Month: January 2023

Malware Analysis – djvu – 802c3dd045b2277aa0846689e152892d

January 26, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:19, backdoor, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: 802c3dd045b2277aa0846689e152892dSHA1: ea895467c292406be2472debbaec4685d29f8d6dANALYSIS DATE: 2023-01-26T16:11:32ZTTPS:...

Malware Analysis – smokeloader – 9ea4f8811d333a11401a102e8bc84c78

January 26, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 9ea4f8811d333a11401a102e8bc84c78SHA1: b246b1aa87de2a8fa7770371ff53ee3e0e4f449dANALYSIS DATE: 2023-01-26T16:36:10ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – gafgyt – 90276982cc921f646f74f8310ef8cd6a

January 26, 2023

Score: 10 MALWARE FAMILY: gafgytTAGS:family:gafgyt, family:plugx, family:redline, botnet, discovery, exploit, infostealer, persistence, trojanMD5: 90276982cc921f646f74f8310ef8cd6aSHA1: 37d5ff4e70485bbcc6e4ef6fa08d3b7839012d0fANALYSIS DATE: 2023-01-26T16:47:40ZTTPS: T1012, T1082, T1130,...

Malware Analysis – djvu – ce2daf9e687edbeb4d78d41abbab4736

January 26, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: ce2daf9e687edbeb4d78d41abbab4736SHA1: ab9a7fd9b64a7b28fe3dfc3a04eb3b057dfdef33ANALYSIS DATE: 2023-01-26T16:40:34ZTTPS: T1005, T1081, T1060, T1112,...

Malware Analysis – joker – dea8911e2f66aad91aaa2c1afb40c697

January 26, 2023

Score: 10 MALWARE FAMILY: jokerTAGS:family:joker, evasion, infostealer, ransomware, trojanMD5: dea8911e2f66aad91aaa2c1afb40c697SHA1: 6aed964342314fc7fd5c0c3cb6f2ef1814472916ANALYSIS DATE: 2023-01-26T17:36:03ZTTPS: T1102 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – d37b8714a55b734644d3f88ecb6da612

January 26, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:19, backdoor, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: d37b8714a55b734644d3f88ecb6da612SHA1: 67fd5834a7f0819c2ba06b4ed21c9a0876296c58ANALYSIS DATE: 2023-01-26T17:40:22ZTTPS:...

Malware Analysis – discovery – 6b43663e875f7f6cbb40fe72cae01b9b

January 26, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: 6b43663e875f7f6cbb40fe72cae01b9bSHA1: 1c32ca96df9b3ebe1a1f163baf1999ce564ae438ANALYSIS DATE: 2023-01-26T17:51:39ZTTPS: T1082, T1060, T1112, T1012, T1130 ScoreMeaningExample10Known badA malware family...

Malware Analysis – djvu – 9a0ea0a71406b61a6ec0bf4408f5898e

January 26, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 9a0ea0a71406b61a6ec0bf4408f5898eSHA1: 5c893181fb54cbd9db3b0b6af8cf6fe07df80c88ANALYSIS DATE: 2023-01-26T17:32:34ZTTPS: T1222, T1082, T1005, T1081,...

5f1574b107f23743f8353781079ce1d7dbd24671a86f8de9f7fec980f15c4b37

GUAC – Aggregates Software Security Metadata Into A High Fidelity Graph Database

January 26, 2023

Note: GUAC is under active development - if you are interested in contributing, please look at contributor guide and the...

Royal Ransomware Victim: IOC

January 26, 2023

RoyalRansomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the...

Vice Society Ransomware Victim: CloudCall &
emoney Home Loans

January 26, 2023

Vice Society Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Vice Society Ransomware Victim: New Partners

January 26, 2023

Vice Society Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Malware Analysis – djvu – 1e26a5b4fef1212594a1a80192b5af49

January 26, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 1e26a5b4fef1212594a1a80192b5af49SHA1: 805eab0ee48f53b202a4e9e518d957630b06483dANALYSIS DATE: 2023-01-26T09:10:44ZTTPS: T1060, T1112, T1222, T1053,...

Malware Analysis – smokeloader – 5138399605906d20f0d997f76a455305

January 26, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 5138399605906d20f0d997f76a455305SHA1: 1c3d6a4e2e3c06654cd6ce9a63df125285cc39ecANALYSIS DATE: 2023-01-26T09:23:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – discovery – 1b8f29e2103cf73b4844c685c6f6ce5e

January 26, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomware, spyware, stealerMD5: 1b8f29e2103cf73b4844c685c6f6ce5eSHA1: bc2607fce6742c21c4d8a679968e3769e40261f6ANALYSIS DATE: 2023-01-26T09:50:00ZTTPS: T1060, T1012, T1112, T1005, T1081, T1082, T1042...

