Security

Malware Analysis – smokeloader – 20f6d6a75c4e0f1f0e59f4ce9da4fcdf

October 8, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 20f6d6a75c4e0f1f0e59f4ce9da4fcdfSHA1: f733f55da3f6df46838d86d2b564f6ddf880b571ANALYSIS DATE: 2022-10-08T02:32:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 20f6d6a75c4e0f1f0e59f4ce9da4fcdf

October 8, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:raccoon, family:smokeloader, family:vidar, botnet:17aad1e8aa2ca5164d7690cff1926390, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 20f6d6a75c4e0f1f0e59f4ce9da4fcdfSHA1: f733f55da3f6df46838d86d2b564f6ddf880b571ANALYSIS...

Malware Analysis – djvu – e931ee5e0c7a7eb47c201828c496e794

October 8, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: e931ee5e0c7a7eb47c201828c496e794SHA1: 455b3c1d2a56223464c9ad15593e0ffdc00d7b6cANALYSIS DATE: 2022-10-08T03:21:38ZTTPS: T1005, T1081, T1082, T1053,...

Malware Analysis – djvu – 4167826d2a9574ab9fca45f85f5fd6a0

October 8, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 4167826d2a9574ab9fca45f85f5fd6a0SHA1: 49a1aa342bd5b9a095f08742612f4ea5ae7e8c6fANALYSIS DATE: 2022-10-08T04:32:25ZTTPS:...

Malware Analysis – smokeloader – 4167826d2a9574ab9fca45f85f5fd6a0

October 8, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 4167826d2a9574ab9fca45f85f5fd6a0SHA1: 49a1aa342bd5b9a095f08742612f4ea5ae7e8c6fANALYSIS DATE: 2022-10-08T04:31:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 9c4823daf9720caa8ba8cf87334ad4da

October 8, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 9c4823daf9720caa8ba8cf87334ad4daSHA1: 8fee76d26cc5b1b24c2fca445c7cfebffec9baa7ANALYSIS DATE: 2022-10-08T04:13:47ZTTPS: T1082, T1053, T1005, T1081,...

Malware Analysis – djvu – 4d8f01c686b099f19366ee38ac8b423c

October 8, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:raccoon, family:smokeloader, family:vidar, botnet:17aad1e8aa2ca5164d7690cff1926390, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 4d8f01c686b099f19366ee38ac8b423cSHA1: 8b12aff95432b1a081a0ab98e8ac12f7a6b98787ANALYSIS...

Malware Analysis – djvu – 5a8964c1736685a4722e620d684039a8

October 8, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 5a8964c1736685a4722e620d684039a8SHA1: ac4960c01594cbc5ca318e2750f4c3be8e6d3648ANALYSIS DATE: 2022-10-07T20:06:42ZTTPS: T1222, T1012, T1005, T1081,...

Malware Analysis – smokeloader – 0a6d023a881a991889d17599933d54dc

October 8, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 0a6d023a881a991889d17599933d54dcSHA1: 1b76869811dc1454a02d8040b93c8f18235275a7ANALYSIS DATE: 2022-10-07T20:02:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 5a57749940203a2e3cf95db11cd5aa24

October 8, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 5a57749940203a2e3cf95db11cd5aa24SHA1: 9d515f5c1b69d8383c7ade501a8eaba614fec817ANALYSIS DATE: 2022-10-07T20:08:30ZTTPS: T1053, T1005, T1081, T1012,...

Malware Analysis – amadey – 202ed4dfaa2620644047a5352e4b4837

October 8, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:dcrat, family:djvu, family:raccoon, family:smokeloader, family:vidar, botnet:17aad1e8aa2ca5164d7690cff1926390, botnet:517, botnet:9333547b6d5c69ea798fd93c66d78435, backdoor, collection, discovery, infostealer, persistence, ransomware, rat,...

Malware Analysis – smokeloader – 202ed4dfaa2620644047a5352e4b4837

October 8, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 202ed4dfaa2620644047a5352e4b4837SHA1: b67aa9b87cd0bd54303e709081219b4a72484a80ANALYSIS DATE: 2022-10-07T21:01:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – discovery –

October 8, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: SHA1: ANALYSIS DATE: 2022-10-07T20:43:33ZTTPS: T1060, T1012, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – dcrat – 0a6d023a881a991889d17599933d54dc

October 8, 2022

Score: 10 MALWARE FAMILY: dcratTAGS:family:dcrat, family:djvu, family:raccoon, family:smokeloader, family:vidar, botnet:517, botnet:9333547b6d5c69ea798fd93c66d78435, backdoor, collection, discovery, infostealer, persistence, ransomware, rat, spyware, stealer,...

Malware Analysis – redline –

October 8, 2022

Score: 10 MALWARE FAMILY: redlineTAGS:family:redline, discovery, infostealer, persistence, ransomware, spywareMD5: SHA1: ANALYSIS DATE: 2022-10-07T21:42:51ZTTPS: T1112, T1042, T1012, T1053, T1082, T1060,...

