threatintel

Malware Analysis – wannacry – 6fde18afcf48e21e23c7984487abf6b9

October 21, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: 6fde18afcf48e21e23c7984487abf6b9SHA1: 2cf046a1485c2f1db310fee2ca65c46ad31ceccfANALYSIS DATE: 2022-10-21T08:40:30ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – djvu – 3c37d81bc22dbb23d274d312e0be5abe

October 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 3c37d81bc22dbb23d274d312e0be5abeSHA1: eecffb48af2fa209358778560cc9187bccf1b113ANALYSIS DATE: 2022-10-21T09:05:26ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – ransomware – 6d9512776c224ad17a26a1ebb11c4057

October 21, 2022

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 6d9512776c224ad17a26a1ebb11c4057SHA1: 79e2ee36a8004c37eababfcdb399fff0af324b08ANALYSIS DATE: 2022-10-21T09:07:03ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Cobalt Stike Beacon Detected – 204[.]10[.]120[.]109:443

October 21, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 206[.]119[.]205[.]151:443

October 21, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 206[.]119[.]205[.]85:443

October 21, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 206[.]119[.]205[.]4:443

October 21, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – ransomware – 8fde8356e42e1bffe6c17ee82f0cbe43

October 21, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomware, upxMD5: 8fde8356e42e1bffe6c17ee82f0cbe43SHA1: 5fdb9ae3ada1ab7a60ac0e6dbe473f5866f8980bANALYSIS DATE: 2022-10-21T09:16:53ZTTPS: T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – djvu – 95241c3bc1900fbeef743479073f82dc

October 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 95241c3bc1900fbeef743479073f82dcSHA1: 81b171f4fe1e769f85c67cbd47e10075960a2c73ANALYSIS DATE: 2022-10-21T09:20:49ZTTPS: T1060, T1112, T1082, T1053,...

Malware Analysis – wannacry – 15f71852c26b3668b8a29011a13569f9

October 21, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: 15f71852c26b3668b8a29011a13569f9SHA1: 5c05775644c507b425fd99de73477ecb9ef293fcANALYSIS DATE: 2022-10-21T09:20:29ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – wannacry – 28e8c10d07e7dc23301be62f5a7feb0c

October 21, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: 28e8c10d07e7dc23301be62f5a7feb0cSHA1: 5dbf1480615a29dea5c9589433bf3541dffccfb0ANALYSIS DATE: 2022-10-21T09:20:22ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Cobalt Stike Beacon Detected – 206[.]119[.]205[.]14:443

October 21, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 206[.]119[.]205[.]247:443

October 21, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 206[.]119[.]205[.]155:443

October 21, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 206[.]119[.]205[.]154:443

October 21, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – danabot – 34dac80c97059a81bd409cb658666582

October 21, 2022

Score: 10 MALWARE FAMILY: danabotTAGS:family:danabot, family:djvu, family:smokeloader, backdoor, banker, collection, discovery, persistence, ransomware, trojanMD5: 34dac80c97059a81bd409cb658666582SHA1: 037e1563852f7e3e9febcadaf9a14f45ffcd66daANALYSIS DATE: 2022-10-21T09:33:16ZTTPS: T1082, T1012,...

Malware Analysis – djvu – 5b8713487da08ae104fc4b80f7c7fa90

October 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 5b8713487da08ae104fc4b80f7c7fa90SHA1: de2f46346055d9a21e4a20db6d63e3cd16a2a8bcANALYSIS DATE: 2022-10-21T09:48:52ZTTPS: T1053, T1012, T1005, T1081,...

Malware Analysis – djvu – fef7cf385ca2cce744b82dd651f86db4

October 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: fef7cf385ca2cce744b82dd651f86db4SHA1: 68444a895fde67f7b9a8db6bb17d5c02cb704552ANALYSIS DATE: 2022-10-21T09:26:31ZTTPS: T1082, T1005, T1081, T1012,...

Malware Analysis – djvu – f52b4e894b2d577073ef81610150e2a4

October 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: f52b4e894b2d577073ef81610150e2a4SHA1: b3aa05260ad6b0cb6c3cd8705968e8e5d8ebb46bANALYSIS DATE: 2022-10-21T09:36:43ZTTPS: T1012, T1005, T1081, T1222,...

Cobalt Stike Beacon Detected – 20[.]73[.]54[.]98:80

October 21, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 104[.]208[.]74[.]203:80

October 21, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 149[.]255[.]132[.]91:443

October 21, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 1[.]14[.]60[.]232:5555

October 21, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – phobos – d5babdaf2abe7ba35c9443f1ca6f8cfa

October 21, 2022

Score: 10 MALWARE FAMILY: phobosTAGS:family:phobos, evasion, persistence, ransomware, spyware, stealerMD5: d5babdaf2abe7ba35c9443f1ca6f8cfaSHA1: cb77b68d92d0df3e185dcb648731514c5911dcdcANALYSIS DATE: 2022-10-21T10:49:10ZTTPS: T1490, T1059, T1107, T1005, T1081, T1060,...

threatintel

Malware Analysis – wannacry – 6fde18afcf48e21e23c7984487abf6b9

Malware Analysis – djvu – 3c37d81bc22dbb23d274d312e0be5abe

Malware Analysis – ransomware – 6d9512776c224ad17a26a1ebb11c4057

Cobalt Stike Beacon Detected – 204[.]10[.]120[.]109:443

Cobalt Stike Beacon Detected – 206[.]119[.]205[.]151:443

Cobalt Stike Beacon Detected – 206[.]119[.]205[.]85:443

Cobalt Stike Beacon Detected – 206[.]119[.]205[.]4:443

Malware Analysis – ransomware – 8fde8356e42e1bffe6c17ee82f0cbe43

Malware Analysis – djvu – 95241c3bc1900fbeef743479073f82dc

Malware Analysis – wannacry – 15f71852c26b3668b8a29011a13569f9

Malware Analysis – wannacry – 28e8c10d07e7dc23301be62f5a7feb0c

Cobalt Stike Beacon Detected – 206[.]119[.]205[.]14:443

Cobalt Stike Beacon Detected – 206[.]119[.]205[.]247:443

Cobalt Stike Beacon Detected – 206[.]119[.]205[.]155:443

Cobalt Stike Beacon Detected – 206[.]119[.]205[.]154:443

Malware Analysis – danabot – 34dac80c97059a81bd409cb658666582

Malware Analysis – djvu – 5b8713487da08ae104fc4b80f7c7fa90

Malware Analysis – djvu – fef7cf385ca2cce744b82dd651f86db4

Malware Analysis – djvu – f52b4e894b2d577073ef81610150e2a4

Cobalt Stike Beacon Detected – 20[.]73[.]54[.]98:80

Cobalt Stike Beacon Detected – 104[.]208[.]74[.]203:80

Cobalt Stike Beacon Detected – 149[.]255[.]132[.]91:443

Cobalt Stike Beacon Detected – 1[.]14[.]60[.]232:5555

Malware Analysis – phobos – d5babdaf2abe7ba35c9443f1ca6f8cfa

CVE Alert: CVE-2025-20086

CVE Alert: CVE-2025-23040

CVE Alert: CVE-2025-20088

CVE Alert: CVE-2025-0481

CVE Alert: CVE-2025-0480

You may have missed