Security

Malware Analysis – netwalker – 80372de850597bd9e7e021a94f13f0a1

October 12, 2022

Score: 10 MALWARE FAMILY: netwalkerTAGS:family:netwalker, ransomware, spyware, stealerMD5: 80372de850597bd9e7e021a94f13f0a1SHA1: 037db820c8dee94ae25a439b758a2b89f527cbb4ANALYSIS DATE: 2022-10-12T09:57:03ZTTPS: T1107, T1490, T1005, T1081 ScoreMeaningExample10Known badA malware family...

Malware Analysis – djvu – 3fd2bbeeef907e2943ff4e2f6fb24e9a

October 12, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 3fd2bbeeef907e2943ff4e2f6fb24e9aSHA1: e403f202f605fdf9f928c135e55d32ee8757a4fbANALYSIS DATE: 2022-10-12T09:56:22ZTTPS: T1082, T1053, T1005, T1081,...

Malware Analysis – – cfd31737ccacf6e9a0e2ac18cf3445ac

October 12, 2022

Score: 4 MALWARE FAMILY: TAGS:MD5: cfd31737ccacf6e9a0e2ac18cf3445acSHA1: 74c615ca54aaff3c5e6734efef04259290c357baANALYSIS DATE: 2022-10-12T09:58:05ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Cobalt Stike Beacon Detected – 51[.]178[.]11[.]176:80

October 12, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 43[.]138[.]66[.]190:8848

October 12, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 138[.]68[.]188[.]101:443

October 12, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 139[.]155[.]90[.]81:8443

October 12, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – xorist – e98a127ed90e67cd30344bdb691384a1

October 12, 2022

Score: 10 MALWARE FAMILY: xoristTAGS:family:xorist, persistence, ransomware, upxMD5: e98a127ed90e67cd30344bdb691384a1SHA1: a79fe32686a67aa3011d397460d748b3d149d0beANALYSIS DATE: 2022-10-12T09:58:05ZTTPS: T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – persistence – 5569ef5cc1b99eee164438d95d601baf

October 12, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 5569ef5cc1b99eee164438d95d601bafSHA1: 27a889e1542b6ebe68130db3618c0de4f40fadb5ANALYSIS DATE: 2022-10-12T10:01:04ZTTPS: T1107, T1490, T1060, T1112, T1005, T1081, T1082, T1012,...

Malware Analysis – persistence – 6c42c7957278c7ac09b111490fc93cc1

October 12, 2022

Score: 8 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 6c42c7957278c7ac09b111490fc93cc1SHA1: 29f9b35533f1a6dbf47ed5dfb4144c33d33ce91bANALYSIS DATE: 2022-10-12T09:58:05ZTTPS: T1060, T1112, T1005, T1081 ScoreMeaningExample10Known badA malware family...

Malware Analysis – ransomware – 8119c78b7cfb7d9ce37286ec9fc263e2

October 12, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 8119c78b7cfb7d9ce37286ec9fc263e2SHA1: 986ba7a5714ad5b0de0d040d1c066389bcb81a67ANALYSIS DATE: 2022-10-12T10:21:03ZTTPS: T1059, T1107, T1490, T1005, T1081 ScoreMeaningExample10Known badA malware family...

Cobalt Stike Beacon Detected – 31[.]41[.]244[.]192:443

October 12, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 46[.]175[.]148[.]74:80

October 12, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 46[.]175[.]148[.]53:443

October 12, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 43[.]143[.]94[.]214:8000

October 12, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – 9dead8d771b215649c86c1374a591799

October 12, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 9dead8d771b215649c86c1374a591799SHA1: 5298328fabb9c73665793e0b93051567408db8a7ANALYSIS DATE: 2022-10-12T10:22:17ZTTPS: T1005, T1081, T1012, T1060,...

Malware Analysis – smokeloader – 5d93dd4f046d16989f0dc53f6bb3326f

October 12, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 5d93dd4f046d16989f0dc53f6bb3326fSHA1: cc20ab38c977b233a38730174b58bb04a7d1e646ANALYSIS DATE: 2022-10-12T10:35:48ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 6801db35f78978c4b99f6d78a5753eff

October 12, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 6801db35f78978c4b99f6d78a5753effSHA1: afeb1ce64b59ea20876bc2fee8a70023e56d6797ANALYSIS DATE: 2022-10-12T10:23:03ZTTPS: T1053, T1005, T1081, T1222,...

