OSINT

Malware Analysis – phobos – 57c5c9f7dd743b7f53fef622ddfaa455

October 9, 2022

Score: 10 MALWARE FAMILY: phobosTAGS:family:phobos, evasion, persistence, ransomware, spyware, stealerMD5: 57c5c9f7dd743b7f53fef622ddfaa455SHA1: 13122e4d18672561479f988f850dd191c3431c78ANALYSIS DATE: 2022-10-09T16:51:25ZTTPS: T1490, T1059, T1107, T1005, T1081, T1060,...

Malware Analysis – sodinokibi – be9c59183353af01fb3cb23055948e42

October 9, 2022

Score: 10 MALWARE FAMILY: sodinokibiTAGS:family:sodinokibi, botnet:$2b$13$smhroaoopkdhdonl/mu1f.ngqdxcrizvxx5jgju1ep6jzpd9z7w6o, campaign:143, ransomwareMD5: be9c59183353af01fb3cb23055948e42SHA1: c9fe087cd656f1d63c378e55ef9f47bb330a5be1ANALYSIS DATE: 2022-10-09T16:57:55ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Security Affairs newsletter Round 387

October 9, 2022

A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs free for...

CommonSpirit hospital chains hit by ransomware, patients are facing problems

October 9, 2022

CommonSpirit, one of the largest hospital chains in the US, suffered a ransomware cyberattack that impacted its operations. Common Spirit,...

EvilnoVNC – Ready To Go Phishing Platform

October 9, 2022

EvilnoVNC is a Ready to go Phishing Platform. Unlike other phishing techniques, EvilnoVNC allows 2FA bypassing by using a real...

Cobalt Stike Beacon Detected – 84[.]32[.]128[.]13:80

October 9, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 43[.]138[.]59[.]205:80

October 9, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 138[.]68[.]69[.]19:443

October 9, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 110[.]43[.]34[.]176:443

October 9, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 101[.]42[.]221[.]54:443

October 9, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – fc297ecbdd6f2ebf586541caaa5166ea

October 9, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: fc297ecbdd6f2ebf586541caaa5166eaSHA1: 9ad9318fe86e6102d32f0efd10ab4bb54f9e02a3ANALYSIS DATE: 2022-10-09T08:14:31ZTTPS: T1012, T1120,...

Malware Analysis – djvu – a31728f1578939de11bcf95509015f35

October 9, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: a31728f1578939de11bcf95509015f35SHA1: 0fce37afab13319f182849da37d97f5e75774794ANALYSIS DATE: 2022-10-09T08:41:02ZTTPS: T1114, T1005,...

Malware Analysis – djvu – 42ffdba9b92798093c337aae0be68cd1

October 9, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 42ffdba9b92798093c337aae0be68cd1SHA1: a9bce0279a067d5485f391630a49963296d59f97ANALYSIS DATE: 2022-10-09T08:32:34ZTTPS: T1012, T1082, T1053, T1005,...

Cobalt Stike Beacon Detected – 121[.]41[.]59[.]127:7500

October 9, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 46[.]175[.]148[.]53:80

October 9, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 185[.]143[.]223[.]90:443

October 9, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 81[.]68[.]193[.]9:8000

October 9, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – – 93e704fbe731304bbb9a397288e79af0

October 9, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: 93e704fbe731304bbb9a397288e79af0SHA1: 5fb23c7b3285936aa47081b7df86072e267d14b8ANALYSIS DATE: 2022-10-09T09:35:54ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – c81e1bb65525bca99bc33441f82e866b

October 9, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: c81e1bb65525bca99bc33441f82e866bSHA1: 02cefdffd53626f340cb3664504fbf1b99a87ef1ANALYSIS DATE: 2022-10-09T09:40:10ZTTPS: T1005, T1081,...

