OSINT

Malware Analysis – djvu – 7e91f253656cfc70bd475bf9c0e61124

October 23, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 7e91f253656cfc70bd475bf9c0e61124SHA1: 8489c607d95b6dcc87e7b540dd2f287674e5d40cANALYSIS DATE: 2022-10-23T08:44:09ZTTPS: T1082, T1005, T1081, T1222,...

Cobalt Stike Beacon Detected – 106[.]12[.]159[.]14:443

October 23, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 1[.]12[.]42[.]153:8888

October 23, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 43[.]142[.]193[.]86:80

October 23, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 204[.]48[.]24[.]99:8443

October 23, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – – eabd3a0897cd161d8ba35caea23d0556

October 23, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: eabd3a0897cd161d8ba35caea23d0556SHA1: 45216a4e48ef209fa244ec2425486db671d55530ANALYSIS DATE: 2022-10-23T08:55:43ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – persistence – 4983ba37ba7ca90c7e5b95b7210f3606

October 23, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 4983ba37ba7ca90c7e5b95b7210f3606SHA1: cbedcc9bee402750de61c3906f153920bcc651e8ANALYSIS DATE: 2022-10-23T08:50:52ZTTPS: T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – persistence – d019b08bf4a4f9613934a3c9779535f4

October 23, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: d019b08bf4a4f9613934a3c9779535f4SHA1: b1899904c8cd087cf20e0fa5460705039670c934ANALYSIS DATE: 2022-10-23T08:45:01ZTTPS: T1107, T1490, T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – persistence – 736f5b496fec8115a068a95687fd5619

October 23, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 736f5b496fec8115a068a95687fd5619SHA1: 6818492233c826fdf4323f91894a273a8fcec7b6ANALYSIS DATE: 2022-10-23T09:02:37ZTTPS: T1012, T1120, T1082, T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware...

Malware Analysis – djvu – fb8f05e84864dbc478180373b3e83cb2

October 23, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: fb8f05e84864dbc478180373b3e83cb2SHA1: 0644541c5f94701953126ee0f44aab1df010d68fANALYSIS DATE: 2022-10-23T09:32:42ZTTPS: T1012, T1082, T1053, T1060,...

Malware Analysis – ransomware – d00c79e8e9a7552aee66db55c855f26b

October 23, 2022

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealer, upxMD5: d00c79e8e9a7552aee66db55c855f26bSHA1: 35beea389fc38a20da005363fbad8aee6a63cb10ANALYSIS DATE: 2022-10-23T09:39:44ZTTPS: T1005, T1081 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – – e384658bd4a76b34bc458f25c064a99c

October 23, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: e384658bd4a76b34bc458f25c064a99cSHA1: 89b61393358caee1c2b834b8947d5fa1145df352ANALYSIS DATE: 2022-10-23T09:26:49ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – locky – 1a71c0d355affb90a54603698780a37d

October 23, 2022

Score: 10 MALWARE FAMILY: lockyTAGS:family:locky, ransomwareMD5: 1a71c0d355affb90a54603698780a37dSHA1: d3d848de5ce582edb92c1c9f0908d625282c6b0fANALYSIS DATE: 2022-10-23T09:34:24ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – – 6d810e28993526460baaff5cd5bc21ee

October 23, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: 6d810e28993526460baaff5cd5bc21eeSHA1: 6a94b1346559752ada8b670140603dd3a783e60eANALYSIS DATE: 2022-10-23T10:04:10ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – 546aeae6a954f0dc16b5ed461f760246

October 23, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 546aeae6a954f0dc16b5ed461f760246SHA1: b31139d7620aad921eed705bd56a40d26c2049cbANALYSIS DATE: 2022-10-23T09:53:33ZTTPS: T1082, T1053, T1005, T1081,...

Malware Analysis – djvu – cfbbc2e5653c67b064dbb0a7e75c7adb

October 23, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: cfbbc2e5653c67b064dbb0a7e75c7adbSHA1: 89975751a4f6e0cf15a66ad623dd236247c2adf6ANALYSIS DATE: 2022-10-23T09:50:49ZTTPS: T1012, T1060, T1112, T1082,...

