Security

Malware Analysis – evasion – cb9dc8c5ac0b4d7323517925fc708783

December 9, 2022

Score: 5 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: cb9dc8c5ac0b4d7323517925fc708783SHA1: 6fde9c906f8e13a4c8104c21fd88a515e8d10eefANALYSIS DATE: 2022-12-05T04:23:18ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – evasion – 1771a494538622ac4224c5c0bc3ca926

December 9, 2022

Score: 5 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 1771a494538622ac4224c5c0bc3ca926SHA1: 9e5208d950d4892a8a2a604a43b06f2ceeb46231ANALYSIS DATE: 2022-12-05T04:23:14ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – evasion – 7c1a72e382765808a01e491af2690a97

December 9, 2022

Score: 5 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 7c1a72e382765808a01e491af2690a97SHA1: 8ff8631fb9949165a46982f48e4a8fa3c00dfb02ANALYSIS DATE: 2022-12-05T04:23:25ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – djvu – 0c8feb9cb94014c66af3fdeb316ad042

December 9, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, backdoor, ransomware, trojanMD5: 0c8feb9cb94014c66af3fdeb316ad042SHA1: 8e94dd3c626009908fd1f2347703c9053a213fbdANALYSIS DATE: 2022-12-09T03:02:09ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family...

Malware Analysis – evasion – 88c258e7f54080593bd257826ccd7d27

December 9, 2022

Score: 5 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 88c258e7f54080593bd257826ccd7d27SHA1: 7147e0ef1e081e8d4eb9eb928375d00b31ad9906ANALYSIS DATE: 2022-12-05T04:23:22ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – ransomware – 8263f3013b3913a2c3292aedb3c4baa9

December 9, 2022

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 8263f3013b3913a2c3292aedb3c4baa9SHA1: a25a808d2f536fdd769514eb310dd44ef26d7ae8ANALYSIS DATE: 2022-12-05T04:23:37ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – 842d42bb052a77759c8f55d46021b2e0

December 9, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 842d42bb052a77759c8f55d46021b2e0SHA1: 497403d1ba51ce198a46221395daf240c206bb36ANALYSIS DATE: 2022-12-09T04:53:11ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – ransomware – 11c17c954ac297bce8262d12dc3798ed

December 9, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 11c17c954ac297bce8262d12dc3798edSHA1: 5931fe6c12225dfc95469f705fd5d95052ffa44cANALYSIS DATE: 2022-12-09T05:32:04ZTTPS: T1130, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – djvu – 959911ee1e7389ad2370e5ae284354c4

December 9, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 959911ee1e7389ad2370e5ae284354c4SHA1: 65ad3123e945c23db42b5a3d2dac121ce15dedf4ANALYSIS DATE: 2022-12-09T03:20:14ZTTPS: T1060, T1112, T1130, T1012,...

Malware Analysis – globeimposter – 32bd793c65117c065f48115340d6d899

December 9, 2022

Score: 10 MALWARE FAMILY: globeimposterTAGS:family:globeimposter, persistence, ransomwareMD5: 32bd793c65117c065f48115340d6d899SHA1: be86049db96ed942e32f394c5ca55b1ce16fec77ANALYSIS DATE: 2022-12-09T05:08:24ZTTPS: T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – djvu – 6bcb11a9c59cb41aa9b01303313fbef2

December 9, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: 6bcb11a9c59cb41aa9b01303313fbef2SHA1: f843210f068149c8897c16d1bee001a0d72e4c9aANALYSIS DATE: 2022-12-09T05:36:43ZTTPS: T1053, T1060, T1112, T1222, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – venus – 8691dae21568faaeda49bcd640e1ad23

December 9, 2022

Score: 10 MALWARE FAMILY: venusTAGS:family:venus, persistence, ransomwareMD5: 8691dae21568faaeda49bcd640e1ad23SHA1: 524b589ef403ff21cf040ef33c21b1d6d8235febANALYSIS DATE: 2022-12-09T05:32:04ZTTPS: T1060, T1112, T1082, T1018, T1012, T1120 ScoreMeaningExample10Known badA malware...

Malware Analysis – djvu – 3a4f5417b5666b7e633850bf85345b89

December 9, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 3a4f5417b5666b7e633850bf85345b89SHA1: b446a25db27f090a4c0587a4a5aa297383765830ANALYSIS DATE: 2022-12-09T05:41:35ZTTPS:...

Malware Analysis – neshta – 3ac0d935228460fdc38bdab692d71b0c

December 9, 2022

Score: 10 MALWARE FAMILY: neshtaTAGS:family:neshta, family:venus, persistence, ransomware, spyware, stealerMD5: 3ac0d935228460fdc38bdab692d71b0cSHA1: d08f753af5b5d9be3352495189be6fd4914ad8e1ANALYSIS DATE: 2022-12-09T05:38:10ZTTPS: T1005, T1081, T1112, T1042, T1018, T1012,...

Security

Malware Analysis – evasion – cb9dc8c5ac0b4d7323517925fc708783

Malware Analysis – evasion – 1771a494538622ac4224c5c0bc3ca926

Malware Analysis – evasion – 7c1a72e382765808a01e491af2690a97

Malware Analysis – djvu – 0c8feb9cb94014c66af3fdeb316ad042

Malware Analysis – evasion – 88c258e7f54080593bd257826ccd7d27

Malware Analysis – ransomware – 8263f3013b3913a2c3292aedb3c4baa9

Malware Analysis – ransomware – 842d42bb052a77759c8f55d46021b2e0

Malware Analysis – ransomware – 11c17c954ac297bce8262d12dc3798ed

Malware Analysis – djvu – 959911ee1e7389ad2370e5ae284354c4

Malware Analysis – globeimposter – 32bd793c65117c065f48115340d6d899

Malware Analysis – djvu – 6bcb11a9c59cb41aa9b01303313fbef2

Malware Analysis – venus – 8691dae21568faaeda49bcd640e1ad23

Malware Analysis – djvu – 3a4f5417b5666b7e633850bf85345b89

Malware Analysis – neshta – 3ac0d935228460fdc38bdab692d71b0c

Cobalt Stike Beacon Detected – 170[.]64[.]148[.]19:443

Cobalt Stike Beacon Detected – 120[.]78[.]82[.]210:80

Cobalt Stike Beacon Detected – 194[.]135[.]24[.]245:443

Cobalt Stike Beacon Detected – 120[.]24[.]183[.]94:6666

Cobalt Stike Beacon Detected – 179[.]43[.]142[.]47:10443

Cobalt Stike Beacon Detected – 5[.]199[.]168[.]212:8443

Cobalt Stike Beacon Detected – 35[.]220[.]227[.]124:81

Cobalt Stike Beacon Detected – 104[.]168[.]11[.]90:8443

Cobalt Stike Beacon Detected – 35[.]175[.]108[.]248:443

Cobalt Stike Beacon Detected – 47[.]93[.]212[.]101:9999

[MEDUSA] – Ransomware Victim: LaRosa’s Pizzeria

[MEDUSA] – Ransomware Victim: PT Kalimantan Prima Persada

CVE Alert: CVE-2025-36186 – IBM – Db2

CVE Alert: CVE-2025-9458 – Autodesk – Shared Components

HackerOne Bug Bounty Disclosure: low-privileged-user-can-enable-or-disable-lovable-ai-for-new-projects-in-workspace-anxioussick

You may have missed