Security

Malware Analysis – djvu – 6836ea5f1dd9575394d3d549e29729f7

November 19, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: 6836ea5f1dd9575394d3d549e29729f7SHA1: 941860f0b34142aa11a1e5e4bbf10035568f1d7dANALYSIS DATE: 2022-11-19T17:29:41ZTTPS: T1130, T1112, T1060, T1222, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – smokeloader – c6e438c54033096a47d752040658de04

November 19, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: c6e438c54033096a47d752040658de04SHA1: 9856b7ab9e99830f5819408b61527b5f422d8f45ANALYSIS DATE: 2022-11-19T17:51:16ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – dcrat – e812b559b4f0a8fd5d11c86e2b7bbdea

November 19, 2022

Score: 10 MALWARE FAMILY: dcratTAGS:family:dcrat, family:djvu, family:redline, family:smokeloader, family:vidar, botnet:517, botnet:mario23_10, backdoor, collection, discovery, infostealer, persistence, ransomware, rat, spyware, stealer,...

Malware Analysis – ransomware – 49e12e0bd76941ab54dec0db51cd6e22

November 19, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 49e12e0bd76941ab54dec0db51cd6e22SHA1: da575ad370d523ed8017f354645dbae9f22180a7ANALYSIS DATE: 2022-11-19T17:34:38ZTTPS: T1107, T1490, T1005, T1081 ScoreMeaningExample10Known badA malware family was...

Security

Malware Analysis – djvu – 6836ea5f1dd9575394d3d549e29729f7

Malware Analysis – smokeloader – c6e438c54033096a47d752040658de04

Malware Analysis – dcrat – e812b559b4f0a8fd5d11c86e2b7bbdea

Malware Analysis – ransomware – 49e12e0bd76941ab54dec0db51cd6e22

Black Friday and Cyber Monday, crooks are already at work

Wodat – Windows Oracle Database Attack Toolkit

Cobalt Stike Beacon Detected – 118[.]99[.]27[.]116:8080

Cobalt Stike Beacon Detected – 147[.]78[.]242[.]119:80

Cobalt Stike Beacon Detected – 123[.]60[.]223[.]157:9999

Cobalt Stike Beacon Detected – 101[.]35[.]149[.]44:80

Cobalt Stike Beacon Detected – 139[.]196[.]171[.]222:443

Cobalt Stike Beacon Detected – 107[.]189[.]6[.]84:443

Cobalt Stike Beacon Detected – 101[.]35[.]149[.]44:443

Cobalt Stike Beacon Detected – 119[.]23[.]61[.]144:80

Cobalt Stike Beacon Detected – 194[.]165[.]16[.]92:443

Cobalt Stike Beacon Detected – 120[.]79[.]252[.]209:80

Cobalt Stike Beacon Detected – 79[.]133[.]56[.]243:443

Cobalt Stike Beacon Detected – 116[.]196[.]108[.]157:80

New improved versions of LodaRAT spotted in the wild

IT threat evolution in Q3 2022. Non-mobile statistics

IT threat evolution in Q3 2022. Mobile statistics

IT threat evolution Q3 2022

Cobalt Stike Beacon Detected – 47[.]94[.]172[.]106:4999

Cobalt Stike Beacon Detected – 47[.]106[.]91[.]17:80

Cobalt Strike Beacon Detected – 121[.]41[.]167[.]80:80

Cobalt Strike Beacon Detected – 38[.]190[.]224[.]63:80

Cobalt Strike Beacon Detected – 152[.]32[.]251[.]78:80

Cobalt Strike Beacon Detected – 156[.]233[.]233[.]134:80

Cobalt Strike Beacon Detected – 124[.]220[.]164[.]98:80

You may have missed