Malware Analysis – ermac – 24b1ce69f7066a7bc9bc32e3c969d8d9

October 12, 2022

Score: 10 MALWARE FAMILY: ermacTAGS:family:ermac, banker, evasion, infostealer, ransomware, trojanMD5: 24b1ce69f7066a7bc9bc32e3c969d8d9SHA1: f36ff949217f3340a717a0e5a4d079b254b876beANALYSIS DATE: 2022-10-12T10:25:27ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

VMware has yet to fix CVE-2021-22048 flaw in vCenter Server disclosed one year ago

October 12, 2022

VMware has yet to address the CVE-2021-22048 privilege escalation vulnerability in vCenter Server disclosed in November 2021. VMware warns customers...

LockBit affiliates compromise Microsoft Exchange servers to deploy ransomware

October 12, 2022

Lockbit ransomware affiliates are compromising Microsoft Exchange servers to deploy their ransomware, experts warn. South-Korean cybersecurity firm AhnLab reported that...

Malware Analysis – evasion – 658d4950dbc04072e1ed1f2f1b5204b0

October 12, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealer, trojanMD5: 658d4950dbc04072e1ed1f2f1b5204b0SHA1: aec694f67a173222721118651711b969fbbfe55dANALYSIS DATE: 2022-10-11T17:28:02ZTTPS: T1088, T1089, T1112, T1060, T1004, T1082,...

Malware Analysis – persistence – 6fcdf8e4e096f17b789d0722d42a80c0

October 12, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 6fcdf8e4e096f17b789d0722d42a80c0SHA1: 26d8784b92e98af4709d29a8f58129405cae6133ANALYSIS DATE: 2022-10-11T18:43:42ZTTPS: T1107, T1490, T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – persistence – 2cd3b2d532385451b2ce4e19983c88a0

October 12, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 2cd3b2d532385451b2ce4e19983c88a0SHA1: 75d4fd48e64529129cff1654ba57417d0e8399e9ANALYSIS DATE: 2022-10-11T18:13:58ZTTPS: T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Security

Malware Analysis – netwalker – 80372de850597bd9e7e021a94f13f0a1

Malware Analysis – djvu – 3fd2bbeeef907e2943ff4e2f6fb24e9a

Malware Analysis – – cfd31737ccacf6e9a0e2ac18cf3445ac

Cobalt Stike Beacon Detected – 51[.]178[.]11[.]176:80

Cobalt Stike Beacon Detected – 43[.]138[.]66[.]190:8848

Cobalt Stike Beacon Detected – 138[.]68[.]188[.]101:443

Cobalt Stike Beacon Detected – 139[.]155[.]90[.]81:8443

Malware Analysis – xorist – e98a127ed90e67cd30344bdb691384a1

Malware Analysis – persistence – 5569ef5cc1b99eee164438d95d601baf

Malware Analysis – persistence – 6c42c7957278c7ac09b111490fc93cc1

Malware Analysis – ransomware – 8119c78b7cfb7d9ce37286ec9fc263e2

Cobalt Stike Beacon Detected – 31[.]41[.]244[.]192:443

Cobalt Stike Beacon Detected – 46[.]175[.]148[.]74:80

Cobalt Stike Beacon Detected – 46[.]175[.]148[.]53:443

Cobalt Stike Beacon Detected – 43[.]143[.]94[.]214:8000

Malware Analysis – djvu – 9dead8d771b215649c86c1374a591799

Malware Analysis – smokeloader – 5d93dd4f046d16989f0dc53f6bb3326f

Malware Analysis – djvu – 6801db35f78978c4b99f6d78a5753eff

Malware Analysis – ermac – 24b1ce69f7066a7bc9bc32e3c969d8d9

VMware has yet to fix CVE-2021-22048 flaw in vCenter Server disclosed one year ago

LockBit affiliates compromise Microsoft Exchange servers to deploy ransomware

Malware Analysis – evasion – 658d4950dbc04072e1ed1f2f1b5204b0

Malware Analysis – persistence – 6fcdf8e4e096f17b789d0722d42a80c0

Malware Analysis – persistence – 2cd3b2d532385451b2ce4e19983c88a0

Cobalt Strike Beacon Detected – 121[.]43[.]37[.]134:4434

Cobalt Strike Beacon Detected – 119[.]29[.]231[.]118:443

Cobalt Strike Beacon Detected – 39[.]101[.]74[.]162:443

Cobalt Strike Beacon Detected – 8[.]218[.]112[.]112:8880

Cobalt Strike Beacon Detected – 47[.]109[.]48[.]57:443

You may have missed