Cobalt Stike Beacon Detected – 1[.]117[.]117[.]162:8888
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
OSINT
Cobalt Stike Beacon Detected – 202[.]182[.]117[.]134:8087
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 103[.]105[.]49[.]52:80
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Malware Analysis – djvu – 30f074e92a9351c582e31b3be1e4a6c3
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:rhadamanthys, family:smokeloader, family:vidar, botnet:19, botnet:test, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5:...
Malware Analysis – djvu – 1c7c18d59d23a9901b0e2b8e48dcde2c
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, stealerMD5: 1c7c18d59d23a9901b0e2b8e48dcde2cSHA1: 4579072148edd252a0a6eaa87eea1a0f73599258ANALYSIS DATE: 2023-01-19T11:39:45ZTTPS: T1222, T1082, T1130, T1112, T1060...
Malware Analysis – vidar – 6fb6025c04ba6fa3d4820aea944e3667
Score: 10 MALWARE FAMILY: vidarTAGS:family:vidar, botnet:408, discovery, persistence, ransomware, spyware, stealerMD5: 6fb6025c04ba6fa3d4820aea944e3667SHA1: b5fa73ed8561665ddaa9b9baecb427dd166d034bANALYSIS DATE: 2023-01-19T09:28:45ZTTPS: T1005, T1081, T1130, T1112, T1082,...
Malware Analysis – djvu – 892865bd136926da1ef72498bb1fb355
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 892865bd136926da1ef72498bb1fb355SHA1: 53103a535dd72d6156b0a2ba739071b98ec549a8ANALYSIS DATE: 2023-01-19T11:02:44ZTTPS: T1012, T1082, T1005, T1081,...
Daily Vulnerability Trends: Thu Jan 19 2023
Daily Vulnerability Trends (sourced from VulnMon) CVE NAMECVE DescriptionCVE-2021-31985Microsoft Defender Remote Code Execution VulnerabilityCVE-2023-21674Windows Advanced Local Procedure Call (ALPC) Elevation...
Malware Analysis – – bf9859562a838793808f162f59a451a6
Score: 3 MALWARE FAMILY: TAGS:MD5: bf9859562a838793808f162f59a451a6SHA1: 6edf259df3a9031428ca8a2e56c4da1caff643afANALYSIS DATE: 2023-01-19T03:46:06ZTTPS: T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...
Malware Analysis – smokeloader – 0ed65c594991f0a57f7209966ce2c081
Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 0ed65c594991f0a57f7209966ce2c081SHA1: 101e646cddf7eb518ed185e1946b3a2715b21057ANALYSIS DATE: 2023-01-19T03:05:05ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...
Malware Analysis – djvu – 1e61d2b0a41e30bb734ddbe53bb66880
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 1e61d2b0a41e30bb734ddbe53bb66880SHA1: 26dc0624b6d0286043cf55c3299bd14161f9e19fANALYSIS DATE: 2023-01-19T03:00:52ZTTPS: T1060, T1112, T1012, T1082,...
Malware Analysis – discovery – e2c876ff5b1f24b59d928e595234cdef
Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, evasion, exploit, vmprotectMD5: e2c876ff5b1f24b59d928e595234cdefSHA1: 82d06b09b2a8c514929aab293242d4796d4ee39fANALYSIS DATE: 2023-01-19T04:56:27ZTTPS: T1031, T1562, T1489, T1222, T1112, T1082, T1053, T1102,...
Malware Analysis – – 6e5b443ec0bb37d7d7a332ee1de244b0
Score: 3 MALWARE FAMILY: TAGS:MD5: 6e5b443ec0bb37d7d7a332ee1de244b0SHA1: 0973b62f00138342e2f605fd04fe66a408611ab5ANALYSIS DATE: 2023-01-19T03:49:06ZTTPS: T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...
Malware Analysis – djvu – 1aef2be1b15c67a54cbc186937e4066d
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:rhadamanthys, family:smokeloader, family:vidar, botnet:19, botnet:test, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5:...
Malware Analysis – djvu – 3ab3ff502bb6d6cda926109ce676fcbe
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:rhadamanthys, family:smokeloader, family:vidar, botnet:19, botnet:test, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5:...
Malware Analysis – djvu – 81df0f3908f65a7a45c7a927a846f0c0
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, stealerMD5: 81df0f3908f65a7a45c7a927a846f0c0SHA1: 721c8a579f4cd376f2e286d29f517b0eb99aa018ANALYSIS DATE: 2023-01-19T05:35:02ZTTPS: T1082, T1053, T1130, T1112, T1060,...
Malware Analysis – djvu – 7aeb0ae6802928053059780fd330e216
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, stealerMD5: 7aeb0ae6802928053059780fd330e216SHA1: a1ce523f846ef964c3d092c155a4001a0110a513ANALYSIS DATE: 2023-01-19T05:34:29ZTTPS: T1222, T1082, T1053, T1130, T1112,...
Malware Analysis – smokeloader – 6711a1ac45718cb729e8698131d914bc
Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 6711a1ac45718cb729e8698131d914bcSHA1: ccacfb714bd9de343d6e923a54736fadda5980cdANALYSIS DATE: 2023-01-19T05:33:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...
Malware Analysis – djvu – 14e34d7cd3c4a50e368fe65dd20cf05f
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 14e34d7cd3c4a50e368fe65dd20cf05fSHA1: 1b776fa4abe2c2b4429cc9460696c1bb4339ea70ANALYSIS DATE: 2023-01-19T05:33:20ZTTPS: T1005, T1081, T1060, T1112,...
Cobalt Stike Beacon Detected – 1[.]14[.]198[.]89:8022
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 173[.]255[.]211[.]246:9090
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 82[.]157[.]149[.]194:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 140[.]143[.]232[.]178:5555
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 138[.]68[.]117[.]60:80
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
