OSINT

Malware Analysis – djvu – 5b8713487da08ae104fc4b80f7c7fa90

October 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 5b8713487da08ae104fc4b80f7c7fa90SHA1: de2f46346055d9a21e4a20db6d63e3cd16a2a8bcANALYSIS DATE: 2022-10-21T09:48:52ZTTPS: T1053, T1012, T1005, T1081,...

Malware Analysis – djvu – fef7cf385ca2cce744b82dd651f86db4

October 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: fef7cf385ca2cce744b82dd651f86db4SHA1: 68444a895fde67f7b9a8db6bb17d5c02cb704552ANALYSIS DATE: 2022-10-21T09:26:31ZTTPS: T1082, T1005, T1081, T1012,...

Malware Analysis – djvu – f52b4e894b2d577073ef81610150e2a4

October 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: f52b4e894b2d577073ef81610150e2a4SHA1: b3aa05260ad6b0cb6c3cd8705968e8e5d8ebb46bANALYSIS DATE: 2022-10-21T09:36:43ZTTPS: T1012, T1005, T1081, T1222,...

Cobalt Stike Beacon Detected – 20[.]73[.]54[.]98:80

October 21, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 104[.]208[.]74[.]203:80

October 21, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 149[.]255[.]132[.]91:443

October 21, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 1[.]14[.]60[.]232:5555

October 21, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – phobos – d5babdaf2abe7ba35c9443f1ca6f8cfa

October 21, 2022

Score: 10 MALWARE FAMILY: phobosTAGS:family:phobos, evasion, persistence, ransomware, spyware, stealerMD5: d5babdaf2abe7ba35c9443f1ca6f8cfaSHA1: cb77b68d92d0df3e185dcb648731514c5911dcdcANALYSIS DATE: 2022-10-21T10:49:10ZTTPS: T1490, T1059, T1107, T1005, T1081, T1060,...

Malware Analysis – persistence – f5aa35a4b633fa7911c31abfcbeecdcf

October 21, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: f5aa35a4b633fa7911c31abfcbeecdcfSHA1: 84b7fe9020299ce4e7d73745e197af029d93a906ANALYSIS DATE: 2022-10-21T10:40:22ZTTPS: T1082, T1107, T1490, T1091, T1060, T1112, T1005, T1081...

Malware Analysis – ransomware – cde3f2732fcf5a3b990fd6e33c6757cf

October 21, 2022

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: cde3f2732fcf5a3b990fd6e33c6757cfSHA1: 3e6903a3635ae53207bfdbc98119860e924fe839ANALYSIS DATE: 2022-10-21T10:18:59ZTTPS: T1012, T1082, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – persistence – 8e73c9ecd37de547e94de6a044157bd2

October 21, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 8e73c9ecd37de547e94de6a044157bd2SHA1: e3fedb5b0a431aab1af78e4f62481f48332ad6e7ANALYSIS DATE: 2022-10-21T10:40:17ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091, T1060, T1112...

Cobalt Stike Beacon Detected – 144[.]126[.]221[.]80:80

October 21, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 194[.]165[.]16[.]63:80

October 21, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 18[.]184[.]235[.]54:443

October 21, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 84[.]32[.]128[.]99:8080

October 21, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – evasion – f05d8588cf2e8be9fa6ccac39a0f7311

October 21, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: f05d8588cf2e8be9fa6ccac39a0f7311SHA1: eddfb1947ce609cf33c1409f5977ea78ecaf0f32ANALYSIS DATE: 2022-10-21T10:51:04ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – evasion – 21f326eef6fda2c5d544c2b5e6d21f34

October 21, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 21f326eef6fda2c5d544c2b5e6d21f34SHA1: c6d5a6a665ebaa80d1174ca3850f7af509bd027bANALYSIS DATE: 2022-10-21T10:51:03ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – ransomware – 9d3ca081e7fe27e44707d8634c22fc95

October 21, 2022

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 9d3ca081e7fe27e44707d8634c22fc95SHA1: dc0220f9a43989a4628f4eabd5e963fd80d8f698ANALYSIS DATE: 2022-10-21T10:51:03ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – – 80483a90cf3e46ca6eb0ffe03a10c759

October 21, 2022

Score: 7 MALWARE FAMILY: TAGS:MD5: 80483a90cf3e46ca6eb0ffe03a10c759SHA1: 5428c02bda841adec9c5e42b50b9ee52f7fc3f85ANALYSIS DATE: 2022-10-21T10:51:03ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – evasion – 50a9624b74624f99284b417b732b82af

