OSINT

Malware Analysis – – de74fa2f38bcb8edff5987ea42007138

January 16, 2023

Score: 1 MALWARE FAMILY: TAGS:MD5: de74fa2f38bcb8edff5987ea42007138SHA1: 7b2eec524a7e4392876ebfec6db31595e3f992f9ANALYSIS DATE: 2023-01-16T02:34:55ZTTPS: T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – djvu – 2da6d4339db80838dc502db0b617cb73

January 16, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 2da6d4339db80838dc502db0b617cb73SHA1: 8ddff06b81d2730a5c0936b58fb09a152e2d344cANALYSIS DATE: 2023-01-16T03:36:47ZTTPS: T1012, T1222, T1005, T1081,...

Malware Analysis – ransomware – 66713a3d9a76e1f63ba52d9911c6f85a

January 16, 2023

Score: 5 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 66713a3d9a76e1f63ba52d9911c6f85aSHA1: b679ab31f98d221793d2049c68bf5864322c1f08ANALYSIS DATE: 2023-01-16T05:26:27ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

TikTok slapped with $5.4 million fine over cookie opt-out feature

January 16, 2023

France's data protection authority (CNIL) has fined TikTok UK and TikTok Ireland €5,000,000 for making it difficult for users of...

Cobalt Stike Beacon Detected – 179[.]43[.]156[.]148:4433

January 16, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 45[.]195[.]8[.]162:4443

January 16, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – b75e4e75719c900be054b224a5221c07

January 16, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: b75e4e75719c900be054b224a5221c07SHA1: b594226373158a43cfee05bddfdc857c8f48cc2dANALYSIS DATE: 2023-01-15T21:10:34ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – dcrat – 2a08f537ca29735e25fc479034f46e43

January 16, 2023

Score: 10 MALWARE FAMILY: dcratTAGS:family:dcrat, adware, discovery, evasion, infostealer, persistence, ransomware, rat, spyware, stealer, trojanMD5: 2a08f537ca29735e25fc479034f46e43SHA1: 003fbfa6c1b854ee5832bb11546a1996dfe863acANALYSIS DATE: 2023-01-15T21:06:25ZTTPS: T1057,...

Malware Analysis – djvu – f197b19f2be5cb041a172f0d857d77da

January 16, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: f197b19f2be5cb041a172f0d857d77daSHA1: ec2475a61ae50baf7ded46e61624af270a1b58b9ANALYSIS DATE: 2023-01-15T21:46:44ZTTPS: T1222, T1082, T1053, T1012,...

Malware Analysis – gcleaner – fccdc206eb894b1dbcb6ad660a40ee95

January 16, 2023

Score: 10 MALWARE FAMILY: gcleanerTAGS:family:gcleaner, family:raccoon, family:redline, family:rhadamanthys, botnet:eb3a206cd939601b2a6d00ea009a6d7e, discovery, infostealer, loader, persistence, ransomware, spyware, stealer, upxMD5: fccdc206eb894b1dbcb6ad660a40ee95SHA1: ecc4470565cefa1e69a2405e53e6264905f5ae7eANALYSIS DATE:...

Malware Analysis – banker – 90e2dc06ef7bad6290395185f376ce4f

January 16, 2023

Score: 8 MALWARE FAMILY: bankerTAGS:banker, ransomwareMD5: 90e2dc06ef7bad6290395185f376ce4fSHA1: 43cd9b028dc8e3e85b114b509c59f8fe9a16db54ANALYSIS DATE: 2023-01-15T22:32:49ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – djvu – b030f2d7b0d433544f85b28eef0fcc05

January 16, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: b030f2d7b0d433544f85b28eef0fcc05SHA1: de8c121a6eaba0cbbb44d8c1349093f462018570ANALYSIS DATE: 2023-01-15T23:30:44ZTTPS: T1012, T1053, T1060, T1112,...

Malware Analysis – discovery – 8fc76676f1dc8184f7f20a1aef6baa66

January 15, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: 8fc76676f1dc8184f7f20a1aef6baa66SHA1: 5d8671bf023982bb25fb1cc1e4b77f0cf3ef6019ANALYSIS DATE: 2023-01-15T16:43:44ZTTPS: T1112, T1042, T1060, T1012, T1082 ScoreMeaningExample10Known badA malware family...

Malware Analysis – djvu – 9e1cb6d53dac023bc1d00b41dd40b129

January 15, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 9e1cb6d53dac023bc1d00b41dd40b129SHA1: 61e6f7f37c454872b746cde3d5db3af9ef118c1eANALYSIS DATE: 2023-01-15T17:18:00ZTTPS: T1012, T1082, T1005, T1081,...

