OSINT

Malware Analysis – djvu – 0e27d37229646c4a68d258f19513bab2

February 22, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 0e27d37229646c4a68d258f19513bab2SHA1: 868e81e01cfdefebef662003fb1569d1c8634f55ANALYSIS DATE: 2023-02-22T05:35:54ZTTPS: T1005, T1081, T1012, T1222,...

Malware Analysis – djvu – 21b2fa42134d031de96e30172badfe1f

February 22, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 21b2fa42134d031de96e30172badfe1fSHA1: 1b43a994e943bd0dcb4c37b824908c6d49815450ANALYSIS DATE: 2023-02-22T05:35:08ZTTPS: T1012, T1082, T1053, T1005,...

Malware Analysis – djvu – eb3a93b87aeebce36ef2c599a8a6dfbc

February 22, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:19, backdoor, discovery, evasion, persistence, ransomware, stealer, trojan, vmprotectMD5: eb3a93b87aeebce36ef2c599a8a6dfbcSHA1: d8f67ac9a52e9300fbce7d667ea2f3d3e0bf65e0ANALYSIS DATE: 2023-02-22T04:31:20ZTTPS:...

VMware Patches Critical Vulnerability in Carbon Black App Control Product

February 22, 2023

VMware on Tuesday released patches to address a critical security vulnerability affecting its Carbon Black App Control product. Tracked as...

LockBit 3.0 Ransomware Victim: beacontech[.]net

February 22, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

LockBit 3.0 Ransomware Victim: vuu[.]edu

February 22, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Malware Analysis – djvu – c0904e41ae1b556e10c96b0bb560c3a3

February 22, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: c0904e41ae1b556e10c96b0bb560c3a3SHA1: 42f10936c427306bb9dd573d2b8269ea9abd0e06ANALYSIS DATE: 2023-02-21T22:11:42ZTTPS: T1060, T1112, T1222, T1005,...

Malware Analysis – djvu – 65265918b765429783ce5fa95a0622a2

February 22, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 65265918b765429783ce5fa95a0622a2SHA1: 1d703e95d884410e5877e90607cdaed2153acd27ANALYSIS DATE: 2023-02-21T22:20:06ZTTPS: T1060, T1112, T1082, T1012,...

Malware Analysis – discovery – a8cd74892388fd177dcc73a4ffcc7597

February 22, 2023

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, evasion, exploit, themidaMD5: a8cd74892388fd177dcc73a4ffcc7597SHA1: 1af61835c4e5dc78c93dad7b1352ff45350f1ae2ANALYSIS DATE: 2023-02-21T22:20:27ZTTPS: T1158, T1012, T1120, T1082, T1222 ScoreMeaningExample10Known badA malware...

Bug Bounty

BugCrowd Bug Bounty Disclosure: – privilege escalation allow the admin to takeover the org by invite the user as owner – By amitkh7888

February 22, 2023

The below information is fully automated and the information is captured from the BugCrowd Disclosure website. The information was correct...

Cobalt Stike Beacon Detected – 195[.]123[.]241[.]169:443

February 22, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 147[.]78[.]47[.]209:443

February 22, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 209[.]141[.]36[.]163:80

February 22, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 104[.]237[.]135[.]20:443

February 22, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – discovery – aaa0a4c3e66a85daa7f5d639e4cbb569

February 22, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, evasion, persistence, ransomwareMD5: aaa0a4c3e66a85daa7f5d639e4cbb569SHA1: 7cd22ae424f29b1aa127c8b19c215bdca57a3921ANALYSIS DATE: 2023-02-21T22:26:45ZTTPS: T1112, T1107, T1490, T1089, T1060, T1012, T1102, T1158,...

Malware Analysis – – 8bf945bbf9308d79875d4000db5272e2

February 22, 2023

Score: 7 MALWARE FAMILY: TAGS:MD5: 8bf945bbf9308d79875d4000db5272e2SHA1: 92f9abadb7ebc187304da07ec01469ad6958d220ANALYSIS DATE: 2023-02-21T22:33:10ZTTPS: T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – djvu – 57a2bb0db2912fc739932cd12df7bc65

February 22, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:pseudomanuscrypt, family:smokeloader, family:vidar, botnet:19, backdoor, discovery, evasion, loader, persistence, ransomware, stealer, trojan, vmprotectMD5: 57a2bb0db2912fc739932cd12df7bc65SHA1: 4d4491b07ced2422c14af94a87aec540d94a3e35ANALYSIS...