Malware Analysis – wannacry –

October 9, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, persistence, ransomware, spyware, stealer, wormMD5: SHA1: ANALYSIS DATE: 2022-10-09T08:47:34ZTTPS: T1082, T1222, T1112, T1107, T1490,...

Malware Analysis – evasion – 93e704fbe731304bbb9a397288e79af0

October 9, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 93e704fbe731304bbb9a397288e79af0SHA1: 5fb23c7b3285936aa47081b7df86072e267d14b8ANALYSIS DATE: 2022-10-09T09:36:03ZTTPS: T1490, T1059, T1107, T1053 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – evasion – fdb21d963566dca375964739e920661f

October 9, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealer, trojanMD5: fdb21d963566dca375964739e920661fSHA1: 80320a8ae8d137fe9e8974ab10b2f46a5db7f9dcANALYSIS DATE: 2022-10-09T09:40:34ZTTPS: T1112, T1158, T1088, T1089, T1082, T1005,...

Malware Analysis – collection – 93cbe4ed3d46abe732a124a41e7147a2

October 9, 2022

Score: 9 MALWARE FAMILY: collectionTAGS:collection, evasion, persistence, ransomware, trojanMD5: 93cbe4ed3d46abe732a124a41e7147a2SHA1: 94a24be60d90479ce27f7787a86678472aabdc6eANALYSIS DATE: 2022-10-09T09:47:57ZTTPS: T1107, T1490, T1060, T1112, T1114, T1082 ScoreMeaningExample10Known...

Malware Analysis – djvu – d5966afb8379cf36f8aff301e2553dcc

October 9, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: d5966afb8379cf36f8aff301e2553dccSHA1: bcf638c81de10881cc133003a5d9f89df1225f4dANALYSIS DATE: 2022-10-09T10:11:54ZTTPS: T1114, T1005,...

OSINT

Malware Analysis – phobos – 57c5c9f7dd743b7f53fef622ddfaa455

Malware Analysis – sodinokibi – be9c59183353af01fb3cb23055948e42

Security Affairs newsletter Round 387

CommonSpirit hospital chains hit by ransomware, patients are facing problems

EvilnoVNC – Ready To Go Phishing Platform

Cobalt Stike Beacon Detected – 84[.]32[.]128[.]13:80

Cobalt Stike Beacon Detected – 43[.]138[.]59[.]205:80

Cobalt Stike Beacon Detected – 138[.]68[.]69[.]19:443

Cobalt Stike Beacon Detected – 110[.]43[.]34[.]176:443

Cobalt Stike Beacon Detected – 101[.]42[.]221[.]54:443

Malware Analysis – djvu – fc297ecbdd6f2ebf586541caaa5166ea

Malware Analysis – djvu – a31728f1578939de11bcf95509015f35

Malware Analysis – djvu – 42ffdba9b92798093c337aae0be68cd1

Cobalt Stike Beacon Detected – 121[.]41[.]59[.]127:7500

Cobalt Stike Beacon Detected – 46[.]175[.]148[.]53:80

Cobalt Stike Beacon Detected – 185[.]143[.]223[.]90:443

Cobalt Stike Beacon Detected – 81[.]68[.]193[.]9:8000

Malware Analysis – – 93e704fbe731304bbb9a397288e79af0

Malware Analysis – djvu – c81e1bb65525bca99bc33441f82e866b

Malware Analysis – wannacry –

Malware Analysis – evasion – 93e704fbe731304bbb9a397288e79af0

Malware Analysis – evasion – fdb21d963566dca375964739e920661f

Malware Analysis – collection – 93cbe4ed3d46abe732a124a41e7147a2

Malware Analysis – djvu – d5966afb8379cf36f8aff301e2553dcc

[STORMOUS] – Ransomware Victim: French Gov

Aros Turns Any Pc Into An Amiga With Usb Bootable Distro

CVE Alert: CVE-2024-51553

CVE Alert: CVE-2024-51552

CVE Alert: CVE-2024-48848

You may have missed