Security

Malware Analysis – djvu – fb4179ed52ae3e372dbd7236c36bad07

December 16, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: fb4179ed52ae3e372dbd7236c36bad07SHA1: 3a429fab3ada61843ff58cd601a3240f16bc2e83ANALYSIS DATE: 2022-12-16T10:20:19ZTTPS: T1060, T1112, T1082, T1012, T1053, T1005,...

Cobalt Stike Beacon Detected – 167[.]172[.]24[.]169:443

December 16, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – danabot – 9135f94621c62d8cfe3fe6744c9f758d

December 16, 2022

Score: 10 MALWARE FAMILY: danabotTAGS:family:danabot, family:djvu, family:raccoon, family:redline, family:smokeloader, botnet:ec7a54fb6492ff3a52d09504b8ecf082, botnet:mario23_10, backdoor, banker, bootkit, collection, discovery, infostealer, persistence, ransomware, spyware,...

Cobalt Stike Beacon Detected – 109[.]94[.]208[.]57:8080

December 16, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – fccbc13f323309afe196fa33904f0e58

December 16, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: fccbc13f323309afe196fa33904f0e58SHA1: 0969d306413a3835c6e42d583625162e49a2585fANALYSIS DATE: 2022-12-16T10:40:26ZTTPS: T1012, T1005, T1081, T1060, T1112, T1222,...

Malware Analysis – danabot – aa3588f61f67b311ed58e70083f072bc

December 16, 2022

Cobalt Stike Beacon Detected – 77[.]73[.]134[.]23:80

December 16, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 121[.]5[.]61[.]8:8018

December 16, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 5[.]188[.]86[.]237:443

December 16, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 179[.]43[.]142[.]137:443

December 16, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – persistence – 428e2d6500b98a6059153e4a99bee22c

December 16, 2022

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 428e2d6500b98a6059153e4a99bee22cSHA1: 94ca95c70255418b797e9362dcc757748a90f0b8ANALYSIS DATE: 2022-12-16T11:15:17ZTTPS: T1060, T1112, T1082, T1012, T1120 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – djvu – d43c377cdb96ad470ca9027731874927

December 16, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: d43c377cdb96ad470ca9027731874927SHA1: d2a38f21af1751b7c7df960d1b82f89713fd6edfANALYSIS DATE: 2022-12-16T10:51:23ZTTPS: T1012, T1082, T1053, T1005, T1081, T1222,...

CISA adds Veeam Backup and Replication bugs to Known Exploited Vulnerabilities Catalog

December 16, 2022

US CISA added two vulnerabilities impacting Veeam Backup & Replication software to its Known Exploited Vulnerabilities Catalog. The U.S. Cybersecurity and Infrastructure...

MCCrash botnet targets private Minecraft servers, Microsoft warns

December 16, 2022

Microsoft announced that a botnet dubbed MCCrash is launching distributed denial-of-service (DDoS) attacks against private Minecraft servers. Microsoft spotted a...

Microsoft revised CVE-2022-37958 severity due to its broader scope

December 16, 2022

Microsoft revised the severity rate for the CVE-2022-37958 flaw which was addressed with Patch Tuesday security updates for September 2022....

Malware Analysis – danabot – cebcff470e19eb9de81af95cfe2b86bc

December 16, 2022

Score: 10 MALWARE FAMILY: danabotTAGS:family:danabot, family:dcrat, family:djvu, family:raccoon, family:redline, family:smokeloader, botnet:ec7a54fb6492ff3a52d09504b8ecf082, botnet:mario23_10, backdoor, banker, bootkit, collection, discovery, infostealer, persistence, ransomware,...

Malware Analysis – ransomware – d7986651c677f683616da3ae1b4d1ff7

December 16, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: d7986651c677f683616da3ae1b4d1ff7SHA1: a1b03ce87f537131a031a2618e02d13e29dd760aANALYSIS DATE: 2022-12-16T05:29:05ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – persistence – ff77c452d18d840f60f3b9007fbe5379

December 16, 2022

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: ff77c452d18d840f60f3b9007fbe5379SHA1: 2e52628c8e985b5b08f04fdc99e44c937ee1b59fANALYSIS DATE: 2022-12-16T03:47:07ZTTPS: T1012, T1120, T1082, T1060, T1112 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – djvu – 6824a72ba14def6475ee1937ec2d7594

December 16, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 6824a72ba14def6475ee1937ec2d7594SHA1: 33112b56093f382724359c112518bac080e504fcANALYSIS DATE: 2022-12-16T04:43:33ZTTPS: T1005, T1081, T1012, T1082, T1060, T1112,...

Malware Analysis – djvu – 1fbdb1063b832e6529118d4ab7e66971

December 16, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:raccoon, family:redline, family:smokeloader, botnet:ec7a54fb6492ff3a52d09504b8ecf082, botnet:mario23_10, backdoor, bootkit, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5:...

Security

Malware Analysis – djvu – fb4179ed52ae3e372dbd7236c36bad07

Cobalt Stike Beacon Detected – 167[.]172[.]24[.]169:443

Malware Analysis – danabot – 9135f94621c62d8cfe3fe6744c9f758d

Cobalt Stike Beacon Detected – 109[.]94[.]208[.]57:8080

Malware Analysis – djvu – fccbc13f323309afe196fa33904f0e58

Malware Analysis – danabot – aa3588f61f67b311ed58e70083f072bc

Cobalt Stike Beacon Detected – 77[.]73[.]134[.]23:80

Cobalt Stike Beacon Detected – 121[.]5[.]61[.]8:8018

Cobalt Stike Beacon Detected – 5[.]188[.]86[.]237:443

Cobalt Stike Beacon Detected – 179[.]43[.]142[.]137:443

Malware Analysis – persistence – 428e2d6500b98a6059153e4a99bee22c

Malware Analysis – djvu – d43c377cdb96ad470ca9027731874927

CISA adds Veeam Backup and Replication bugs to Known Exploited Vulnerabilities Catalog

MCCrash botnet targets private Minecraft servers, Microsoft warns

Microsoft revised CVE-2022-37958 severity due to its broader scope

Malware Analysis – danabot – cebcff470e19eb9de81af95cfe2b86bc

Malware Analysis – ransomware – d7986651c677f683616da3ae1b4d1ff7

Malware Analysis – persistence – ff77c452d18d840f60f3b9007fbe5379

Malware Analysis – djvu – 6824a72ba14def6475ee1937ec2d7594

Malware Analysis – djvu – 1fbdb1063b832e6529118d4ab7e66971

Cobalt Stike Beacon Detected – 167[.]71[.]43[.]105:443

Cobalt Stike Beacon Detected – 103[.]135[.]249[.]159:443

Cobalt Stike Beacon Detected – 81[.]70[.]213[.]54:80

Cobalt Stike Beacon Detected – 143[.]198[.]173[.]163:80

CVE Alert: CVE-2025-12161 – burhandodhy – Smart Auto Upload Images – Import External Images

CVE Alert: CVE-2025-11452 – asgaros – Asgaros Forum

China Uses Mars Orbiter To Snap Interstellar Comet 3i/atlas

[DRAGONFORCE] – Ransomware Victim: GB Mail

[AKIRA] – Ransomware Victim: Mold In Graphic Systems

You may have missed