Security

Malware Analysis – banker – 1fd1f86a3032c69587ab152daad57589

June 25, 2023

Score: 9 MALWARE FAMILY: bankerTAGS:banker, evasion, ransomwareMD5: 1fd1f86a3032c69587ab152daad57589SHA1: 1e6e7c779f661f5a4cef2ad09c19507a1ef7928dANALYSIS DATE: 2023-06-25T17:13:55ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Cobalt Stike Beacon Detected – 139[.]155[.]144[.]97:9443

June 25, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 146[.]190[.]212[.]94:443

June 25, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 124[.]223[.]34[.]106:80

June 25, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 47[.]113[.]231[.]140:81

June 25, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 95[.]214[.]27[.]59:9999

June 25, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 139[.]199[.]181[.]68:443

June 25, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 194[.]41[.]59[.]3:80

June 25, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

CISA: Progress Software Releases Security Advisory for MOVEit Transfer Vulnerability

June 25, 2023

Progress Software Releases Security Advisory for MOVEit Transfer Vulnerability Progress Software has released a security advisory(link is external) for a...

CISA: CISA Adds Six Known Exploited Vulnerabilities to Catalog

June 25, 2023

CISA Adds Six Known Exploited Vulnerabilities to Catalog CISA has added six new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based...

CISA: CISA Releases Two Industrial Control Systems Advisories

June 25, 2023

CISA Releases Two Industrial Control Systems Advisories CISA released two Industrial Control Systems (ICS) advisories on June 20, 2023. These...

CISA: CISA, FBI, and MS-ISAC Update Joint CSA on Progress Telerik Vulnerabilities

June 25, 2023

CISA, FBI, and MS-ISAC Update Joint CSA on Progress Telerik Vulnerabilities Today, CISA, the Federal Bureau of Investigation (FBI), and...

CISA: ISC Releases Security Advisories for Multiple Versions of BIND 9

June 25, 2023

ISC Releases Security Advisories for Multiple Versions of BIND 9 The Internet Systems Consortium (ISC) has released security advisories that...

CISA: CISA Releases Four Industrial Control Systems Advisories

June 25, 2023

CISA Releases Four Industrial Control Systems Advisories CISA released four Industrial Control Systems (ICS) advisories on June 22, 2023. These...

CISA: Juniper Networks Releases Security Advisory for Junos OS and Junos OS Evolved

June 25, 2023

Juniper Networks Releases Security Advisory for Junos OS and Junos OS Evolved Juniper Networks has released a security advisory that...

CISA: CISA Adds Five Known Exploited Vulnerabilities to Catalog

June 25, 2023

CISA Adds Five Known Exploited Vulnerabilities to Catalog CISA has added five new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based...

CISA: VMware Releases Security Update for vCenter Server and Cloud Foundation

June 25, 2023

VMware Releases Security Update for vCenter Server and Cloud Foundation VMware has released a security update to address multiple memory...

CISA: Apple Releases Security Updates for Multiple Products

June 25, 2023

Apple Releases Security Updates for Multiple Products Apple has released security updates to address vulnerabilities in multiple products. An attacker...

Cobalt Stike Beacon Detected – 81[.]68[.]241[.]8:8782

June 25, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 101[.]43[.]215[.]118:443

June 25, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 103[.]234[.]72[.]18:443

June 25, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 194[.]50[.]153[.]39:80

June 25, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

76aae5f47a10bcbdc7c85375a7010fa326ce727c72affccac651e3098ce50bf7

msLDAPDump – LDAP Enumeration Tool

June 24, 2023

msLDAPDump simplifies LDAP enumeration in a domain environment by wrapping the lpap3 library from Python in an easy-to-use interface. Like...

Malware Analysis – djvu – 1353718fe77eeeeefc45a6d7a45b48d3

June 24, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:153ce668f1e21829c936c2b11fa4d869, discovery, persistence, ransomware, spyware, stealerMD5: 1353718fe77eeeeefc45a6d7a45b48d3SHA1: d1936ce09fce5b190662d563374188f7a210edfaANALYSIS DATE: 2023-06-24T16:42:53ZTTPS: T1053, T1005, T1081, T1012,...

Security

Malware Analysis – banker – 1fd1f86a3032c69587ab152daad57589

Cobalt Stike Beacon Detected – 139[.]155[.]144[.]97:9443

Cobalt Stike Beacon Detected – 146[.]190[.]212[.]94:443

Cobalt Stike Beacon Detected – 124[.]223[.]34[.]106:80

Cobalt Stike Beacon Detected – 47[.]113[.]231[.]140:81

Cobalt Stike Beacon Detected – 95[.]214[.]27[.]59:9999

Cobalt Stike Beacon Detected – 139[.]199[.]181[.]68:443

Cobalt Stike Beacon Detected – 194[.]41[.]59[.]3:80

CISA: Progress Software Releases Security Advisory for MOVEit Transfer Vulnerability

CISA: CISA Adds Six Known Exploited Vulnerabilities to Catalog

CISA: CISA Releases Two Industrial Control Systems Advisories

CISA: CISA, FBI, and MS-ISAC Update Joint CSA on Progress Telerik Vulnerabilities

CISA: ISC Releases Security Advisories for Multiple Versions of BIND 9

CISA: CISA Releases Four Industrial Control Systems Advisories

CISA: Juniper Networks Releases Security Advisory for Junos OS and Junos OS Evolved

CISA: CISA Adds Five Known Exploited Vulnerabilities to Catalog

CISA: VMware Releases Security Update for vCenter Server and Cloud Foundation

CISA: Apple Releases Security Updates for Multiple Products

Cobalt Stike Beacon Detected – 81[.]68[.]241[.]8:8782

Cobalt Stike Beacon Detected – 101[.]43[.]215[.]118:443

Cobalt Stike Beacon Detected – 103[.]234[.]72[.]18:443

Cobalt Stike Beacon Detected – 194[.]50[.]153[.]39:80

msLDAPDump – LDAP Enumeration Tool

Malware Analysis – djvu – 1353718fe77eeeeefc45a6d7a45b48d3

Cobalt Strike Beacon Detected – 121[.]43[.]37[.]134:4434

Cobalt Strike Beacon Detected – 119[.]29[.]231[.]118:443

Cobalt Strike Beacon Detected – 39[.]101[.]74[.]162:443

Cobalt Strike Beacon Detected – 8[.]218[.]112[.]112:8880

Cobalt Strike Beacon Detected – 47[.]109[.]48[.]57:443

You may have missed