...

Malware Analysis – djvu – dc38da1da1e88bac04121824d2abb81a

October 19, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: dc38da1da1e88bac04121824d2abb81aSHA1: 101f00bcbba421c4f14a20a7da382acbfe900e52ANALYSIS DATE: 2022-10-19T09:47:30ZTTPS: T1222, T1060, T1112, T1005,...

Malware Analysis – djvu – 45534d9fae89d8bd0166236fef70aac1

October 19, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: 45534d9fae89d8bd0166236fef70aac1SHA1: a45ee6c9777446f3f1687cd2f70f3aa3e480b296ANALYSIS DATE: 2022-10-19T09:38:35ZTTPS: T1053, T1060, T1112, T1222, T1082, T1012 ScoreMeaningExample10Known badA...

Malware Analysis – blackbasta – 6a202e9a95f58938d02385e31d43ed87

October 19, 2022

Score: 10 MALWARE FAMILY: blackbastaTAGS:family:blackbasta, ransomwareMD5: 6a202e9a95f58938d02385e31d43ed87SHA1: 53628c7a155ccb7af1135140083939018d3587f1ANALYSIS DATE: 2022-10-19T10:40:19ZTTPS: T1107, T1490, T1491, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ransomware – f5c9c7b404aa41bb2bbc1704afeb9f0d

October 19, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: f5c9c7b404aa41bb2bbc1704afeb9f0dSHA1: 1ca01cd00899330b918678d5f0ee00ab94d26f89ANALYSIS DATE: 2022-10-19T10:40:23ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – danabot – ae489c5fec00f4363d3367b5a995a8db

October 19, 2022

Score: 10 MALWARE FAMILY: danabotTAGS:family:danabot, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, banker, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: ae489c5fec00f4363d3367b5a995a8dbSHA1: eb0e5e3e21b4ce9995b4f570eed9e393a8d2f8e4ANALYSIS...

Malware Analysis – blackbasta – 0c69e91c2f54978ae3103b26686b2610

October 19, 2022

Score: 10 MALWARE FAMILY: blackbastaTAGS:family:blackbasta, ransomwareMD5: 0c69e91c2f54978ae3103b26686b2610SHA1: 3e3b113a5ab64e03ffe86e0fa9a2163816f9ecdfANALYSIS DATE: 2022-10-19T10:40:26ZTTPS: T1107, T1490, T1491, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Cobalt Stike Beacon Detected – 106[.]13[.]206[.]236:8011

October 19, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 69[.]49[.]245[.]24:8080

October 19, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – persistence – f21bcc4d9dd94342c1602e96534002b6

October 19, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: f21bcc4d9dd94342c1602e96534002b6SHA1: 1a7e9f7896a02df7e9729e481890a4ee82daac1eANALYSIS DATE: 2022-10-19T10:40:46ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091, T1060, T1112...

Malware Analysis – ransomware – 91504a2349db14afb99e62b5d6f693d4

October 19, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 91504a2349db14afb99e62b5d6f693d4SHA1: 90a1df9e4812850e95545d07509472b0614c8f71ANALYSIS DATE: 2022-10-19T10:40:34ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – af3175967e229bbc607bc32699cef621

October 19, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: af3175967e229bbc607bc32699cef621SHA1: 683449dd00992bff104e987a130eca526cd39afbANALYSIS DATE: 2022-10-19T10:40:31ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – persistence – 60f87cba4fc4edc6a22d5dd65827e9b4

October 19, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 60f87cba4fc4edc6a22d5dd65827e9b4SHA1: 1daa253da17f83939ccf0a6ddf6578570daaee54ANALYSIS DATE: 2022-10-19T10:40:40ZTTPS: T1107, T1490, T1091, T1060, T1112, T1005, T1081, T1082...

Cobalt Stike Beacon Detected – 49[.]232[.]144[.]57:80

October 19, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 5[.]8[.]18[.]242:443

October 19, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 1[.]15[.]67[.]80:443

October 19, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 168[.]100[.]11[.]84:80

October 19, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

IBM InfoSphere Information Server external entity injection | CVE-2022-40747

October 19, 2022

NAME IBM InfoSphere Information Server external entity injection Platforms Affected:IBM InfoSphere Information Server 11.7Risk Level:8.2Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION IBM InfoSphere Information...

Daily Vulnerability Trends: Wed Oct 19 2022

October 19, 2022

Daily Vulnerability Trends (sourced from VulnMon) CVE NAMECVE DescriptionCVE-2022-42948 No description provided CVE-2022-40684An authentication bypass using an alternate path or...

Microsoft Office 365 Message Encryption (OME) doesn’t ensure confidentiality

October 19, 2022

A bug in the message encryption mechanism used by Microsoft in Office 365 can allow to access the contents of the...

Cuba Ransomware Victim: Dialogsas

October 19, 2022

Cuba Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of...

Cuba Ransomware Victim: Ville-chaville

October 19, 2022

Cuba Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of...

Malware Analysis – djvu – f41b9e7741b3c6ea33a947e85f8ecd89

October 19, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, stealer, trojan, vmprotectMD5: f41b9e7741b3c6ea33a947e85f8ecd89SHA1: 1d17879310cf6ae6d3388f29bfc3ddc062c2d980ANALYSIS DATE: 2022-10-18T20:09:37ZTTPS:...

Year: 2022

Malware Analysis – djvu – 0ffeb9f5001377ea8c199cf13dcd5f2b

Malware Analysis – danabot – 072433c8fab1e14873361e2a95ec5d37

Malware Analysis – djvu – dc38da1da1e88bac04121824d2abb81a

Malware Analysis – djvu – 45534d9fae89d8bd0166236fef70aac1

Malware Analysis – blackbasta – 6a202e9a95f58938d02385e31d43ed87

Malware Analysis – ransomware – f5c9c7b404aa41bb2bbc1704afeb9f0d

Malware Analysis – danabot – ae489c5fec00f4363d3367b5a995a8db

Malware Analysis – blackbasta – 0c69e91c2f54978ae3103b26686b2610

Cobalt Stike Beacon Detected – 106[.]13[.]206[.]236:8011

Cobalt Stike Beacon Detected – 69[.]49[.]245[.]24:8080

Malware Analysis – persistence – f21bcc4d9dd94342c1602e96534002b6

Malware Analysis – ransomware – 91504a2349db14afb99e62b5d6f693d4

Malware Analysis – ransomware – af3175967e229bbc607bc32699cef621

Malware Analysis – persistence – 60f87cba4fc4edc6a22d5dd65827e9b4

Cobalt Stike Beacon Detected – 49[.]232[.]144[.]57:80

Cobalt Stike Beacon Detected – 5[.]8[.]18[.]242:443

Cobalt Stike Beacon Detected – 1[.]15[.]67[.]80:443

Cobalt Stike Beacon Detected – 168[.]100[.]11[.]84:80

IBM InfoSphere Information Server external entity injection | CVE-2022-40747

Daily Vulnerability Trends: Wed Oct 19 2022

Microsoft Office 365 Message Encryption (OME) doesn’t ensure confidentiality

Cuba Ransomware Victim: Dialogsas

Cuba Ransomware Victim: Ville-chaville

Malware Analysis – djvu – f41b9e7741b3c6ea33a947e85f8ecd89

CVE Alert: CVE-2025-23774

CVE Alert: CVE-2025-23781

CVE Alert: CVE-2025-23769

CVE Alert: CVE-2025-23768

CVE Alert: CVE-2025-23770

You may have missed