Year: 2023

Malware Analysis – djvu – c55a56b6bd403cc0e37cfc8334c418ec

January 31, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:19, backdoor, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: c55a56b6bd403cc0e37cfc8334c418ecSHA1: 9e6d17af7a7d9e8b71709460043db01921d676baANALYSIS DATE: 2023-01-30T21:46:38ZTTPS:...

Malware Analysis – smokeloader – 2486d74f06a082f19c89a9fd1ff8f33c

January 31, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 2486d74f06a082f19c89a9fd1ff8f33cSHA1: 462fa1e0c497739a65d651c1fb20b37b292d8330ANALYSIS DATE: 2023-01-30T23:01:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – raccoon – f093310a1184ce70410f1b5804a80e71

January 31, 2023

Score: 10 MALWARE FAMILY: raccoonTAGS:family:raccoon, botnet:8c3e4aa007fb2f2defacc1f952806f72, bootkit, discovery, evasion, persistence, ransomware, spyware, stealer, trojanMD5: f093310a1184ce70410f1b5804a80e71SHA1: 6e65c4750890b85dde47dff3c30be157f695a540ANALYSIS DATE: 2023-01-30T23:22:38ZTTPS: T1053, T1005,...

Malware Analysis – discovery – 05882ff7f159734468f66e60cb10f316

January 31, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, ransomwareMD5: 05882ff7f159734468f66e60cb10f316SHA1: ec0b1d3fd2a67a5f85e2a8b1e04d69f4362b6b4eANALYSIS DATE: 2023-01-30T23:48:44ZTTPS: T1082, T1057, T1012 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – ransomware – 794b00893a1b95ade9379710821ac1a4

January 31, 2023

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomware, upxMD5: 794b00893a1b95ade9379710821ac1a4SHA1: 85c7b2c351700457e3d6a21032dfd971ccb9b09dANALYSIS DATE: 2023-01-30T23:38:10ZTTPS: T1491, T1112, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Vice Society Ransomware Victim: Scheppersinstituut Wetteren

January 30, 2023

Vice Society Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

c1f8837aa9f871ea0cc3954930d50e54c03cca418b9a40538f4c5a856b7ea5c2

DFShell – The Best Forwarded Shell

January 30, 2023

██████╗ ███████╗███████╗██╗ ██╗███████╗██╗ ██╗ ██╔══██╗██╔════╝██╔════╝██║ ██║███╔═══╝██║ ██║ ██║ ██║█████╗ ███████╗███████║█████╗ ██║ ██║ ██║ ██║██╔══╝ ╚════██║██╔══██║██╔══╝ ██║ ██║ ██████╔╝██║ ███████║██║ ██║███████╗████████╗███████╗╚═════╝...

Cobalt Stike Beacon Detected – 212[.]193[.]30[.]14:8080

January 30, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 75[.]127[.]13[.]147:80

January 30, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 176[.]10[.]111[.]175:8443

January 30, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 107[.]172[.]206[.]242:9990

January 30, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 210[.]209[.]123[.]100:443

January 30, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 185[.]175[.]156[.]42:80

January 30, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 150[.]158[.]101[.]160:443

January 30, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 173[.]254[.]204[.]67:443

January 30, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 81[.]70[.]11[.]25:9999

January 30, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 124[.]222[.]30[.]121:5000

January 30, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 195[.]189[.]96[.]249:80

January 30, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 124[.]223[.]49[.]76:8080

January 30, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 212[.]193[.]30[.]14:443

January 30, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – discovery – 7100ae995fa831c9caf2fcc284f6d404

January 30, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, ransomwareMD5: 7100ae995fa831c9caf2fcc284f6d404SHA1: b9fa6ef183fdd23ac99fc8e98287ae560349d145ANALYSIS DATE: 2023-01-30T09:02:16ZTTPS: T1012, T1082, T1057 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – discovery – 053bcae6cc46eb852a346774a8f5373a

January 30, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: 053bcae6cc46eb852a346774a8f5373aSHA1: 11ba7711a7c3c275b5e48d94b5b432c3f2b30e79ANALYSIS DATE: 2023-01-30T09:21:28ZTTPS: T1012, T1120, T1082, T1060, T1112 ScoreMeaningExample10Known badA malware family...

Cobalt Stike Beacon Detected – 18[.]212[.]19[.]9:80

January 30, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 101[.]43[.]129[.]115:443

January 30, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Year: 2023

Malware Analysis – djvu – c55a56b6bd403cc0e37cfc8334c418ec

Malware Analysis – smokeloader – 2486d74f06a082f19c89a9fd1ff8f33c

Malware Analysis – raccoon – f093310a1184ce70410f1b5804a80e71

Malware Analysis – discovery – 05882ff7f159734468f66e60cb10f316

Malware Analysis – ransomware – 794b00893a1b95ade9379710821ac1a4

Vice Society Ransomware Victim: Scheppersinstituut Wetteren

DFShell – The Best Forwarded Shell

Cobalt Stike Beacon Detected – 212[.]193[.]30[.]14:8080

Cobalt Stike Beacon Detected – 75[.]127[.]13[.]147:80

Cobalt Stike Beacon Detected – 176[.]10[.]111[.]175:8443

Cobalt Stike Beacon Detected – 107[.]172[.]206[.]242:9990

Cobalt Stike Beacon Detected – 210[.]209[.]123[.]100:443

Cobalt Stike Beacon Detected – 185[.]175[.]156[.]42:80

Cobalt Stike Beacon Detected – 150[.]158[.]101[.]160:443

Cobalt Stike Beacon Detected – 173[.]254[.]204[.]67:443

Cobalt Stike Beacon Detected – 81[.]70[.]11[.]25:9999

Cobalt Stike Beacon Detected – 124[.]222[.]30[.]121:5000

Cobalt Stike Beacon Detected – 195[.]189[.]96[.]249:80

Cobalt Stike Beacon Detected – 124[.]223[.]49[.]76:8080

Cobalt Stike Beacon Detected – 212[.]193[.]30[.]14:443

Malware Analysis – discovery – 7100ae995fa831c9caf2fcc284f6d404

Malware Analysis – discovery – 053bcae6cc46eb852a346774a8f5373a

Cobalt Stike Beacon Detected – 18[.]212[.]19[.]9:80

Cobalt Stike Beacon Detected – 101[.]43[.]129[.]115:443

CVE Alert: CVE-2024-42172

CVE Alert: CVE-2024-42173

CVE Alert: CVE-2024-11386

CVE Alert: CVE-2024-42171

CVE Alert: CVE-2024-42174

You may have missed