October 21, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasionMD5: 50a9624b74624f99284b417b732b82afSHA1: 628d0bf29626fca8b66053597e310b2f842172d3ANALYSIS DATE: 2022-10-21T10:52:05ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – – 12bea094932da9fa51853740fcaa68a1

October 21, 2022

Score: 7 MALWARE FAMILY: TAGS:MD5: 12bea094932da9fa51853740fcaa68a1SHA1: 3a799c0fc8fe06659b8d22d2332f24f18effe17dANALYSIS DATE: 2022-10-21T10:52:05ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – evasion – 155316526ff476698494e90efc1127bc

October 21, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasionMD5: 155316526ff476698494e90efc1127bcSHA1: be7bba8dc417a5cfa665d647ce7bafabb67a0d00ANALYSIS DATE: 2022-10-21T10:51:04ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – – ac32ffaa379aed78dcc11ea74fbdfcfe

October 21, 2022

Score: 7 MALWARE FAMILY: TAGS:MD5: ac32ffaa379aed78dcc11ea74fbdfcfeSHA1: 7555f5c5e70d3b33a35e9db9a6cb5554b38ad9f3ANALYSIS DATE: 2022-10-21T10:51:05ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – evasion – fbd0afe5bd3d0d61feb21680b304d7ae

October 21, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: fbd0afe5bd3d0d61feb21680b304d7aeSHA1: 2c61d60f8b1b52688b5642f646c89dad124f466eANALYSIS DATE: 2022-10-21T10:53:04ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

OSINT

Malware Analysis – djvu – 5b8713487da08ae104fc4b80f7c7fa90

Malware Analysis – djvu – fef7cf385ca2cce744b82dd651f86db4

Malware Analysis – djvu – f52b4e894b2d577073ef81610150e2a4

Cobalt Stike Beacon Detected – 20[.]73[.]54[.]98:80

Cobalt Stike Beacon Detected – 104[.]208[.]74[.]203:80

Cobalt Stike Beacon Detected – 149[.]255[.]132[.]91:443

Cobalt Stike Beacon Detected – 1[.]14[.]60[.]232:5555

Malware Analysis – phobos – d5babdaf2abe7ba35c9443f1ca6f8cfa

Malware Analysis – persistence – f5aa35a4b633fa7911c31abfcbeecdcf

Malware Analysis – ransomware – cde3f2732fcf5a3b990fd6e33c6757cf

Malware Analysis – persistence – 8e73c9ecd37de547e94de6a044157bd2

Cobalt Stike Beacon Detected – 144[.]126[.]221[.]80:80

Cobalt Stike Beacon Detected – 194[.]165[.]16[.]63:80

Cobalt Stike Beacon Detected – 18[.]184[.]235[.]54:443

Cobalt Stike Beacon Detected – 84[.]32[.]128[.]99:8080

Malware Analysis – evasion – f05d8588cf2e8be9fa6ccac39a0f7311

Malware Analysis – evasion – 21f326eef6fda2c5d544c2b5e6d21f34

Malware Analysis – ransomware – 9d3ca081e7fe27e44707d8634c22fc95

Malware Analysis – – 80483a90cf3e46ca6eb0ffe03a10c759

Malware Analysis – evasion – 50a9624b74624f99284b417b732b82af

Malware Analysis – – 12bea094932da9fa51853740fcaa68a1

Malware Analysis – evasion – 155316526ff476698494e90efc1127bc

Malware Analysis – – ac32ffaa379aed78dcc11ea74fbdfcfe

Malware Analysis – evasion – fbd0afe5bd3d0d61feb21680b304d7ae

HackerOne Bug Bounty Disclosure: socks-heap-buffer-overflow-via-malicious-http-redirect-with-oversized-hostname-abdullah

HackerOne Bug Bounty Disclosure: buffer-over-read-missing-nul-termination-in-addvariable-causes-undefined-behavior-sagorhawlader

HackerOne Bug Bounty Disclosure: blockstack-org-is-vulnerable-to-cve-cve–x-aulia

HackerOne Bug Bounty Disclosure: blockstack-browser-for-mac-leaks-core-api-password-to-rd-parties-frozensolid

HackerOne Bug Bounty Disclosure: logout-bypass-vulnerability-in-hiro-so-anonymous

You may have missed