OSINT

Malware Analysis – – cfd31737ccacf6e9a0e2ac18cf3445ac

October 12, 2022

Score: 4 MALWARE FAMILY: TAGS:MD5: cfd31737ccacf6e9a0e2ac18cf3445acSHA1: 74c615ca54aaff3c5e6734efef04259290c357baANALYSIS DATE: 2022-10-12T09:58:05ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Cobalt Stike Beacon Detected – 51[.]178[.]11[.]176:80

October 12, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 43[.]138[.]66[.]190:8848

October 12, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 138[.]68[.]188[.]101:443

October 12, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 139[.]155[.]90[.]81:8443

October 12, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – xorist – e98a127ed90e67cd30344bdb691384a1

October 12, 2022

Score: 10 MALWARE FAMILY: xoristTAGS:family:xorist, persistence, ransomware, upxMD5: e98a127ed90e67cd30344bdb691384a1SHA1: a79fe32686a67aa3011d397460d748b3d149d0beANALYSIS DATE: 2022-10-12T09:58:05ZTTPS: T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – persistence – 6c42c7957278c7ac09b111490fc93cc1

October 12, 2022

Score: 8 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 6c42c7957278c7ac09b111490fc93cc1SHA1: 29f9b35533f1a6dbf47ed5dfb4144c33d33ce91bANALYSIS DATE: 2022-10-12T09:58:05ZTTPS: T1060, T1112, T1005, T1081 ScoreMeaningExample10Known badA malware family...

Malware Analysis – ransomware – 8119c78b7cfb7d9ce37286ec9fc263e2

October 12, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 8119c78b7cfb7d9ce37286ec9fc263e2SHA1: 986ba7a5714ad5b0de0d040d1c066389bcb81a67ANALYSIS DATE: 2022-10-12T10:21:03ZTTPS: T1059, T1107, T1490, T1005, T1081 ScoreMeaningExample10Known badA malware family...

Malware Analysis – persistence – 5569ef5cc1b99eee164438d95d601baf

October 12, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 5569ef5cc1b99eee164438d95d601bafSHA1: 27a889e1542b6ebe68130db3618c0de4f40fadb5ANALYSIS DATE: 2022-10-12T10:01:04ZTTPS: T1107, T1490, T1060, T1112, T1005, T1081, T1082, T1012,...

Cobalt Stike Beacon Detected – 31[.]41[.]244[.]192:443

October 12, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 46[.]175[.]148[.]74:80

October 12, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 43[.]143[.]94[.]214:8000

October 12, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 46[.]175[.]148[.]53:443

October 12, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – 9dead8d771b215649c86c1374a591799

October 12, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 9dead8d771b215649c86c1374a591799SHA1: 5298328fabb9c73665793e0b93051567408db8a7ANALYSIS DATE: 2022-10-12T10:22:17ZTTPS: T1005, T1081, T1012, T1060,...

Malware Analysis – smokeloader – 5d93dd4f046d16989f0dc53f6bb3326f

October 12, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 5d93dd4f046d16989f0dc53f6bb3326fSHA1: cc20ab38c977b233a38730174b58bb04a7d1e646ANALYSIS DATE: 2022-10-12T10:35:48ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 6801db35f78978c4b99f6d78a5753eff

October 12, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 6801db35f78978c4b99f6d78a5753effSHA1: afeb1ce64b59ea20876bc2fee8a70023e56d6797ANALYSIS DATE: 2022-10-12T10:23:03ZTTPS: T1053, T1005, T1081, T1222,...

Malware Analysis – ermac – 24b1ce69f7066a7bc9bc32e3c969d8d9

October 12, 2022

Score: 10 MALWARE FAMILY: ermacTAGS:family:ermac, banker, evasion, infostealer, ransomware, trojanMD5: 24b1ce69f7066a7bc9bc32e3c969d8d9SHA1: f36ff949217f3340a717a0e5a4d079b254b876beANALYSIS DATE: 2022-10-12T10:25:27ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

OSINT

Malware Analysis – – cfd31737ccacf6e9a0e2ac18cf3445ac

Cobalt Stike Beacon Detected – 51[.]178[.]11[.]176:80

Cobalt Stike Beacon Detected – 43[.]138[.]66[.]190:8848

Cobalt Stike Beacon Detected – 138[.]68[.]188[.]101:443

Cobalt Stike Beacon Detected – 139[.]155[.]90[.]81:8443

Malware Analysis – xorist – e98a127ed90e67cd30344bdb691384a1

Malware Analysis – persistence – 6c42c7957278c7ac09b111490fc93cc1

Malware Analysis – ransomware – 8119c78b7cfb7d9ce37286ec9fc263e2

Malware Analysis – persistence – 5569ef5cc1b99eee164438d95d601baf

Cobalt Stike Beacon Detected – 31[.]41[.]244[.]192:443

Cobalt Stike Beacon Detected – 46[.]175[.]148[.]74:80

Cobalt Stike Beacon Detected – 43[.]143[.]94[.]214:8000

Cobalt Stike Beacon Detected – 46[.]175[.]148[.]53:443

Malware Analysis – djvu – 9dead8d771b215649c86c1374a591799

Malware Analysis – smokeloader – 5d93dd4f046d16989f0dc53f6bb3326f

Malware Analysis – djvu – 6801db35f78978c4b99f6d78a5753eff

Malware Analysis – ermac – 24b1ce69f7066a7bc9bc32e3c969d8d9

VMware has yet to fix CVE-2021-22048 flaw in vCenter Server disclosed one year ago

Daily Vulnerability Trends: Wed Oct 12 2022

LockBit affiliates compromise Microsoft Exchange servers to deploy ransomware

LockBit 3.0 Ransomware Victim: northwestpipe[.]com

LockBit 3.0 Ransomware Victim: bakkerheftrucks[.]com

LockBit 3.0 Ransomware Victim: hamiota[.]com

LockBit 3.0 Ransomware Victim: draperyconceptsny[.]com

CVE Alert: CVE-2025-7511

CVE Alert: CVE-2025-7512

CVE Alert: CVE-2025-7508

CVE Alert: CVE-2025-7510

CVE Alert: CVE-2025-7509

You may have missed