Malware Analysis – djvu – 09a0cb3a24b41bc88ad4e89bbc66b492

January 26, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:19, backdoor, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: 09a0cb3a24b41bc88ad4e89bbc66b492SHA1: 4587378995be7068c587591933f38990fe5bee23ANALYSIS DATE: 2023-01-26T10:08:47ZTTPS:...

Malware Analysis – djvu – afd4bd2d1bf9a2648a0ddfd0bd572e57

January 26, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: afd4bd2d1bf9a2648a0ddfd0bd572e57SHA1: 25c7285f2d5da15e1d60945ccbac73b6ae04fc33ANALYSIS DATE: 2023-01-26T09:30:51ZTTPS: T1012, T1222, T1082, T1005,...

Malware Analysis – discovery – 69a60a65668851b6ddb406e3094b2e86

January 26, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: 69a60a65668851b6ddb406e3094b2e86SHA1: 484a781471ed7227ed6636122fdbac56e9895b3fANALYSIS DATE: 2023-01-26T10:29:17ZTTPS: T1060, T1112, T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family...

Malware Analysis – djvu – f949ebdd228fd1ff03e7a1c963886ef2

January 26, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: f949ebdd228fd1ff03e7a1c963886ef2SHA1: 6a30d8454bedc3353ab8b7d5c9095e19583ac99aANALYSIS DATE: 2023-01-26T10:45:45ZTTPS: T1222, T1082, T1053, T1005,...

Malware Analysis – smokeloader – 7961d2f393fbc2f1fa49db7410feaa21

January 26, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 7961d2f393fbc2f1fa49db7410feaa21SHA1: d7b1b94ee117bf2a4be1f3b6044fde46d175d27eANALYSIS DATE: 2023-01-26T11:25:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 4623857875232b3cd157433eb1fd0e46

January 26, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 4623857875232b3cd157433eb1fd0e46SHA1: f5b05f67ddf98eb52427f49f346736eeb1f47ffcANALYSIS DATE: 2023-01-26T10:54:21ZTTPS: T1005, T1081, T1082, T1012,...

Malware Analysis – djvu – 8edc269873eb17d0c726919b0b2855d5

January 26, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, backdoor, discovery, persistence, ransomware, trojan, vmprotectMD5: 8edc269873eb17d0c726919b0b2855d5SHA1: 1ccb3faed9993c542e92f66f10fe2ec992408971ANALYSIS DATE: 2023-01-26T10:57:08ZTTPS: T1012, T1120, T1082, T1222,...

Cobalt Stike Beacon Detected – 47[.]92[.]126[.]214:8888

January 26, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 107[.]151[.]195[.]11:80

January 26, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Month: January 2023

Malware Analysis – djvu – 802c3dd045b2277aa0846689e152892d

Malware Analysis – smokeloader – 9ea4f8811d333a11401a102e8bc84c78

Malware Analysis – gafgyt – 90276982cc921f646f74f8310ef8cd6a

Malware Analysis – djvu – ce2daf9e687edbeb4d78d41abbab4736

Malware Analysis – joker – dea8911e2f66aad91aaa2c1afb40c697

Malware Analysis – djvu – d37b8714a55b734644d3f88ecb6da612

Malware Analysis – discovery – 6b43663e875f7f6cbb40fe72cae01b9b

Malware Analysis – djvu – 9a0ea0a71406b61a6ec0bf4408f5898e

GUAC – Aggregates Software Security Metadata Into A High Fidelity Graph Database

Royal Ransomware Victim: IOC

Vice Society Ransomware Victim: CloudCall &
emoney Home Loans

Vice Society Ransomware Victim: New Partners

Malware Analysis – djvu – 1e26a5b4fef1212594a1a80192b5af49

Malware Analysis – smokeloader – 5138399605906d20f0d997f76a455305

Malware Analysis – discovery – 1b8f29e2103cf73b4844c685c6f6ce5e

Malware Analysis – djvu – 09a0cb3a24b41bc88ad4e89bbc66b492

Malware Analysis – djvu – afd4bd2d1bf9a2648a0ddfd0bd572e57

Malware Analysis – discovery – 69a60a65668851b6ddb406e3094b2e86

Malware Analysis – djvu – f949ebdd228fd1ff03e7a1c963886ef2

Malware Analysis – smokeloader – 7961d2f393fbc2f1fa49db7410feaa21

Malware Analysis – djvu – 4623857875232b3cd157433eb1fd0e46

Malware Analysis – djvu – 8edc269873eb17d0c726919b0b2855d5

Cobalt Stike Beacon Detected – 47[.]92[.]126[.]214:8888

Cobalt Stike Beacon Detected – 107[.]151[.]195[.]11:80

[LOCKBIT3] – Ransomware Victim: madison-home[.]com

[CHORT] – Ransomware Victim: sheboyganwi[.]gov

[QILIN] – Ransomware Victim: Zimmerman & Frachtman PA Law Firm

[QILIN] – Ransomware Victim: Calvert Home Mortgage Investment

[QILIN] – Ransomware Victim: LBCO Contracting LTD

You may have missed