Malware Analysis – djvu – 1cddff2e62db2216a698dac1725cbf5a

October 8, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 1cddff2e62db2216a698dac1725cbf5aSHA1: ea7b217b1072045dae8ecf6900324ede5b63254cANALYSIS DATE: 2022-10-07T21:34:30ZTTPS: T1222, T1082, T1053, T1012,...

Malware Analysis – chaos – 7207ca74c41a0334f0d686efb3cb6adf

October 8, 2022

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, ransomwareMD5: 7207ca74c41a0334f0d686efb3cb6adfSHA1: aaeac974a5b9c87c7d533930ff3eac496c3e5f79ANALYSIS DATE: 2022-10-07T21:58:35ZTTPS: T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – djvu – a355bf6cf3be6df5ae5b5bdd33167a79

October 8, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: a355bf6cf3be6df5ae5b5bdd33167a79SHA1: 737f5ff38ed8beef74d21744695222e6ff62de96ANALYSIS DATE: 2022-10-07T21:54:34ZTTPS: T1012, T1082, T1005, T1081,...

Malware Analysis – chaos – 7207ca74c41a0334f0d686efb3cb6adf

October 8, 2022

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, persistence, ransomwareMD5: 7207ca74c41a0334f0d686efb3cb6adfSHA1: aaeac974a5b9c87c7d533930ff3eac496c3e5f79ANALYSIS DATE: 2022-10-07T21:59:02ZTTPS: T1060, T1112, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – amadey – ab52d0e0c28f95e72dbb57892b79821d

October 8, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:dcrat, family:djvu, family:raccoon, family:smokeloader, family:vidar, botnet:17aad1e8aa2ca5164d7690cff1926390, botnet:517, backdoor, collection, discovery, infostealer, persistence, ransomware, rat, spyware,...

Malware Analysis – djvu – 15de1f9a2b55567830664ae564c30ef9

October 8, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 15de1f9a2b55567830664ae564c30ef9SHA1: 51bc75bf526b4be34f25b99e8d0c025c95dea9fbANALYSIS DATE: 2022-10-07T22:52:24ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – smokeloader – ab52d0e0c28f95e72dbb57892b79821d

October 8, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: ab52d0e0c28f95e72dbb57892b79821dSHA1: 57fa91bd1a4cbd66df19d6fcd7252a79355a8691ANALYSIS DATE: 2022-10-07T22:01:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Cobalt Stike Beacon Detected – 54[.]179[.]71[.]199:80

October 8, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 1[.]15[.]232[.]225:801

October 8, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Security

Malware Analysis – smokeloader – 20f6d6a75c4e0f1f0e59f4ce9da4fcdf

Malware Analysis – djvu – 20f6d6a75c4e0f1f0e59f4ce9da4fcdf

Malware Analysis – djvu – e931ee5e0c7a7eb47c201828c496e794

Malware Analysis – djvu – 4167826d2a9574ab9fca45f85f5fd6a0

Malware Analysis – smokeloader – 4167826d2a9574ab9fca45f85f5fd6a0

Malware Analysis – djvu – 9c4823daf9720caa8ba8cf87334ad4da

Malware Analysis – djvu – 4d8f01c686b099f19366ee38ac8b423c

Malware Analysis – djvu – 5a8964c1736685a4722e620d684039a8

Malware Analysis – smokeloader – 0a6d023a881a991889d17599933d54dc

Malware Analysis – djvu – 5a57749940203a2e3cf95db11cd5aa24

Malware Analysis – amadey – 202ed4dfaa2620644047a5352e4b4837

Malware Analysis – smokeloader – 202ed4dfaa2620644047a5352e4b4837

Malware Analysis – discovery –

Malware Analysis – dcrat – 0a6d023a881a991889d17599933d54dc

Malware Analysis – redline –

Malware Analysis – djvu – 1cddff2e62db2216a698dac1725cbf5a

Malware Analysis – chaos – 7207ca74c41a0334f0d686efb3cb6adf

Malware Analysis – djvu – a355bf6cf3be6df5ae5b5bdd33167a79

Malware Analysis – chaos – 7207ca74c41a0334f0d686efb3cb6adf

Malware Analysis – amadey – ab52d0e0c28f95e72dbb57892b79821d

Malware Analysis – djvu – 15de1f9a2b55567830664ae564c30ef9

Malware Analysis – smokeloader – ab52d0e0c28f95e72dbb57892b79821d

Cobalt Stike Beacon Detected – 54[.]179[.]71[.]199:80

Cobalt Stike Beacon Detected – 1[.]15[.]232[.]225:801

BugCrowd Bug Bounty Disclosure: P3 – Reflected XSS in `type` parameter on nlsp.nasa.gov – Marcel_Malaeb

[AKIRA] – Ransomware Victim: Econo-Pak

[RANSOMHOUSE] – Ransomware Victim: ASKUL

[AKIRA] – Ransomware Victim: RPI Roofing

[AKIRA] – Ransomware Victim: The Gerson

You may have missed