Security

Malware Analysis – evasion – 17cd18166f6ce5030b8bf31dcc27dc8f

July 5, 2023

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealer, trojanMD5: 17cd18166f6ce5030b8bf31dcc27dc8fSHA1: 48c7a0f2e5f3ddb7eec996327dc3e2c115704048ANALYSIS DATE: 2023-07-05T17:47:04ZTTPS: T1082, T1005, T1081, T1060, T1112, T1088,...

Malware Analysis – evasion – 181ab682b8a8fbfea63c61542e2a34eb

July 5, 2023

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, spyware, stealer, trojanMD5: 181ab682b8a8fbfea63c61542e2a34ebSHA1: 2197cf2ff2c43dc0b8296a9e4bd7a5005218ff95ANALYSIS DATE: 2023-07-05T17:54:12ZTTPS: T1158, T1112, T1082, T1005, T1081, T1060, T1088,...

Malware Analysis – evasion – 17d1daad3f2ff185d400ae4145c34d3e

July 5, 2023

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealer, trojanMD5: 17d1daad3f2ff185d400ae4145c34d3eSHA1: abbc9414b569cfa804fc2d5066f5ae85f8b8c070ANALYSIS DATE: 2023-07-05T17:47:22ZTTPS: T1060, T1112, T1158, T1088, T1089, T1082,...

Malware Analysis – evasion – 1872203a17b1a3f1e28f5b1f860e5cdd

July 5, 2023

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealer, trojanMD5: 1872203a17b1a3f1e28f5b1f860e5cddSHA1: 33a22d33531f5040f8467169b8e226ab3e730c4aANALYSIS DATE: 2023-07-05T17:55:49ZTTPS: T1158, T1112, T1088, T1089, T1082, T1005,...

Malware Analysis – evasion – cd9772b99eaa36291b8568582a6c068b

July 4, 2023

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: cd9772b99eaa36291b8568582a6c068bSHA1: e20af237fb688484edbc237c102a79c0e7c8c7c7ANALYSIS DATE: 2023-07-04T15:09:29ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – evasion – da3628b2a375448ed4b7410bf1b0c74e

July 4, 2023

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: da3628b2a375448ed4b7410bf1b0c74eSHA1: e33e4bb6558b0e256630ee8c1d4c6aca14333e4aANALYSIS DATE: 2023-07-04T15:31:00ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – djvu – ca1a0dd10f4376823f81798a4a338be2

July 4, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:dcad9d884915bbb6106f78e5e2ea6168, discovery, persistence, ransomware, spyware, stealerMD5: ca1a0dd10f4376823f81798a4a338be2SHA1: d53498d723618519e928701cb8f0259e3a961504ANALYSIS DATE: 2023-07-04T17:53:28ZTTPS: T1005, T1081, T1130, T1112,...

Malware Analysis – smokeloader – f2a67f87ec8bddd18aae50dd235a5da1

July 4, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: f2a67f87ec8bddd18aae50dd235a5da1SHA1: f91b677f3f8e9c9169039d45cdde6a98d27b8a34ANALYSIS DATE: 2023-07-04T17:34:05ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – persistence – f197e2ade3bf47b6a7ff836c1e7987d3

July 4, 2023

Score: 8 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: f197e2ade3bf47b6a7ff836c1e7987d3SHA1: 0c229bfce0057396ed162988a269175775dc2295ANALYSIS DATE: 2023-07-04T17:56:27ZTTPS: T1491, T1112, T1060 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – discovery – f2864f06a6d63659e8564a91221847d4

July 3, 2023

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploitMD5: f2864f06a6d63659e8564a91221847d4SHA1: 8c4bbc50763f161370cabdf89b7d05c225df171dANALYSIS DATE: 2023-07-03T16:48:50ZTTPS: T1082, T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – ransomware – 42b7a689dceb3fc309afd809464806b9

July 3, 2023

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 42b7a689dceb3fc309afd809464806b9SHA1: df108c9807b29edc077f4b19421e3b5088a2be07ANALYSIS DATE: 2023-07-03T17:44:00ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – smokeloader – 9a6aca4f51392e1c36e2526daf901f84

July 3, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 9a6aca4f51392e1c36e2526daf901f84SHA1: 6e1f252146f42f338aec76c26cf7f0d39eec70fcANALYSIS DATE: 2023-07-03T15:46:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Security

Malware Analysis – evasion – 17cd18166f6ce5030b8bf31dcc27dc8f

Malware Analysis – evasion – 181ab682b8a8fbfea63c61542e2a34eb

Malware Analysis – evasion – 17d1daad3f2ff185d400ae4145c34d3e

Malware Analysis – evasion – 1872203a17b1a3f1e28f5b1f860e5cdd

Malware Analysis – evasion – cd9772b99eaa36291b8568582a6c068b

Malware Analysis – evasion – da3628b2a375448ed4b7410bf1b0c74e

Malware Analysis – djvu – ca1a0dd10f4376823f81798a4a338be2

Malware Analysis – smokeloader – f2a67f87ec8bddd18aae50dd235a5da1

Malware Analysis – persistence – f197e2ade3bf47b6a7ff836c1e7987d3

Malware Analysis – discovery – f2864f06a6d63659e8564a91221847d4

Malware Analysis – ransomware – 42b7a689dceb3fc309afd809464806b9

Malware Analysis – smokeloader – 9a6aca4f51392e1c36e2526daf901f84

Cobalt Stike Beacon Detected – 101[.]43[.]13[.]21:8022

Cobalt Stike Beacon Detected – 114[.]132[.]74[.]172:80

Cobalt Stike Beacon Detected – 124[.]221[.]76[.]197:80

Cobalt Stike Beacon Detected – 101[.]43[.]101[.]166:80

Cobalt Stike Beacon Detected – 54[.]206[.]96[.]191:443

Cobalt Stike Beacon Detected – 194[.]50[.]153[.]117:8080

Cobalt Stike Beacon Detected – 118[.]195[.]198[.]108:8080

Cobalt Stike Beacon Detected – 69[.]165[.]70[.]102:8099

Cobalt Stike Beacon Detected – 13[.]235[.]190[.]252:80

CISA: CISA Adds Six Known Exploited Vulnerabilities to Catalog

CISA: VMware Releases Security Update for vCenter Server and Cloud Foundation

CISA: CISA Adds Five Known Exploited Vulnerabilities to Catalog

[DEVMAN] – Ransomware Victim: www[.]heitech[.]com[.]my

BugCrowd Bug Bounty Disclosure: P5 – Session ID Disclosure via Referer Header to Third-Party Domains (nspires.nasaprs.com) – madhu873

CVE Alert: CVE-2025-11733 – lumiblog – Footnotes Made Easy

CVE Alert: CVE-2025-11724 – erinmorelli – EM Beer Manager

CVE Alert: CVE-2025-10896 – litonice13 – Master Blocks – Ultimate Gutenberg Blocks for Marketers

You may have missed