threatintel

Malware Analysis – cryptolocker – fec5a0d4dea87955c124f2eaa1f759f5

October 27, 2022

Score: 10 MALWARE FAMILY: cryptolockerTAGS:family:cryptolocker, persistence, ransomwareMD5: fec5a0d4dea87955c124f2eaa1f759f5SHA1: ea2e50e16448ac8131391e5322663660ef0a5632ANALYSIS DATE: 2022-10-26T22:28:35ZTTPS: T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – cryptolocker – 354f7ec15741db7fcdfe7b158c14dfaa

October 27, 2022

Score: 10 MALWARE FAMILY: cryptolockerTAGS:family:cryptolocker, persistence, ransomwareMD5: 354f7ec15741db7fcdfe7b158c14dfaaSHA1: 1265f62cb1bf781baaf5161e8b2fcd40a4026747ANALYSIS DATE: 2022-10-26T22:28:37ZTTPS: T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Cobalt Stike Beacon Detected – 195[.]14[.]122[.]172:443

October 27, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 167[.]99[.]116[.]140:80

October 27, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 124[.]221[.]127[.]219:80

October 27, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 89[.]185[.]84[.]27:80

October 27, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – cryptolocker – 7f3cc059ffc6c11fe42695e5f19553ab

October 27, 2022

Score: 10 MALWARE FAMILY: cryptolockerTAGS:family:cryptolocker, persistence, ransomwareMD5: 7f3cc059ffc6c11fe42695e5f19553abSHA1: f22555d2898e3486b2c628a2e523657f5fbbe475ANALYSIS DATE: 2022-10-26T22:28:41ZTTPS: T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – cryptolocker – 3921543c211364b4827c55aeeef5260c

October 27, 2022

Score: 10 MALWARE FAMILY: cryptolockerTAGS:family:cryptolocker, persistence, ransomwareMD5: 3921543c211364b4827c55aeeef5260cSHA1: 4b7f71b8e7f228dbb0d296120b6f6f455d22248cANALYSIS DATE: 2022-10-26T22:28:43ZTTPS: T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – evasion – 9c7e4e17df4b373ef137d1611e0f902c

October 27, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, spyware, stealer, trojan, upxMD5: 9c7e4e17df4b373ef137d1611e0f902cSHA1: 84392abdf2f3fd70aac778d6c248786514de64caANALYSIS DATE: 2022-10-26T22:28:58ZTTPS: T1082, T1060, T1112, T1089, T1004, T1088,...

Malware Analysis – cryptolocker – ffeae4a391a1d5203bd04b4161557227

October 27, 2022

Score: 10 MALWARE FAMILY: cryptolockerTAGS:family:cryptolocker, persistence, ransomwareMD5: ffeae4a391a1d5203bd04b4161557227SHA1: 7c7013dd8def75c94828b40ffa139b6d89ec4683ANALYSIS DATE: 2022-10-26T22:28:41ZTTPS: T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Cobalt Stike Beacon Detected – 155[.]94[.]133[.]243:8080

October 27, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 116[.]203[.]17[.]128:80

October 27, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 139[.]224[.]116[.]32:1000

October 27, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 5[.]44[.]42[.]17:443

October 27, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – ransomware – bbeefd87f5fb85d9575f0c14864c717a

October 27, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: bbeefd87f5fb85d9575f0c14864c717aSHA1: 90b156a97f9cf986f427478e66b28fd043364e71ANALYSIS DATE: 2022-10-26T22:40:24ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – joker – 4ba2d52786e2bcd0d9447ec1de087adb

October 27, 2022

Score: 10 MALWARE FAMILY: jokerTAGS:family:joker, discovery, infostealer, persistence, ransomware, trojanMD5: 4ba2d52786e2bcd0d9447ec1de087adbSHA1: a8685d4f9eea009ebd2cfb5e2807987fc0870a45ANALYSIS DATE: 2022-10-26T22:34:22ZTTPS: T1060, T1112, T1005, T1158, T1057, T1082,...

