OSINT

Malware Analysis – djvu – 58ff38bdff8438163ca9fbe87236b7eb

October 6, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 58ff38bdff8438163ca9fbe87236b7ebSHA1: f1e258bf5c8505ee04739c331e2304669b2b3371ANALYSIS DATE: 2022-10-06T15:41:09ZTTPS:...

Malware Analysis – redline – 1259ae3073eba6af139f7a5520da1bc6

October 6, 2022

Score: 10 MALWARE FAMILY: redlineTAGS:family:redline, discovery, infostealer, persistence, ransomware, spywareMD5: 1259ae3073eba6af139f7a5520da1bc6SHA1: 7bd280d484c60373f276322eacb11566b16af368ANALYSIS DATE: 2022-10-06T16:11:55ZTTPS: T1012, T1112, T1005, T1081, T1060, T1082,...

Malware Analysis – smokeloader – 5dbee5162f032bf484ddbcc68eebbf42

October 6, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 5dbee5162f032bf484ddbcc68eebbf42SHA1: 07e86d83adc3e04caf149922c48085b7639b6837ANALYSIS DATE: 2022-10-06T16:34:57ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 6fbde990ad1659a4063bbcc3099ae82a

October 6, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 6fbde990ad1659a4063bbcc3099ae82aSHA1: f6e725c2280469ab5a3c39cc82cfb03dec67a6bcANALYSIS DATE: 2022-10-06T16:32:33ZTTPS: T1053, T1005, T1081, T1222,...

Malware Analysis – smokeloader – 5dbee5162f032bf484ddbcc68eebbf42

October 6, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 5dbee5162f032bf484ddbcc68eebbf42SHA1: 07e86d83adc3e04caf149922c48085b7639b6837ANALYSIS DATE: 2022-10-06T16:32:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 5dbee5162f032bf484ddbcc68eebbf42

October 6, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 5dbee5162f032bf484ddbcc68eebbf42SHA1: 07e86d83adc3e04caf149922c48085b7639b6837ANALYSIS DATE: 2022-10-06T16:38:20ZTTPS:...

Cisco fixed two high-severity bugs in Communications, Networking Products

October 6, 2022

Cisco fixed high-severity flaws in some of its networking and communications products, including Enterprise NFV, Expressway and TelePresence. Cisco announced...

City of Tucson Data Breach impacted 123,500 individuals

October 6, 2022

The City of Tucson, Arizona disclosed a data breach, the incident was discovered in May 2022 and impacted 123,500 individuals....

Arsenal – Recon Tool installer

October 6, 2022

Arsenal is a Simple shell script (Bash) used to install the most important tools and requirements for your environment and...

19-Year-Old man arrested for misusing leaked record from Optus Breach

October 6, 2022

The Australian Federal Police (AFP) arrested a 19-year-old teen from Sydney for attempting to use data from the Optus data...

Cobalt Stike Beacon Detected – 23[.]224[.]42[.]32:443

October 6, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – evasion – b1315f90a7f98c5f7e187104615bf20f

October 6, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: b1315f90a7f98c5f7e187104615bf20fSHA1: 49f773c7e7cf66d715de2c2f7fd5352515918c0dANALYSIS DATE: 2022-10-06T08:28:22ZTTPS: T1082, T1088, T1089, T1112, T1031, T1107, T1490, T1098,...

Malware Analysis – ransomware – a1ffce6c80f805b72c61cc6225457c8b

October 6, 2022

Score: 5 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: a1ffce6c80f805b72c61cc6225457c8bSHA1: 47b2e3cd345f535da7abfa4a02284dcdb2fe177cANALYSIS DATE: 2022-10-06T08:15:46ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – cd13e52122e4ea82def4bd8303bfa3fb

October 6, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: cd13e52122e4ea82def4bd8303bfa3fbSHA1: 7f4f730b297d30a04364360ccf06636dcd1d25c5ANALYSIS DATE: 2022-10-06T08:28:04ZTTPS: T1005, T1081, T1012, T1082,...

