Security

Malware Analysis – persistence – b725067c7926e8a3268d2fabfcad7b4e

November 24, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: b725067c7926e8a3268d2fabfcad7b4eSHA1: 2518fb688bec920f49e6b20144dc385866a2a70cANALYSIS DATE: 2022-11-24T07:48:23ZTTPS: T1107, T1490, T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Cobalt Stike Beacon Detected – 110[.]40[.]201[.]49:443

November 24, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 43[.]139[.]156[.]186:443

November 24, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 172[.]86[.]123[.]13:443

November 24, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 85[.]208[.]136[.]49:443

November 24, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – a5b4c672812208b47b9a9370902d4e1c

November 24, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: a5b4c672812208b47b9a9370902d4e1cSHA1: 0efd3da2bcad33fc6c91fc8a1c2a499c889eb2f6ANALYSIS DATE: 2022-11-24T10:33:48ZTTPS: T1060, T1112, T1222, T1082, T1012 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – fecea0c22b3fc1a848902bcae0d16027

November 24, 2022

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: fecea0c22b3fc1a848902bcae0d16027SHA1: a5fd3809a7640e4ec3bf7617fff3f70eaff1562bANALYSIS DATE: 2022-11-24T09:02:55ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – djvu – dfb556e14a10b5145a33f1a3efabdf88

November 24, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: dfb556e14a10b5145a33f1a3efabdf88SHA1: adb76813eda263afa706327cf52ef099f024fd36ANALYSIS DATE: 2022-11-24T10:25:26ZTTPS: T1005, T1081, T1130, T1112,...

Malware Analysis – banker – 425ca585e1689771f69c442036192d78

November 24, 2022

Score: 8 MALWARE FAMILY: bankerTAGS:banker, ransomwareMD5: 425ca585e1689771f69c442036192d78SHA1: 3d7e48669307cc962f18de5639ae0697ed950d1eANALYSIS DATE: 2022-11-24T09:53:04ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

An aggressive malware campaign targets US-based companies with Qakbot to deliver Black Basta Ransomware

November 24, 2022

Researchers warn of an ongoing aggressive Qakbot malware campaign that leads to Black Basta ransomware infections in the US. Experts...

Threat actors exploit discontinues Boa web servers to target critical infrastructure

November 24, 2022

Microsoft reported that hackers have exploited flaws in a now-discontinued web server called Boa in attacks against critical industries. Microsoft experts...

Black Friday shoppers beware: online threats so far in 2022

November 24, 2022

The shopping event of the year, Black Friday, is almost here, and while the big day does not officially arrive...

Malware Analysis – evasion – a4cea260c512dde09d9166744e42aba0

November 24, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomwareMD5: a4cea260c512dde09d9166744e42aba0SHA1: 4f0f80519e424c56db49e6287d92af29812f5791ANALYSIS DATE: 2022-11-24T00:09:21ZTTPS: T1490, T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – evasion – c7acfecc9e19773876dab3f1a83343ab

November 24, 2022

Score: 6 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: c7acfecc9e19773876dab3f1a83343abSHA1: 893f01007c39ce072592ad6b7e946d53039f64b2ANALYSIS DATE: 2022-11-24T02:17:23ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – ransomware – e83cbdb1a9c0a13f007f6fe1e9531453

November 24, 2022

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: e83cbdb1a9c0a13f007f6fe1e9531453SHA1: e29c7c4321a7e218c447a363710ec36a8f3b35edANALYSIS DATE: 2022-11-24T02:16:24ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – 51b57fc5f41ad44e4e9c1b6b4a7147f3

November 24, 2022

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 51b57fc5f41ad44e4e9c1b6b4a7147f3SHA1: c9ccaee94962b66a96f8325ddb693e0f8c6ac1a0ANALYSIS DATE: 2022-11-24T02:17:28ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – d63c30ec13eab98c1795858f2f29daa7

November 24, 2022

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: d63c30ec13eab98c1795858f2f29daa7SHA1: 91af4149274d49d4560ea5ba7de87b07bde283fdANALYSIS DATE: 2022-11-24T02:16:30ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – c9e6806632ff78ae69417a4d9f6d818c

November 24, 2022

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: c9e6806632ff78ae69417a4d9f6d818cSHA1: df85f86e65db78c3c5bf00397a8c70fbee94109bANALYSIS DATE: 2022-11-23T18:41:39ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – a436bdb349c258f805b0c7f0d77e1dd1