Malware Analysis – djvu – 8e3d0716be0c042c31434517d41f8894

October 27, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, family:vidar, botnet:1752, botnet:517, botnet:mario23_10, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojan,...

Malware Analysis – evasion – b2dbb36c7dde16ddc0e751ccc25761db

October 27, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, spyware, stealer, trojanMD5: b2dbb36c7dde16ddc0e751ccc25761dbSHA1: 5ed7353a9d68a883b26c26bcd5ad1bb466cf6855ANALYSIS DATE: 2022-10-26T22:28:59ZTTPS: T1088, T1089, T1112, T1082, T1031, T1060, T1004,...

Cobalt Stike Beacon Detected – 139[.]196[.]237[.]171:443

October 27, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 89[.]185[.]84[.]22:80

October 27, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 45[.]154[.]13[.]128:443

October 27, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 35[.]89[.]139[.]95:443

October 27, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – ransomware – 294a4cd1f2a8760a0aebee89ffcbbd96

October 27, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 294a4cd1f2a8760a0aebee89ffcbbd96SHA1: f5ce37cff3b02028346a7c046ec9c5075d3268e3ANALYSIS DATE: 2022-10-26T22:40:42ZTTPS: T1107, T1490, T1091, T1005, T1081, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 7548a88d0b78e9d0dcc189390a9b7a22

October 27, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 7548a88d0b78e9d0dcc189390a9b7a22SHA1: 858feecd4f64e5a169db5f73c4342336843c2382ANALYSIS DATE: 2022-10-26T22:40:32ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

threatintel

Malware Analysis – cryptolocker – fec5a0d4dea87955c124f2eaa1f759f5

Malware Analysis – cryptolocker – 354f7ec15741db7fcdfe7b158c14dfaa

Cobalt Stike Beacon Detected – 195[.]14[.]122[.]172:443

Cobalt Stike Beacon Detected – 167[.]99[.]116[.]140:80

Cobalt Stike Beacon Detected – 124[.]221[.]127[.]219:80

Cobalt Stike Beacon Detected – 89[.]185[.]84[.]27:80

Malware Analysis – cryptolocker – 7f3cc059ffc6c11fe42695e5f19553ab

Malware Analysis – cryptolocker – 3921543c211364b4827c55aeeef5260c

Malware Analysis – evasion – 9c7e4e17df4b373ef137d1611e0f902c

Malware Analysis – cryptolocker – ffeae4a391a1d5203bd04b4161557227

Cobalt Stike Beacon Detected – 155[.]94[.]133[.]243:8080

Cobalt Stike Beacon Detected – 116[.]203[.]17[.]128:80

Cobalt Stike Beacon Detected – 139[.]224[.]116[.]32:1000

Cobalt Stike Beacon Detected – 5[.]44[.]42[.]17:443

Malware Analysis – ransomware – bbeefd87f5fb85d9575f0c14864c717a

Malware Analysis – joker – 4ba2d52786e2bcd0d9447ec1de087adb

Malware Analysis – djvu – 8e3d0716be0c042c31434517d41f8894

Malware Analysis – evasion – b2dbb36c7dde16ddc0e751ccc25761db

Cobalt Stike Beacon Detected – 139[.]196[.]237[.]171:443

Cobalt Stike Beacon Detected – 89[.]185[.]84[.]22:80

Cobalt Stike Beacon Detected – 45[.]154[.]13[.]128:443

Cobalt Stike Beacon Detected – 35[.]89[.]139[.]95:443

Malware Analysis – ransomware – 294a4cd1f2a8760a0aebee89ffcbbd96

Malware Analysis – ransomware – 7548a88d0b78e9d0dcc189390a9b7a22

[KAIROS] – Ransomware Victim: nightingalehammerson[.]org

[LYNX] – Ransomware Victim: Gossett Motor Cars

[FUNKSEC] – Ransomware Victim: funkforum

CVE Alert: CVE-2025-23922

CVE Alert: CVE-2025-23919

You may have missed