Security

Malware Analysis – persistence – 1ce76c8db971b1444b6856f26990e450

November 21, 2022

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 1ce76c8db971b1444b6856f26990e450SHA1: 062dd92f8bcf5136e8dc5c6da0ec8fc9d75c57acANALYSIS DATE: 2022-11-21T17:22:26ZTTPS: T1107, T1490, T1082, T1112, T1060 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – djvu – d58d383bf9394e1a7dd26d1f96b644bc

November 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: d58d383bf9394e1a7dd26d1f96b644bcSHA1: 4a472430d5c071d17b3ca30419ece8868dde48caANALYSIS DATE: 2022-11-21T17:31:07ZTTPS:...

Malware Analysis – evasion – 94d087166651c0020a9e6cc2fdacdc0c

November 21, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 94d087166651c0020a9e6cc2fdacdc0cSHA1: 99be22569ba9b1e49d3fd36f65faa6795672fcc0ANALYSIS DATE: 2022-11-21T17:26:44ZTTPS: T1491, T1112, T1031, T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family...

Google won a lawsuit against the Glupteba botnet operators

November 21, 2022

Google won a lawsuit filed against two Russian nationals involved in the operations of the Glupteba botnet. This week, Google...

Sandbox_Scryer – Tool For Producing Threat Hunting And Intelligence Data From Public Sandbox Detonation Output

November 21, 2022

The Sandbox Scryer is an open-source tool for producing threat hunting and intelligence data from public sandbox detonation output The...

Google provides rules to detect tens of cracked versions of Cobalt Strike

November 21, 2022

Researchers at Google Cloud identified 34 different hacked release versions of the Cobalt Strike tool in the wild. Cobalt Strike...

Cobalt Stike Beacon Detected – 146[.]70[.]115[.]16:443

November 21, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 104[.]233[.]224[.]78:443

November 21, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 91[.]240[.]118[.]209:9199

November 21, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 82[.]157[.]136[.]219:80

November 21, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 141[.]98[.]82[.]243:443

November 21, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 37[.]1[.]212[.]100:443

November 21, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Octocrypt, Alice, and AXLocker Ransomware, new threats in the wild

November 21, 2022

Experts from Cyble Research and Intelligence Labs (CRIL) discovered three new ransomware families: AXLocker, Octocrypt, and Alice Ransomware. Threat intelligence...

Malware Analysis – djvu – 8e637847078984ede008e53a549aaf59

November 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 8e637847078984ede008e53a549aaf59SHA1: 7dd746cfecce7b728918bd15d7d7eb3e2da70474ANALYSIS DATE: 2022-11-21T04:20:44ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – djvu – b8a3b7f9c04e2522b454963e5c7d67be

November 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, family:vidar, botnet:517, botnet:mario23_10, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5: b8a3b7f9c04e2522b454963e5c7d67beSHA1:...

Malware Analysis – djvu – c1ba21c6be66db5f18e143f95df50241

November 21, 2022

Malware Analysis – djvu – e31c38e9f1ab45320a0053dd649ec8f9

November 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: e31c38e9f1ab45320a0053dd649ec8f9SHA1: 3047d3bf2654a5fb51a4438bb44dacab296e1d70ANALYSIS DATE: 2022-11-21T05:40:10ZTTPS: T1060, T1112, T1222, T1082, T1012, T1053 ScoreMeaningExample10Known badA...

Malware Analysis – evasion – 14e5a91d1292a99bb872f4b31acd9646

November 21, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, upxMD5: 14e5a91d1292a99bb872f4b31acd9646SHA1: d2b91d461ab3e9bd0c70b49860d455f841673eccANALYSIS DATE: 2022-11-21T05:25:42ZTTPS: T1091, T1082, T1158, T1112, T1060, T1491 ScoreMeaningExample10Known badA...

Malware Analysis – buran – 3ea0ab42bcab5745ba3631f01c4d4cd3

November 21, 2022

Score: 10 MALWARE FAMILY: buranTAGS:family:buran, ransomwareMD5: 3ea0ab42bcab5745ba3631f01c4d4cd3SHA1: 9eb457ce8568fa4a4375cdebbf3b181976a99718ANALYSIS DATE: 2022-11-21T05:47:20ZTTPS: T1018, T1102, T1082, T1012, T1120 ScoreMeaningExample10Known badA malware family was...

Cobalt Stike Beacon Detected – 49[.]232[.]17[.]51:80

November 21, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 192[.]144[.]220[.]86:444

November 21, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 143[.]198[.]42[.]84:80

November 21, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – ransomware – 6ba66ac7b56c6f31417db0c1ca9fe6b1

November 21, 2022

Score: 5 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 6ba66ac7b56c6f31417db0c1ca9fe6b1SHA1: 8ccc065e083d78b3a6b8996a687235234c2cd07dANALYSIS DATE: 2022-11-20T20:54:35ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – dcrat – d609d7888ebd66e4cb502ae75ca86885

November 21, 2022

Score: 10 MALWARE FAMILY: dcratTAGS:family:dcrat, family:djvu, family:redline, family:smokeloader, family:vidar, botnet:517, botnet:mario23_10, backdoor, collection, discovery, infostealer, persistence, ransomware, rat, spyware, stealer,...

Security

Malware Analysis – persistence – 1ce76c8db971b1444b6856f26990e450

Malware Analysis – djvu – d58d383bf9394e1a7dd26d1f96b644bc

Malware Analysis – evasion – 94d087166651c0020a9e6cc2fdacdc0c

Google won a lawsuit against the Glupteba botnet operators

Sandbox_Scryer – Tool For Producing Threat Hunting And Intelligence Data From Public Sandbox Detonation Output

Google provides rules to detect tens of cracked versions of Cobalt Strike

Cobalt Stike Beacon Detected – 146[.]70[.]115[.]16:443

Cobalt Stike Beacon Detected – 104[.]233[.]224[.]78:443

Cobalt Stike Beacon Detected – 91[.]240[.]118[.]209:9199

Cobalt Stike Beacon Detected – 82[.]157[.]136[.]219:80

Cobalt Stike Beacon Detected – 141[.]98[.]82[.]243:443

Cobalt Stike Beacon Detected – 37[.]1[.]212[.]100:443

Octocrypt, Alice, and AXLocker Ransomware, new threats in the wild

Malware Analysis – djvu – 8e637847078984ede008e53a549aaf59

Malware Analysis – djvu – b8a3b7f9c04e2522b454963e5c7d67be

Malware Analysis – djvu – c1ba21c6be66db5f18e143f95df50241

Malware Analysis – djvu – e31c38e9f1ab45320a0053dd649ec8f9

Malware Analysis – evasion – 14e5a91d1292a99bb872f4b31acd9646

Malware Analysis – buran – 3ea0ab42bcab5745ba3631f01c4d4cd3

Cobalt Stike Beacon Detected – 49[.]232[.]17[.]51:80

Cobalt Stike Beacon Detected – 192[.]144[.]220[.]86:444

Cobalt Stike Beacon Detected – 143[.]198[.]42[.]84:80

Malware Analysis – ransomware – 6ba66ac7b56c6f31417db0c1ca9fe6b1

Malware Analysis – dcrat – d609d7888ebd66e4cb502ae75ca86885

CVE Alert: CVE-2024-12915

CVE Alert: CVE-2025-2895

CVE Alert: CVE-2025-6911

CVE Alert: CVE-2025-6912

CVE Alert: CVE-2025-6913

You may have missed