November 24, 2022

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: a436bdb349c258f805b0c7f0d77e1dd1SHA1: 1d0e3678c3cf5531cc0a4f8bf8459528c0198705ANALYSIS DATE: 2022-11-23T18:48:38ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – 0722215a32cf7944f5cdf38aa4a303b7

November 24, 2022

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 0722215a32cf7944f5cdf38aa4a303b7SHA1: e844c567f09049c14290c5d93a904c41cc1a202dANALYSIS DATE: 2022-11-23T18:41:37ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – banker – 4f90c9fb3ee8cb50bfa20a419b2ed5af

November 24, 2022

Score: 8 MALWARE FAMILY: bankerTAGS:banker, ransomwareMD5: 4f90c9fb3ee8cb50bfa20a419b2ed5afSHA1: 671fc353c614eaac33569765626d466620cc350fANALYSIS DATE: 2022-11-23T18:53:34ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – ransomware – 8d52dada40130dcfef65781a5ae142ca

November 24, 2022

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 8d52dada40130dcfef65781a5ae142caSHA1: e3db70ed126f922d79453045fb01d7434fe252caANALYSIS DATE: 2022-11-23T18:54:35ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – evasion – 5cd95958129921ec92a154bd61aaee85

November 24, 2022

Score: 8 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 5cd95958129921ec92a154bd61aaee85SHA1: 156a50d2c3970653a96d17ee093ba85951eb5f52ANALYSIS DATE: 2022-11-23T18:55:31ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – evasion – a7f3d29a081b33f5349b2aeba2b32a53

November 24, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, infostealer, ransomwareMD5: a7f3d29a081b33f5349b2aeba2b32a53SHA1: 0e9468a71db6f6236d6770d7855e967175dcb174ANALYSIS DATE: 2022-11-23T18:55:35ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Security

Malware Analysis – persistence – b725067c7926e8a3268d2fabfcad7b4e

Cobalt Stike Beacon Detected – 110[.]40[.]201[.]49:443

Cobalt Stike Beacon Detected – 43[.]139[.]156[.]186:443

Cobalt Stike Beacon Detected – 172[.]86[.]123[.]13:443

Cobalt Stike Beacon Detected – 85[.]208[.]136[.]49:443

Malware Analysis – djvu – a5b4c672812208b47b9a9370902d4e1c

Malware Analysis – ransomware – fecea0c22b3fc1a848902bcae0d16027

Malware Analysis – djvu – dfb556e14a10b5145a33f1a3efabdf88

Malware Analysis – banker – 425ca585e1689771f69c442036192d78

An aggressive malware campaign targets US-based companies with Qakbot to deliver Black Basta Ransomware

Threat actors exploit discontinues Boa web servers to target critical infrastructure

Black Friday shoppers beware: online threats so far in 2022

Malware Analysis – evasion – a4cea260c512dde09d9166744e42aba0

Malware Analysis – evasion – c7acfecc9e19773876dab3f1a83343ab

Malware Analysis – ransomware – e83cbdb1a9c0a13f007f6fe1e9531453

Malware Analysis – ransomware – 51b57fc5f41ad44e4e9c1b6b4a7147f3

Malware Analysis – ransomware – d63c30ec13eab98c1795858f2f29daa7

Malware Analysis – ransomware – c9e6806632ff78ae69417a4d9f6d818c

Malware Analysis – ransomware – a436bdb349c258f805b0c7f0d77e1dd1

Malware Analysis – ransomware – 0722215a32cf7944f5cdf38aa4a303b7

Malware Analysis – banker – 4f90c9fb3ee8cb50bfa20a419b2ed5af

Malware Analysis – ransomware – 8d52dada40130dcfef65781a5ae142ca

Malware Analysis – evasion – 5cd95958129921ec92a154bd61aaee85

Malware Analysis – evasion – a7f3d29a081b33f5349b2aeba2b32a53

CVE Alert: CVE-2025-10459 – PHPGurukul – Beauty Parlour Management System

CVE Alert: CVE-2025-10443 – Tenda – AC9

CVE Alert: CVE-2025-10444 – Campcodes – Online Job Finder System

CVE Alert: CVE-2025-10448 – Campcodes – Online Job Finder System

CVE Alert: CVE-2025-10446 – Campcodes – Computer Sales and Inventory System

You may have missed