Security

Malware Analysis – djvu – 257c7df0813fc7897781336970a207ff

March 4, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 257c7df0813fc7897781336970a207ffSHA1: fdd625dc334bcd40d07da5c481424a85bf15a53bANALYSIS DATE: 2023-03-04T16:24:54ZTTPS: T1005, T1081, T1012, T1060, T1112,...

Malware Analysis – ransomware – 443a37cd2cc49d05fb25c4db8ee95632

March 4, 2023

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 443a37cd2cc49d05fb25c4db8ee95632SHA1: 27be9cfb271d790f37868317314bae772365fc6cANALYSIS DATE: 2023-03-04T15:18:54ZTTPS: T1005, T1081 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – djvu – a5f09e4df796c56f6dcc97e840cd8c02

March 4, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: a5f09e4df796c56f6dcc97e840cd8c02SHA1: 19a0f4e6bacc31eb024dc63037033f7b5de11da5ANALYSIS DATE: 2023-03-04T17:27:07ZTTPS: T1053, T1005, T1081, T1012, T1082,...

Malware Analysis – djvu – b6fac73eafc2ddc0b6ae6c605f4a451f

March 4, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: b6fac73eafc2ddc0b6ae6c605f4a451fSHA1: d4d2aa2ea7f7a0967a5d5f6213a389ad842dcce7ANALYSIS DATE: 2023-03-04T16:26:28ZTTPS: T1005, T1081, T1082, T1053, T1012,...

Malware Analysis – djvu – 3b1535328a6380de620657732a170e4b

March 4, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 3b1535328a6380de620657732a170e4bSHA1: 62179f2f1800b4e862c956cf1e8dc9f2bbfad135ANALYSIS DATE: 2023-03-04T17:21:29ZTTPS: T1222, T1012, T1082, T1060, T1112,...

Malware Analysis – smokeloader – b6a95bcb19a3b33ca3ae1c4996a64dc8

March 4, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: b6a95bcb19a3b33ca3ae1c4996a64dc8SHA1: 482bed9c3b6d52bcd0c820829c009df3ea723db4ANALYSIS DATE: 2023-03-04T17:39:02ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Cobalt Stike Beacon Detected – 47[.]103[.]64[.]64:1111

March 4, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 109[.]205[.]61[.]140:80

March 4, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 185[.]143[.]223[.]120:443

March 4, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 190[.]97[.]165[.]108:443

March 4, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 1[.]15[.]42[.]124:80

March 4, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 39[.]105[.]188[.]90:8443

March 4, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – 043573153944d15959d309d7267d20af

March 4, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 043573153944d15959d309d7267d20afSHA1: 3ede425e4aef20a82f7365db2ea4f8b3bafbf67dANALYSIS DATE: 2023-03-04T11:39:03ZTTPS: T1012, T1082, T1222, T1005, T1081,...

Malware Analysis – djvu – 7be020f413f79d3c0b3e2edcef1b313b

March 4, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 7be020f413f79d3c0b3e2edcef1b313bSHA1: e6441c81e947d6b59579b682ffb69ef4f9a366ecANALYSIS DATE: 2023-03-04T09:23:28ZTTPS: T1012, T1082, T1005, T1081, T1053,...

Malware Analysis – djvu – b22d97534fde7cb0f61db19f58bf102a

March 4, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: b22d97534fde7cb0f61db19f58bf102aSHA1: 951dfcaf058103e7a52bc5fca8ce5ca90d3486e2ANALYSIS DATE: 2023-03-04T09:20:26ZTTPS: T1082, T1012, T1053, T1005, T1081,...

Malware Analysis – djvu – 49558407bdf3851df97837959cca2910

March 4, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 49558407bdf3851df97837959cca2910SHA1: a9d42dbebf8d9ec47a444a13c584e8a0522cda88ANALYSIS DATE: 2023-03-04T11:35:41ZTTPS: T1060, T1112, T1053, T1005, T1081,...

