Security

Malware Analysis – evasion – da3628b2a375448ed4b7410bf1b0c74e

July 4, 2023

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: da3628b2a375448ed4b7410bf1b0c74eSHA1: e33e4bb6558b0e256630ee8c1d4c6aca14333e4aANALYSIS DATE: 2023-07-04T15:31:00ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – djvu – ca1a0dd10f4376823f81798a4a338be2

July 4, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:dcad9d884915bbb6106f78e5e2ea6168, discovery, persistence, ransomware, spyware, stealerMD5: ca1a0dd10f4376823f81798a4a338be2SHA1: d53498d723618519e928701cb8f0259e3a961504ANALYSIS DATE: 2023-07-04T17:53:28ZTTPS: T1005, T1081, T1130, T1112,...

Malware Analysis – smokeloader – f2a67f87ec8bddd18aae50dd235a5da1

July 4, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: f2a67f87ec8bddd18aae50dd235a5da1SHA1: f91b677f3f8e9c9169039d45cdde6a98d27b8a34ANALYSIS DATE: 2023-07-04T17:34:05ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – persistence – f197e2ade3bf47b6a7ff836c1e7987d3

July 4, 2023

Score: 8 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: f197e2ade3bf47b6a7ff836c1e7987d3SHA1: 0c229bfce0057396ed162988a269175775dc2295ANALYSIS DATE: 2023-07-04T17:56:27ZTTPS: T1491, T1112, T1060 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – discovery – f2864f06a6d63659e8564a91221847d4

July 3, 2023

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploitMD5: f2864f06a6d63659e8564a91221847d4SHA1: 8c4bbc50763f161370cabdf89b7d05c225df171dANALYSIS DATE: 2023-07-03T16:48:50ZTTPS: T1082, T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – ransomware – 42b7a689dceb3fc309afd809464806b9

July 3, 2023

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 42b7a689dceb3fc309afd809464806b9SHA1: df108c9807b29edc077f4b19421e3b5088a2be07ANALYSIS DATE: 2023-07-03T17:44:00ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – smokeloader – 9a6aca4f51392e1c36e2526daf901f84

July 3, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 9a6aca4f51392e1c36e2526daf901f84SHA1: 6e1f252146f42f338aec76c26cf7f0d39eec70fcANALYSIS DATE: 2023-07-03T15:46:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Security

Malware Analysis – evasion – da3628b2a375448ed4b7410bf1b0c74e

Malware Analysis – djvu – ca1a0dd10f4376823f81798a4a338be2

Malware Analysis – smokeloader – f2a67f87ec8bddd18aae50dd235a5da1

Malware Analysis – persistence – f197e2ade3bf47b6a7ff836c1e7987d3

Malware Analysis – discovery – f2864f06a6d63659e8564a91221847d4

Malware Analysis – ransomware – 42b7a689dceb3fc309afd809464806b9

Malware Analysis – smokeloader – 9a6aca4f51392e1c36e2526daf901f84

Cobalt Stike Beacon Detected – 101[.]43[.]13[.]21:8022

Cobalt Stike Beacon Detected – 114[.]132[.]74[.]172:80

Cobalt Stike Beacon Detected – 124[.]221[.]76[.]197:80

Cobalt Stike Beacon Detected – 101[.]43[.]101[.]166:80

Cobalt Stike Beacon Detected – 54[.]206[.]96[.]191:443

Cobalt Stike Beacon Detected – 194[.]50[.]153[.]117:8080

Cobalt Stike Beacon Detected – 118[.]195[.]198[.]108:8080

Cobalt Stike Beacon Detected – 69[.]165[.]70[.]102:8099

Cobalt Stike Beacon Detected – 13[.]235[.]190[.]252:80

CISA: CISA Adds Six Known Exploited Vulnerabilities to Catalog

CISA: VMware Releases Security Update for vCenter Server and Cloud Foundation

CISA: CISA Adds Five Known Exploited Vulnerabilities to Catalog

CISA: CISA Releases SCuBA TRA and eVRF Guidance Documents

CISA: CISA Releases One Industrial Control Systems Advisory

CISA: 2023 CWE Top 25 Most Dangerous Software Weaknesses

CISA: CISA Releases Nine Industrial Control Systems Advisories

CISA: DoS and DDoS Attacks against Multiple Sectors

CVE Alert: CVE-2025-49601

CVE Alert: CVE-2025-49600

CVE Alert: CVE-2025-52497

CVE Alert: CVE-2025-52496

CVE Alert: CVE-2025-7067

You may have missed