Security

Malware Analysis – discovery – ce900ddf20b2554e60cb17de79ddfa27

June 22, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, evasion, persistence, ransomware, trojanMD5: ce900ddf20b2554e60cb17de79ddfa27SHA1: 07b5f2d9e9683ca4bdf983f53b9726270094ffaaANALYSIS DATE: 2023-06-22T18:52:16ZTTPS: T1012, T1120, T1082, T1088, T1089, T1112, T1102,...

Malware Analysis – djvu – 2a3f36cc1fd1f55dc98fd6592cd5d80a

June 22, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:153ce668f1e21829c936c2b11fa4d869, discovery, persistence, ransomware, spyware, stealerMD5: 2a3f36cc1fd1f55dc98fd6592cd5d80aSHA1: 9eabc031f809f6afd46f12de051a6b903952db7bANALYSIS DATE: 2023-06-22T18:54:29ZTTPS: T1060, T1112, T1005, T1081,...

Malware Analysis – evasion – 1b4e39e65dcc093252b4ddcf6951f258

June 22, 2023

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 1b4e39e65dcc093252b4ddcf6951f258SHA1: 36153e151d49ce560049a4e17d9118eac1bba135ANALYSIS DATE: 2023-06-22T19:18:20ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

EndExt – Go Tool For Extracting All The Possible Endpoints From The JS Files

June 22, 2023

EndExt is a .go tool for extracting all the possible endpoints from the JS files Idea When you crawll all...

Malware Analysis – djvu – 9a978ce2ff697915c879d31785b37e16

June 22, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:153ce668f1e21829c936c2b11fa4d869, discovery, persistence, ransomware, spyware, stealerMD5: 9a978ce2ff697915c879d31785b37e16SHA1: bc58374ccf7bff13fb0bf0dfe17fb32c979979f4ANALYSIS DATE: 2023-06-22T15:58:08ZTTPS: T1060, T1112, T1222, T1082,...

Malware Analysis – amadey – feb6ecd04a1ad4ea6336f1c5e0f7c07c

June 22, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:fabookie, family:smokeloader, family:vidar, botnet:153ce668f1e21829c936c2b11fa4d869, botnet:pub1, backdoor, discovery, persistence, ransomware, spyware, stealer, trojanMD5: feb6ecd04a1ad4ea6336f1c5e0f7c07cSHA1: 2b3e00704e2780d33f0ce72bbd8f61115f8c55dcANALYSIS...

Malware Analysis – djvu – 0fa8f9afbe4ca05578fbc00fe8fd1e45

June 22, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:153ce668f1e21829c936c2b11fa4d869, discovery, persistence, ransomware, spyware, stealerMD5: 0fa8f9afbe4ca05578fbc00fe8fd1e45SHA1: b41ce3a558f981cbcc4819654564c8c497607611ANALYSIS DATE: 2023-06-22T16:15:27ZTTPS: T1005, T1081, T1060, T1112,...

Malware Analysis – persistence – 52105eaff1b7b02bf950b80771e9bda9

June 22, 2023

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 52105eaff1b7b02bf950b80771e9bda9SHA1: e16ecdfebf018faa7d4cf92ea03de06e5aa3e861ANALYSIS DATE: 2023-06-22T17:04:09ZTTPS: T1107, T1490, T1112, T1057, T1060, T1082, T1012, T1120,...

Malware Analysis – amadey – 9c13d9bdb722f723067c315d716e8128

June 22, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, botnet:pub1, backdoor, discovery, ransomware, trojanMD5: 9c13d9bdb722f723067c315d716e8128SHA1: f3398068d3e4f085a9a44adee2ebca5f60082ab2ANALYSIS DATE: 2023-06-22T16:35:54ZTTPS: T1012, T1120, T1082, T1222...

Malware Analysis – djvu – d66da7cdb4b5e5f5b18d686da4ea9d5c

June 22, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:153ce668f1e21829c936c2b11fa4d869, discovery, persistence, ransomware, spyware, stealerMD5: d66da7cdb4b5e5f5b18d686da4ea9d5cSHA1: 763add994f6ca9f305dcc21487da30de5aeaeeb4ANALYSIS DATE: 2023-06-22T16:37:55ZTTPS: T1005, T1081, T1222, T1082,...