Cobalt Stike Beacon Detected – 20[.]189[.]26[.]53:8406

March 4, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 120[.]79[.]70[.]83:80

March 4, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 5[.]9[.]224[.]208:80

March 4, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 123[.]249[.]101[.]92:80

March 4, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – 5ebfd0177d61d9610cc24b6be9c49c66

March 4, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 5ebfd0177d61d9610cc24b6be9c49c66SHA1: f34c66aa7cda54430371517f2ece087ad6be9445ANALYSIS DATE: 2023-03-04T03:28:28ZTTPS: T1082, T1005, T1081, T1012, T1222,...

Malware Analysis – djvu – 5f99c9df93b9b66259189cf52450f603

March 4, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 5f99c9df93b9b66259189cf52450f603SHA1: 616758355836f3577da9be51d30001caf7d3b440ANALYSIS DATE: 2023-03-04T03:44:20ZTTPS: T1012, T1082, T1222, T1005, T1081,...

Malware Analysis – djvu – 5fe8008a41050b88736ade3c433ee806

March 4, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 5fe8008a41050b88736ade3c433ee806SHA1: e878270e7ef197c97c0f4dbd4f2a774ca8d327a9ANALYSIS DATE: 2023-03-04T03:32:39ZTTPS: T1082, T1005, T1081, T1012, T1222,...

Malware Analysis – djvu – ba3e0e669fc055a64099226e0c0511a1

March 4, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: ba3e0e669fc055a64099226e0c0511a1SHA1: 024b3a04e8550cc8ff077266424807a4e319a6d4ANALYSIS DATE: 2023-03-04T05:36:51ZTTPS: T1005, T1081, T1222, T1012, T1082,...

Security

Malware Analysis – djvu – 257c7df0813fc7897781336970a207ff

Malware Analysis – ransomware – 443a37cd2cc49d05fb25c4db8ee95632

Malware Analysis – djvu – a5f09e4df796c56f6dcc97e840cd8c02

Malware Analysis – djvu – b6fac73eafc2ddc0b6ae6c605f4a451f

Malware Analysis – djvu – 3b1535328a6380de620657732a170e4b

Malware Analysis – smokeloader – b6a95bcb19a3b33ca3ae1c4996a64dc8

Cobalt Stike Beacon Detected – 47[.]103[.]64[.]64:1111

Cobalt Stike Beacon Detected – 109[.]205[.]61[.]140:80

Cobalt Stike Beacon Detected – 185[.]143[.]223[.]120:443

Cobalt Stike Beacon Detected – 190[.]97[.]165[.]108:443

Cobalt Stike Beacon Detected – 1[.]15[.]42[.]124:80

Cobalt Stike Beacon Detected – 39[.]105[.]188[.]90:8443

Malware Analysis – djvu – 043573153944d15959d309d7267d20af

Malware Analysis – djvu – 7be020f413f79d3c0b3e2edcef1b313b

Malware Analysis – djvu – b22d97534fde7cb0f61db19f58bf102a

Malware Analysis – djvu – 49558407bdf3851df97837959cca2910

Cobalt Stike Beacon Detected – 20[.]189[.]26[.]53:8406

Cobalt Stike Beacon Detected – 120[.]79[.]70[.]83:80

Cobalt Stike Beacon Detected – 5[.]9[.]224[.]208:80

Cobalt Stike Beacon Detected – 123[.]249[.]101[.]92:80

Malware Analysis – djvu – 5ebfd0177d61d9610cc24b6be9c49c66

Malware Analysis – djvu – 5f99c9df93b9b66259189cf52450f603

Malware Analysis – djvu – 5fe8008a41050b88736ade3c433ee806

Malware Analysis – djvu – ba3e0e669fc055a64099226e0c0511a1

“Jasper Sleet”: North Korean AI-assisted threat actors

CVE Alert: CVE-2025-4407

CVE Alert: CVE-2025-6905

CVE Alert: CVE-2025-6907

CVE Alert: CVE-2025-6906

You may have missed