Malware Analysis – persistence – fdc6c2eb07e5f80120c53e11eb7cf57d

October 23, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: fdc6c2eb07e5f80120c53e11eb7cf57dSHA1: 056e5e0e7ce453e5dbcba69aebed7f2199d2fa81ANALYSIS DATE: 2022-10-23T10:15:27ZTTPS: T1107, T1490, T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – – 50007722272dd33f55ee0c5410a088f1

October 23, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: 50007722272dd33f55ee0c5410a088f1SHA1: d9053b8c06e7b02e3bd676360af94cf90bce6f4eANALYSIS DATE: 2022-10-23T10:43:28ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – 5d13c4cf0364bd93b8190717abb17b53

October 23, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 5d13c4cf0364bd93b8190717abb17b53SHA1: 727e6711224ac9eeb65c884ba6e36b96e719aec1ANALYSIS DATE: 2022-10-23T10:47:36ZTTPS: T1005, T1081, T1012, T1222,...

Malware Analysis – wannacry – 3a925a8e2d8c0b799ec17445f0e04035

October 23, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: 3a925a8e2d8c0b799ec17445f0e04035SHA1: 8c2aca0dcd2067b3dc362acd74fdf6dd2b44238bANALYSIS DATE: 2022-10-23T10:40:22ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – – efeeea9705095b06ec1fd04a508c767c

October 23, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: efeeea9705095b06ec1fd04a508c767cSHA1: e40e797796c2b3768373f0ab13f5b5780fee9c4aANALYSIS DATE: 2022-10-23T10:25:25ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Daily Vulnerability Trends: Sun Oct 23 2022

October 23, 2022

Daily Vulnerability Trends (sourced from VulnMon) CVE NAMECVE DescriptionCVE-2022-41852Those using JXPath to interpret untrusted XPath expressions may be vulnerable to...

Malware Analysis – – cc0a784027dca336f5ee102165ee1a04

October 23, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: cc0a784027dca336f5ee102165ee1a04SHA1: 291a56b079ac153cc6409e00b62d7e822e593055ANALYSIS DATE: 2022-10-22T05:39:21ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – – 325f660b6e6802581315052c0d9b190c

October 23, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: 325f660b6e6802581315052c0d9b190cSHA1: 48b6692d89e64f513a48b51dc84bf14cb535b84bANALYSIS DATE: 2022-10-22T05:42:55ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

OSINT

Malware Analysis – djvu – 7e91f253656cfc70bd475bf9c0e61124

Cobalt Stike Beacon Detected – 106[.]12[.]159[.]14:443

Cobalt Stike Beacon Detected – 1[.]12[.]42[.]153:8888

Cobalt Stike Beacon Detected – 43[.]142[.]193[.]86:80

Cobalt Stike Beacon Detected – 204[.]48[.]24[.]99:8443

Malware Analysis – – eabd3a0897cd161d8ba35caea23d0556

Malware Analysis – persistence – 4983ba37ba7ca90c7e5b95b7210f3606

Malware Analysis – persistence – d019b08bf4a4f9613934a3c9779535f4

Malware Analysis – persistence – 736f5b496fec8115a068a95687fd5619

Malware Analysis – djvu – fb8f05e84864dbc478180373b3e83cb2

Malware Analysis – ransomware – d00c79e8e9a7552aee66db55c855f26b

Malware Analysis – – e384658bd4a76b34bc458f25c064a99c

Malware Analysis – locky – 1a71c0d355affb90a54603698780a37d

Malware Analysis – – 6d810e28993526460baaff5cd5bc21ee

Malware Analysis – djvu – 546aeae6a954f0dc16b5ed461f760246

Malware Analysis – djvu – cfbbc2e5653c67b064dbb0a7e75c7adb

Malware Analysis – persistence – fdc6c2eb07e5f80120c53e11eb7cf57d

Malware Analysis – – 50007722272dd33f55ee0c5410a088f1

Malware Analysis – djvu – 5d13c4cf0364bd93b8190717abb17b53

Malware Analysis – wannacry – 3a925a8e2d8c0b799ec17445f0e04035

Malware Analysis – – efeeea9705095b06ec1fd04a508c767c

Daily Vulnerability Trends: Sun Oct 23 2022

Malware Analysis – – cc0a784027dca336f5ee102165ee1a04

Malware Analysis – – 325f660b6e6802581315052c0d9b190c

Cobalt Strike Beacon Detected – 121[.]43[.]37[.]134:4434

Cobalt Strike Beacon Detected – 119[.]29[.]231[.]118:443

Cobalt Strike Beacon Detected – 39[.]101[.]74[.]162:443

Cobalt Strike Beacon Detected – 8[.]218[.]112[.]112:8880

Cobalt Strike Beacon Detected – 47[.]109[.]48[.]57:443

You may have missed