Malware Analysis – ransomware – 3907c7fbd4148395284d8e6e3c1dba5d

February 22, 2023

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 3907c7fbd4148395284d8e6e3c1dba5dSHA1: a67205dc84ec29eb71bb259b19c1a1783865c0fcANALYSIS DATE: 2023-02-21T23:41:14ZTTPS: T1005, T1081, T1018 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

MyloBot Botnet Spreading Rapidly Worldwide: Infecting Over 50,000 Devices Daily

February 21, 2023

A sophisticated botnet known as MyloBot has compromised thousands of systems, with most of them located in India, the U.S.,...

Coinbase Employee Falls for SMS Scam in Cyber Attack, Limited Data Exposed

February 21, 2023

Popular cryptocurrency exchange platform Coinbase disclosed that it experienced a cybersecurity attack that targeted its employees. The company said its...

The Future of Network Security: Predictive Analytics and ML-Driven Solutions

February 21, 2023

As the digital age evolves and continues to shape the business landscape, corporate networks have become increasingly complex and distributed....

Researchers Discover Numerous Samples of Information Stealer ‘Stealc’ in the Wild

February 21, 2023

A new information stealer called Stealc that's being advertised on the dark web could emerge as a worthy competitor to...

Malware Analysis – smokeloader – 45f9335fcefc8ff05db68a33b618b079

February 21, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 45f9335fcefc8ff05db68a33b618b079SHA1: 1928b38120ab18f78619fc4b2b477e406bfb10cfANALYSIS DATE: 2023-02-21T09:31:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – – e1ddaabd6670e833268511839fdc9fa4

February 21, 2023

Score: 1 MALWARE FAMILY: TAGS:MD5: e1ddaabd6670e833268511839fdc9fa4SHA1: ab90a6db6e088ad5c6b1ab0f095255e6e10e122aANALYSIS DATE: 2023-02-21T09:43:33ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

OSINT

Malware Analysis – djvu – 0e27d37229646c4a68d258f19513bab2

Malware Analysis – djvu – 21b2fa42134d031de96e30172badfe1f

Malware Analysis – djvu – eb3a93b87aeebce36ef2c599a8a6dfbc

VMware Patches Critical Vulnerability in Carbon Black App Control Product

LockBit 3.0 Ransomware Victim: beacontech[.]net

LockBit 3.0 Ransomware Victim: vuu[.]edu

Malware Analysis – djvu – c0904e41ae1b556e10c96b0bb560c3a3

Malware Analysis – djvu – 65265918b765429783ce5fa95a0622a2

Malware Analysis – discovery – a8cd74892388fd177dcc73a4ffcc7597

BugCrowd Bug Bounty Disclosure: – privilege escalation allow the admin to takeover the org by invite the user as owner – By amitkh7888

Cobalt Stike Beacon Detected – 195[.]123[.]241[.]169:443

Cobalt Stike Beacon Detected – 147[.]78[.]47[.]209:443

Cobalt Stike Beacon Detected – 209[.]141[.]36[.]163:80

Cobalt Stike Beacon Detected – 104[.]237[.]135[.]20:443

Malware Analysis – discovery – aaa0a4c3e66a85daa7f5d639e4cbb569

Malware Analysis – – 8bf945bbf9308d79875d4000db5272e2

Malware Analysis – djvu – 57a2bb0db2912fc739932cd12df7bc65

Malware Analysis – ransomware – 3907c7fbd4148395284d8e6e3c1dba5d

MyloBot Botnet Spreading Rapidly Worldwide: Infecting Over 50,000 Devices Daily

Coinbase Employee Falls for SMS Scam in Cyber Attack, Limited Data Exposed

The Future of Network Security: Predictive Analytics and ML-Driven Solutions

Researchers Discover Numerous Samples of Information Stealer ‘Stealc’ in the Wild

Malware Analysis – smokeloader – 45f9335fcefc8ff05db68a33b618b079

Malware Analysis – – e1ddaabd6670e833268511839fdc9fa4

Cobalt Strike Beacon Detected – 121[.]43[.]37[.]134:4434

Cobalt Strike Beacon Detected – 119[.]29[.]231[.]118:443

Cobalt Strike Beacon Detected – 39[.]101[.]74[.]162:443

Cobalt Strike Beacon Detected – 8[.]218[.]112[.]112:8880

Cobalt Strike Beacon Detected – 47[.]109[.]48[.]57:443

You may have missed