OpcodeIntel

Independent Threat & Malware Researcher

[OpcodeIntel @OpcodeIntel]

Clearnet IPs of The Seven Deadly Sins Ransomware group.

185.100.85.146
37.72.140.179
193.24.123.177

@malwrhunterteam @skocherhan

#ThreatIntel #Malware #Ransomware

[OpcodeIntel @OpcodeIntel]

@skocherhan @smica83 @malwrhunterteam

[OpcodeIntel @OpcodeIntel]

ommartbd[.]com
mcwlogin[.]club

@skocherhan @smica83 @malwrhunterteam

#terminalfix #clickfix #ThreatIntel #Malware

[OpcodeIntel @OpcodeIntel]

ULOSE Ransomware Group

egm34gsyx65wb6jyqds4esvkskl34barx4robuebjhqpc4dfeavg7fyd[.]onion
64.227.132.179

@skocherhan

#ThreatIntel #Ransomware

[OpcodeIntel @OpcodeIntel]

ciksecrets[.]net

@skocherhan @malwrhunterteam @smica83

#CIKLEAK #ThreatIntel #Malware

[OpcodeIntel @OpcodeIntel]

@malwrhunterteam @skocherhan @smica83

[OpcodeIntel @OpcodeIntel]

jzqixing[.]com/transtioncash
7f9bac80fbb44bc60e4ec9e85c875d33

@malwrhunterteam @skocherhan @smica83

#Dropper #Malware #ThreatIntel

[OpcodeIntel @OpcodeIntel]

@malwrhunterteam @skocherhan @smica83 BTMOB

C2: 47.74.43.34

[masaomi346 @masaomi346]

e-Taxを装ったAndroidマルウェア
hxxps://alhotel-pau-etzax.com/
hxxps://fastestwebbrows-etzax.com/
hxxps://kingashotel-etzax.com/
hxxps://marblefallslake-etzax.com/
hxxps://sanpedrodejuj-etzax.com/
https://t.co/043LIuxPZR
#Phishing #フィッシング詐欺 #malware

[OpcodeIntel @OpcodeIntel]

llamafile[.]info
d71efe357fcf18e057e377c675f8f773
05f9e93c26d193a5a227f4741a041d36

@malwrhunterteam @smica83 @skocherhan

#Suspicious #ThreatIntel #Malware

[OpcodeIntel @OpcodeIntel]

@skocherhan @smica83 IP: 111.90.147[.]209

#Phishing #SARCOMA #Ransomware #ThreatIntel

[OpcodeIntel @OpcodeIntel]

111.90.147[.]209
sarcomagroup[.]com

#SARCOMA #Ransomware #ThreatIntel

@skocherhan @smica83

[OpcodeIntel @OpcodeIntel]

@malwrhunterteam @skocherhan @smica83 91.202.233.104

#shinyhunters

[OpcodeIntel @OpcodeIntel]

37.77.150.95
176.120.22.24

#shinyhunters

#ThreatIntel #Ransomware

@malwrhunterteam @skocherhan @smica83

[OpcodeIntel @OpcodeIntel]

@malwrhunterteam @skocherhan @smica83

[OpcodeIntel @OpcodeIntel]

Android malware infrastructure supporting multilingual lures - #Portuguese, #Spanish, #English & #German.

8fdbfed9313f1ce2e2723b8acf20b471
31855414c3b8c5e8bdc7c0bd3200e29f
rastreioproduct.duckdns[.]org

@malwrhunterteam @skocherhan @smica83

#ThreatIntel #Malware

[OpcodeIntel @OpcodeIntel]

Botnet 121

net121[.]site

@skocherhan

#ThreatIntel #Malware

[OpcodeIntel @OpcodeIntel]

n0n Ransomware Group

n0n[.]to

@smica83 @skocherhan

#ThreatIntel #Ransomware

[ܛܔܔܔܛܔܛܔܛ @skocherhan]

'国税還付システム - 還付金をいつでも確認 - Google Play のアプリ'

poiwalsd[.]com

192[.]238[.]160[.]157
AS138995 Antbox Networks Limited 🇯🇵

gdfhlsf[.]s3[.]us-east-1[.]amazonaws[.]com/e6a89e8ae07e/sched/109823/sch_2aa15934e9471499/tax-refund[.]apk
kong06[.]s3[.]us-east-1[.]amazonaws[.]com/48cc7ae97785/sched/109823/sch_e3affab164a6f14e/tax-refund[.]apk
#Phishing #フィッシング詐欺 #malware

[OpcodeIntel @OpcodeIntel]

Draft_Note_First_Virtual_Preparatory_Meeting_XVIII_BRICS_Summit.lnk 3dccdb228de18152502489a7d1a093982ead8a103546191c6fcfc01cd40e62a6

@skocherhan @malwrhunterteam @smica83

#ThreatIntel #Malware