Cobalt Stike Beacon Detected – 49[.]234[.]137[.]223:80

October 6, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 43[.]143[.]172[.]113:443

October 6, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 62[.]182[.]159[.]147:443

October 6, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 120[.]25[.]167[.]104:443

October 6, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – smokeloader – 34a120c01759401577fc71beca944aa4

October 6, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 34a120c01759401577fc71beca944aa4SHA1: c569f5a37ef5d5e8bbfabc059b3e712491dc88ffANALYSIS DATE: 2022-10-06T08:31:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 34a120c01759401577fc71beca944aa4

October 6, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 34a120c01759401577fc71beca944aa4SHA1: c569f5a37ef5d5e8bbfabc059b3e712491dc88ffANALYSIS DATE: 2022-10-06T08:30:48ZTTPS:...

Malware Analysis – djvu – 2867c3287900f54a65dc7654ba2d2f5b

October 6, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 2867c3287900f54a65dc7654ba2d2f5bSHA1: 6ba0115dd269992658cfa0b1a6d1b10bd2c48947ANALYSIS DATE: 2022-10-06T08:35:27ZTTPS: T1060, T1112, T1082, T1005,...

Malware Analysis – ransomware – 176c0e35328b032619dc485652148f6c

October 6, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 176c0e35328b032619dc485652148f6cSHA1: 00772f0f4bc58c23b4e1d338ba9ee3a1abd0aebdANALYSIS DATE: 2022-10-06T09:11:03ZTTPS: T1107, T1490, T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Cobalt Stike Beacon Detected – 149[.]28[.]76[.]119:80

October 6, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 125[.]124[.]182[.]109:9000

October 6, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

OSINT

Malware Analysis – djvu – 58ff38bdff8438163ca9fbe87236b7eb

Malware Analysis – redline – 1259ae3073eba6af139f7a5520da1bc6

Malware Analysis – smokeloader – 5dbee5162f032bf484ddbcc68eebbf42

Malware Analysis – djvu – 6fbde990ad1659a4063bbcc3099ae82a

Malware Analysis – smokeloader – 5dbee5162f032bf484ddbcc68eebbf42

Malware Analysis – djvu – 5dbee5162f032bf484ddbcc68eebbf42

Cisco fixed two high-severity bugs in Communications, Networking Products

City of Tucson Data Breach impacted 123,500 individuals

Arsenal – Recon Tool installer

19-Year-Old man arrested for misusing leaked record from Optus Breach

Cobalt Stike Beacon Detected – 23[.]224[.]42[.]32:443

Malware Analysis – evasion – b1315f90a7f98c5f7e187104615bf20f

Malware Analysis – ransomware – a1ffce6c80f805b72c61cc6225457c8b

Malware Analysis – djvu – cd13e52122e4ea82def4bd8303bfa3fb

Cobalt Stike Beacon Detected – 49[.]234[.]137[.]223:80

Cobalt Stike Beacon Detected – 43[.]143[.]172[.]113:443

Cobalt Stike Beacon Detected – 62[.]182[.]159[.]147:443

Cobalt Stike Beacon Detected – 120[.]25[.]167[.]104:443

Malware Analysis – smokeloader – 34a120c01759401577fc71beca944aa4

Malware Analysis – djvu – 34a120c01759401577fc71beca944aa4

Malware Analysis – djvu – 2867c3287900f54a65dc7654ba2d2f5b

Malware Analysis – ransomware – 176c0e35328b032619dc485652148f6c

Cobalt Stike Beacon Detected – 149[.]28[.]76[.]119:80

Cobalt Stike Beacon Detected – 125[.]124[.]182[.]109:9000

[INCRANSOM] – Ransomware Victim: piercecountylibrary[.]org

Cobalt Strike Beacon Detected – 47[.]109[.]82[.]220:80

Cobalt Strike Beacon Detected – 124[.]71[.]144[.]164:443

Cobalt Strike Beacon Detected – 47[.]109[.]177[.]97:4444

Cobalt Strike Beacon Detected – 39[.]106[.]152[.]200:80

You may have missed