Malware Analysis – – 86986763bf7e37e43958ce829f8d28bb

January 15, 2023

Score: 1 MALWARE FAMILY: TAGS:MD5: 86986763bf7e37e43958ce829f8d28bbSHA1: cb8b579fb7f4cc1ec1c0ae4332393c02713afa76ANALYSIS DATE: 2023-01-15T17:40:54ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – 51e46b98e4c12a45cb16ee094737e22a

January 15, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 51e46b98e4c12a45cb16ee094737e22aSHA1: 340165063ae514b0e369b07054b53393b12da48dANALYSIS DATE: 2023-01-15T16:58:39ZTTPS: T1005, T1081, T1012, T1082,...

37c050d7447d6edf46fd8adff99ef7275acb57961cb1b5136cf0715f17090d95

AVIator – Antivirus Evasion Project

January 15, 2023

AviAtor Ported to NETCore 5 with an updated UI AV|Ator About://name AV: AntiVirus Ator: Is a swordsman, alchemist, scientist, magician,...

Cobalt Stike Beacon Detected – 23[.]224[.]39[.]41:8081

January 15, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 199[.]253[.]29[.]85:443

January 15, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Daily Vulnerability Trends: Sun Jan 15 2023

January 15, 2023

Daily Vulnerability Trends (sourced from VulnMon) CVE NAMECVE DescriptionCVE-2022-41099BitLocker Security Feature Bypass Vulnerability.CVE-2023-21674Windows Advanced Local Procedure Call (ALPC) Elevation of...

Canada’s largest alcohol retailer’s site hacked to steal credit cards

January 15, 2023

The Liquor Control Board of Ontario (LCBO), a Canadian government enterprise and the country's largest beverage alcohol retailer, revealed that...

Brave browser’s new Snowflake feature help bypass Tor blocks

January 15, 2023

Brave Browser version 1.47 was released yesterday, adding the Snowflake extension in the software's settings, enabling users to turn their...

CircleCI’s hack caused by malware stealing engineer’s 2FA-backed session

January 15, 2023

Hackers breached CircleCi in December after an engineer became infected with information-stealing malware that their 2FA-backed SSO session cookie, allowing access...

Malware Analysis – joker – 1e288142a45ebe7244ab899798cea643

January 15, 2023

Score: 10 MALWARE FAMILY: jokerTAGS:family:joker, evasion, infostealer, ransomware, trojanMD5: 1e288142a45ebe7244ab899798cea643SHA1: 078295d1cda8319ed69f64b5443e4d89705d8523ANALYSIS DATE: 2023-01-15T04:36:48ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

OSINT

Malware Analysis – – de74fa2f38bcb8edff5987ea42007138

Malware Analysis – djvu – 2da6d4339db80838dc502db0b617cb73

Malware Analysis – ransomware – 66713a3d9a76e1f63ba52d9911c6f85a

TikTok slapped with $5.4 million fine over cookie opt-out feature

Cobalt Stike Beacon Detected – 179[.]43[.]156[.]148:4433

Cobalt Stike Beacon Detected – 45[.]195[.]8[.]162:4443

Malware Analysis – djvu – b75e4e75719c900be054b224a5221c07

Malware Analysis – dcrat – 2a08f537ca29735e25fc479034f46e43

Malware Analysis – djvu – f197b19f2be5cb041a172f0d857d77da

Malware Analysis – gcleaner – fccdc206eb894b1dbcb6ad660a40ee95

Malware Analysis – banker – 90e2dc06ef7bad6290395185f376ce4f

Malware Analysis – djvu – b030f2d7b0d433544f85b28eef0fcc05

Malware Analysis – discovery – 8fc76676f1dc8184f7f20a1aef6baa66

Malware Analysis – djvu – 9e1cb6d53dac023bc1d00b41dd40b129

Malware Analysis – – 86986763bf7e37e43958ce829f8d28bb

Malware Analysis – djvu – 51e46b98e4c12a45cb16ee094737e22a

AVIator – Antivirus Evasion Project

Cobalt Stike Beacon Detected – 23[.]224[.]39[.]41:8081

Cobalt Stike Beacon Detected – 199[.]253[.]29[.]85:443

Daily Vulnerability Trends: Sun Jan 15 2023

Canada’s largest alcohol retailer’s site hacked to steal credit cards

Brave browser’s new Snowflake feature help bypass Tor blocks

CircleCI’s hack caused by malware stealing engineer’s 2FA-backed session

Malware Analysis – joker – 1e288142a45ebe7244ab899798cea643

Data Encryption Demystified A Practical Guide for Securing Your Data

Cobalt Strike Beacon Detected – 101[.]200[.]193[.]211:8090

Cobalt Strike Beacon Detected – 47[.]113[.]217[.]92:8001

Cobalt Strike Beacon Detected – 121[.]40[.]112[.]176:8087

Cobalt Strike Beacon Detected – 43[.]143[.]114[.]43:8090

You may have missed