Security

Malware Analysis – eternity – 80094cdfc9743ea1e4decfe916105b76

October 19, 2022

Score: 10 MALWARE FAMILY: eternityTAGS:family:eternity, evasion, ransomwareMD5: 80094cdfc9743ea1e4decfe916105b76SHA1: b26f5fd083dc51eb5149e821f4361382ea43c319ANALYSIS DATE: 2022-10-19T09:12:09ZTTPS: T1053, T1107, T1490, T1082, T1018 ScoreMeaningExample10Known badA malware family...

Malware Analysis – lockbit – d75882dafa8f1d34b635596426668b8d

October 19, 2022

Score: 10 MALWARE FAMILY: lockbitTAGS:family:lockbit, ransomwareMD5: d75882dafa8f1d34b635596426668b8dSHA1: e359767434109ff1138ec03bc3b0b239ad5d1634ANALYSIS DATE: 2022-10-19T09:22:08ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – persistence – 9528ea8dec82f5cd13f44d9ff358b2bf

October 19, 2022

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 9528ea8dec82f5cd13f44d9ff358b2bfSHA1: df8e3f87a2a8690c5cb25dff1ac7ce0b902fcbb7ANALYSIS DATE: 2022-10-19T08:40:17ZTTPS: T1107, T1490, T1053, T1082, T1012, T1120, T1005, T1081,...

Malware Analysis – djvu – dc38da1da1e88bac04121824d2abb81a

October 19, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: dc38da1da1e88bac04121824d2abb81aSHA1: 101f00bcbba421c4f14a20a7da382acbfe900e52ANALYSIS DATE: 2022-10-19T09:47:30ZTTPS: T1222, T1060, T1112, T1005,...

Malware Analysis – danabot – 072433c8fab1e14873361e2a95ec5d37

October 19, 2022

Score: 10 MALWARE FAMILY: danabotTAGS:family:danabot, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, banker, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 072433c8fab1e14873361e2a95ec5d37SHA1: 8d1b707184f7f20950643bc82db590edd081a71bANALYSIS...

Malware Analysis – djvu – 0ffeb9f5001377ea8c199cf13dcd5f2b

October 19, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 0ffeb9f5001377ea8c199cf13dcd5f2bSHA1: 644bc255288ee4a7664540e1c55872fdb533bc6dANALYSIS DATE: 2022-10-19T09:39:49ZTTPS: T1005, T1081, T1222, T1053,...

Malware Analysis – djvu – 45534d9fae89d8bd0166236fef70aac1

October 19, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: 45534d9fae89d8bd0166236fef70aac1SHA1: a45ee6c9777446f3f1687cd2f70f3aa3e480b296ANALYSIS DATE: 2022-10-19T09:38:35ZTTPS: T1053, T1060, T1112, T1222, T1082, T1012 ScoreMeaningExample10Known badA...

Malware Analysis – blackbasta – 6a202e9a95f58938d02385e31d43ed87

October 19, 2022

Score: 10 MALWARE FAMILY: blackbastaTAGS:family:blackbasta, ransomwareMD5: 6a202e9a95f58938d02385e31d43ed87SHA1: 53628c7a155ccb7af1135140083939018d3587f1ANALYSIS DATE: 2022-10-19T10:40:19ZTTPS: T1107, T1490, T1491, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ransomware – f5c9c7b404aa41bb2bbc1704afeb9f0d

October 19, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: f5c9c7b404aa41bb2bbc1704afeb9f0dSHA1: 1ca01cd00899330b918678d5f0ee00ab94d26f89ANALYSIS DATE: 2022-10-19T10:40:23ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – blackbasta – 0c69e91c2f54978ae3103b26686b2610

October 19, 2022

Score: 10 MALWARE FAMILY: blackbastaTAGS:family:blackbasta, ransomwareMD5: 0c69e91c2f54978ae3103b26686b2610SHA1: 3e3b113a5ab64e03ffe86e0fa9a2163816f9ecdfANALYSIS DATE: 2022-10-19T10:40:26ZTTPS: T1107, T1490, T1491, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – danabot – ae489c5fec00f4363d3367b5a995a8db

October 19, 2022

Score: 10 MALWARE FAMILY: danabotTAGS:family:danabot, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, banker, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: ae489c5fec00f4363d3367b5a995a8dbSHA1: eb0e5e3e21b4ce9995b4f570eed9e393a8d2f8e4ANALYSIS...

Cobalt Stike Beacon Detected – 69[.]49[.]245[.]24:8080

October 19, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 106[.]13[.]206[.]236:8011

October 19, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – persistence – 60f87cba4fc4edc6a22d5dd65827e9b4

October 19, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 60f87cba4fc4edc6a22d5dd65827e9b4SHA1: 1daa253da17f83939ccf0a6ddf6578570daaee54ANALYSIS DATE: 2022-10-19T10:40:40ZTTPS: T1107, T1490, T1091, T1060, T1112, T1005, T1081, T1082...

