Security

Malware Analysis – bootkit – 00f570c756caab8c20ecabdc996c69d3

May 4, 2023

Score: 8 MALWARE FAMILY: bootkitTAGS:bootkit, discovery, evasion, exploit, persistence, upxMD5: 00f570c756caab8c20ecabdc996c69d3SHA1: 88d2f10c67a4566478e9b2ceddd52cac9b5fdb3bANALYSIS DATE: 2023-05-04T16:18:07ZTTPS: T1222, T1112, T1067, T1012, T1082, T1060,...

Malware Analysis – bootkit – 5d6c95558f08c90419758761bf4ab83d

May 4, 2023

Score: 10 MALWARE FAMILY: bootkitTAGS:bootkit, discovery, evasion, persistence, ransomware, trojanMD5: 5d6c95558f08c90419758761bf4ab83dSHA1: 7fd6074f848d83879ce2246f4cfc98266043ddafANALYSIS DATE: 2023-05-04T16:07:05ZTTPS: T1012, T1067, T1053, T1060, T1112, T1031,...

Malware Analysis – evasion – ba5500e35710c6221dbd322e46d80db6

May 4, 2023

Score: 8 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: ba5500e35710c6221dbd322e46d80db6SHA1: da2e8153dc88ffb30d8f0510665cfd93993d2ad2ANALYSIS DATE: 2023-05-04T17:00:16ZTTPS: T1082, T1012, T1491, T1112, T1120, T1102 ScoreMeaningExample10Known badA malware family...

Malware Analysis – persistence – 8ea203015739494c182dcf1b5289aa60

May 4, 2023

Score: 8 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 8ea203015739494c182dcf1b5289aa60SHA1: f6c99e81222a9bffad9aa3893980240f507b4e63ANALYSIS DATE: 2023-05-04T16:29:48ZTTPS: T1082, T1060, T1112, T1491, T1012, T1053 ScoreMeaningExample10Known badA malware family...

Malware Analysis – djvu – 20f799deca580973c2fb2516421bf5ee

May 4, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:31c7719b5ee962fbde376b75e771360d, discovery, persistence, ransomware, spyware, stealerMD5: 20f799deca580973c2fb2516421bf5eeSHA1: 04ce89b9ef62714eb0d8d07cc18347ef34b4d7ccANALYSIS DATE: 2023-05-04T17:52:15ZTTPS: T1005, T1081, T1053, T1012,...

Malware Analysis – evasion – 0df6a3da3b4eb4def6eb111b2dd01a20

May 4, 2023

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomwareMD5: 0df6a3da3b4eb4def6eb111b2dd01a20SHA1: 41d9bebe4d89458709ce7d0407f0a551110f3cb0ANALYSIS DATE: 2023-05-04T16:35:55ZTTPS: T1082, T1012, T1120, T1031, T1491, T1112, T1060, T1130, T1018...

Security

Malware Analysis – bootkit – 00f570c756caab8c20ecabdc996c69d3

Malware Analysis – bootkit – 5d6c95558f08c90419758761bf4ab83d

Malware Analysis – evasion – ba5500e35710c6221dbd322e46d80db6

Malware Analysis – persistence – 8ea203015739494c182dcf1b5289aa60

Malware Analysis – djvu – 20f799deca580973c2fb2516421bf5ee

Malware Analysis – evasion – 0df6a3da3b4eb4def6eb111b2dd01a20

Cobalt Stike Beacon Detected – 101[.]42[.]17[.]226:443

Cobalt Stike Beacon Detected – 211[.]193[.]21[.]161:80

Cobalt Stike Beacon Detected – 112[.]124[.]64[.]221:80

Cobalt Stike Beacon Detected – 1[.]14[.]16[.]229:443

Cobalt Stike Beacon Detected – 101[.]42[.]2[.]141:80

Cobalt Stike Beacon Detected – 101[.]43[.]127[.]45:8800

Cobalt Stike Beacon Detected – 47[.]100[.]249[.]61:443

Cobalt Stike Beacon Detected – 92[.]255[.]85[.]169:55553

Cobalt Stike Beacon Detected – 101[.]43[.]147[.]69:443

Cobalt Stike Beacon Detected – 124[.]222[.]111[.]174:80

Cobalt Stike Beacon Detected – 100[.]42[.]76[.]79:4433

Cobalt Stike Beacon Detected – 193[.]201[.]9[.]217:80

Cobalt Stike Beacon Detected – 47[.]113[.]231[.]230:80

Cobalt Stike Beacon Detected – 124[.]221[.]133[.]199:9999

Cobalt Stike Beacon Detected – 172[.]247[.]14[.]76:80

Cobalt Stike Beacon Detected – 47[.]108[.]183[.]70:443

Cobalt Stike Beacon Detected – 82[.]157[.]48[.]74:443

Cobalt Stike Beacon Detected – 54[.]234[.]158[.]24:80

CVE Alert: CVE-2025-6437

CVE Alert: CVE-2025-6459

CVE Alert: CVE-2025-6686

CVE Alert: CVE-2025-5817

CVE Alert: CVE-2025-5746

You may have missed