Malware Analysis – adware – d729bf541459730df3ed688e115be8c8

June 22, 2023

Score: 9 MALWARE FAMILY: adwareTAGS:adware, bootkit, discovery, evasion, persistence, spyware, stealer, trojanMD5: d729bf541459730df3ed688e115be8c8SHA1: 93874ffeed48a4a7b035c1e2593f7fde3560a531ANALYSIS DATE: 2023-06-22T17:35:31ZTTPS: T1060, T1112, T1012, T1120,...

Malware Analysis – persistence – a0aad92f585dfc6ac762b5fc829e6fba

June 22, 2023

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: a0aad92f585dfc6ac762b5fc829e6fbaSHA1: 9ad2ae2c7fda526131ad6d535b21fe55d027d3aaANALYSIS DATE: 2023-06-22T17:04:36ZTTPS: T1060, T1112, T1082, T1057 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – evasion – 642dbe8b752b0dc735e9422d903e0e97

June 22, 2023

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, ransomware, spyware, stealerMD5: 642dbe8b752b0dc735e9422d903e0e97SHA1: df40a22f138548f4af363766eec48a4ea8b11fafANALYSIS DATE: 2023-06-22T17:05:02ZTTPS: T1490, T1059, T1107, T1082, T1012, T1491, T1112, T1005,...

Malware Analysis – persistence – a84957660902eb17fd021f3d187fb787

June 22, 2023

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: a84957660902eb17fd021f3d187fb787SHA1: cb3700cb561a449e6ff88978fb4ce1495982fe95ANALYSIS DATE: 2023-06-22T17:04:24ZTTPS: T1112, T1060, T1005, T1081, T1107, T1490, T1012, T1120,...

Security

Malware Analysis – discovery – ce900ddf20b2554e60cb17de79ddfa27

Malware Analysis – djvu – 2a3f36cc1fd1f55dc98fd6592cd5d80a

Malware Analysis – evasion – 1b4e39e65dcc093252b4ddcf6951f258

EndExt – Go Tool For Extracting All The Possible Endpoints From The JS Files

Malware Analysis – djvu – 9a978ce2ff697915c879d31785b37e16

Malware Analysis – amadey – feb6ecd04a1ad4ea6336f1c5e0f7c07c

Malware Analysis – djvu – 0fa8f9afbe4ca05578fbc00fe8fd1e45

Malware Analysis – persistence – 52105eaff1b7b02bf950b80771e9bda9

Malware Analysis – amadey – 9c13d9bdb722f723067c315d716e8128

Malware Analysis – djvu – d66da7cdb4b5e5f5b18d686da4ea9d5c

Malware Analysis – adware – d729bf541459730df3ed688e115be8c8

Malware Analysis – persistence – a0aad92f585dfc6ac762b5fc829e6fba

Malware Analysis – evasion – 642dbe8b752b0dc735e9422d903e0e97

Malware Analysis – persistence – a84957660902eb17fd021f3d187fb787

CISA: CISA Releases Four Industrial Control Systems Advisories

CISA: Juniper Networks Releases Security Advisory for Junos OS and Junos OS Evolved

CISA: CISA Adds Six Known Exploited Vulnerabilities to Catalog

Cobalt Stike Beacon Detected – 112[.]124[.]19[.]59:80

Cobalt Stike Beacon Detected – 124[.]70[.]199[.]215:7001

Cobalt Stike Beacon Detected – 134[.]209[.]249[.]32:443

Cobalt Stike Beacon Detected – 164[.]92[.]169[.]139:80

Cobalt Stike Beacon Detected – 47[.]120[.]10[.]96:80

Cobalt Stike Beacon Detected – 198[.]46[.]189[.]193:7654

Cobalt Stike Beacon Detected – 194[.]50[.]153[.]11:80

Cobalt Strike Beacon Detected – 121[.]43[.]37[.]134:4434

Cobalt Strike Beacon Detected – 119[.]29[.]231[.]118:443

Cobalt Strike Beacon Detected – 39[.]101[.]74[.]162:443

Cobalt Strike Beacon Detected – 8[.]218[.]112[.]112:8880

Cobalt Strike Beacon Detected – 47[.]109[.]48[.]57:443

You may have missed