Malware Analysis – ransomware – af3175967e229bbc607bc32699cef621

October 19, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: af3175967e229bbc607bc32699cef621SHA1: 683449dd00992bff104e987a130eca526cd39afbANALYSIS DATE: 2022-10-19T10:40:31ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 91504a2349db14afb99e62b5d6f693d4

October 19, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 91504a2349db14afb99e62b5d6f693d4SHA1: 90a1df9e4812850e95545d07509472b0614c8f71ANALYSIS DATE: 2022-10-19T10:40:34ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – persistence – f21bcc4d9dd94342c1602e96534002b6

October 19, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: f21bcc4d9dd94342c1602e96534002b6SHA1: 1a7e9f7896a02df7e9729e481890a4ee82daac1eANALYSIS DATE: 2022-10-19T10:40:46ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091, T1060, T1112...

Cobalt Stike Beacon Detected – 168[.]100[.]11[.]84:80

October 19, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 1[.]15[.]67[.]80:443

October 19, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 5[.]8[.]18[.]242:443

October 19, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 49[.]232[.]144[.]57:80

October 19, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Microsoft Office 365 Message Encryption (OME) doesn’t ensure confidentiality

October 19, 2022

A bug in the message encryption mechanism used by Microsoft in Office 365 can allow to access the contents of the...

Malware Analysis – djvu – f41b9e7741b3c6ea33a947e85f8ecd89

October 19, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, stealer, trojan, vmprotectMD5: f41b9e7741b3c6ea33a947e85f8ecd89SHA1: 1d17879310cf6ae6d3388f29bfc3ddc062c2d980ANALYSIS DATE: 2022-10-18T20:09:37ZTTPS:...

Malware Analysis – ransomware – 3bd4ed1833f9ebf0c572cb573169536c

October 19, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 3bd4ed1833f9ebf0c572cb573169536cSHA1: a589f3a6991d4b9bddc598616b4f1372a2d318e2ANALYSIS DATE: 2022-10-18T20:00:18ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Security

Malware Analysis – eternity – 80094cdfc9743ea1e4decfe916105b76

Malware Analysis – lockbit – d75882dafa8f1d34b635596426668b8d

Malware Analysis – persistence – 9528ea8dec82f5cd13f44d9ff358b2bf

Malware Analysis – djvu – dc38da1da1e88bac04121824d2abb81a

Malware Analysis – danabot – 072433c8fab1e14873361e2a95ec5d37

Malware Analysis – djvu – 0ffeb9f5001377ea8c199cf13dcd5f2b

Malware Analysis – djvu – 45534d9fae89d8bd0166236fef70aac1

Malware Analysis – blackbasta – 6a202e9a95f58938d02385e31d43ed87

Malware Analysis – ransomware – f5c9c7b404aa41bb2bbc1704afeb9f0d

Malware Analysis – blackbasta – 0c69e91c2f54978ae3103b26686b2610

Malware Analysis – danabot – ae489c5fec00f4363d3367b5a995a8db

Cobalt Stike Beacon Detected – 69[.]49[.]245[.]24:8080

Cobalt Stike Beacon Detected – 106[.]13[.]206[.]236:8011

Malware Analysis – persistence – 60f87cba4fc4edc6a22d5dd65827e9b4

Malware Analysis – ransomware – af3175967e229bbc607bc32699cef621

Malware Analysis – ransomware – 91504a2349db14afb99e62b5d6f693d4

Malware Analysis – persistence – f21bcc4d9dd94342c1602e96534002b6

Cobalt Stike Beacon Detected – 168[.]100[.]11[.]84:80

Cobalt Stike Beacon Detected – 1[.]15[.]67[.]80:443

Cobalt Stike Beacon Detected – 5[.]8[.]18[.]242:443

Cobalt Stike Beacon Detected – 49[.]232[.]144[.]57:80

Microsoft Office 365 Message Encryption (OME) doesn’t ensure confidentiality

Malware Analysis – djvu – f41b9e7741b3c6ea33a947e85f8ecd89

Malware Analysis – ransomware – 3bd4ed1833f9ebf0c572cb573169536c

Cobalt Strike Beacon Detected – 121[.]43[.]37[.]134:4434

Cobalt Strike Beacon Detected – 119[.]29[.]231[.]118:443

Cobalt Strike Beacon Detected – 39[.]101[.]74[.]162:443

Cobalt Strike Beacon Detected – 8[.]218[.]112[.]112:8880

Cobalt Strike Beacon Detected – 47[.]109[.]48[.]57:443

You may have missed