Security

Malware Analysis – djvu – 2e0b52e14e9d0e424a02c7e2b84befce

March 3, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, family:vidar, backdoor, discovery, infostealer, persistence, ransomware, stealer, trojanMD5: 2e0b52e14e9d0e424a02c7e2b84befceSHA1: eef5de144176ec6395884ecd2c7cac0443269964ANALYSIS DATE: 2023-03-02T21:01:59ZTTPS: T1053,...

Malware Analysis – amadey – e4e1d4d2eda54d7f87018e5cda0b08e6

March 3, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:vidar, backdoor, discovery, persistence, ransomware, stealer, trojanMD5: e4e1d4d2eda54d7f87018e5cda0b08e6SHA1: fde42981ac47ce2623d5dfa9fd2496e9feef5d38ANALYSIS DATE: 2023-03-02T21:34:50ZTTPS: T1012, T1120,...

Malware Analysis – ransomware – 04edfb7f28e85eb9bdefd63e81c37753

March 3, 2023

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 04edfb7f28e85eb9bdefd63e81c37753SHA1: 9ea3665e662fd22ccb6d8d977ad5abd6bc806631ANALYSIS DATE: 2023-03-02T23:35:05ZTTPS: T1107, T1490, T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – amadey – 36cb7a71342ea66c57aa3a6765183f8a

March 3, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:redline, family:rhadamanthys, family:smokeloader, family:vidar, backdoor, discovery, infostealer, persistence, ransomware, stealer, trojanMD5: 36cb7a71342ea66c57aa3a6765183f8aSHA1: 15b08ba7d0fec5e46d474a77c9f2ca151f6fdf05ANALYSIS DATE:...

Malware Analysis – djvu – e03f2b379b9364fbdfa47188787fae72

March 3, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: e03f2b379b9364fbdfa47188787fae72SHA1: 2eef20803b148773d5ac61c5d8acc6e100642e55ANALYSIS DATE: 2023-03-02T23:41:01ZTTPS: T1222, T1060, T1112, T1012, T1082,...

Malware Analysis – djvu – 47fbfbeb34089da50cd0d210833d7b1d

March 3, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 47fbfbeb34089da50cd0d210833d7b1dSHA1: 7f52d1ae8b26b382bf48ecff786381330dcf5bf8ANALYSIS DATE: 2023-03-02T23:23:50ZTTPS: T1222, T1053, T1082, T1012, T1005,...

Malware Analysis – ransomware – 7600a86cef77ee6ed91f681f237fc5d8

March 2, 2023

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 7600a86cef77ee6ed91f681f237fc5d8SHA1: dfea534b8b3b0c8315d517717832301006eace9dANALYSIS DATE: 2023-03-02T08:59:46ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – c603eae0bf01b5d6cab56f890a093e47

March 2, 2023

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: c603eae0bf01b5d6cab56f890a093e47SHA1: 135a30a11b092119b8629e64ddb2e1b72e744e5fANALYSIS DATE: 2023-03-02T09:05:29ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – b122c6803445b0fdcaa0ce722f2c4daa

March 2, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, backdoor, discovery, persistence, ransomware, stealer, trojanMD5: b122c6803445b0fdcaa0ce722f2c4daaSHA1: 292838b18163fbabb3a525123d2a2b138e046959ANALYSIS DATE: 2023-03-02T09:33:26ZTTPS: T1082, T1012, T1053,...

Malware Analysis – smokeloader – 28beebe57db41c975b328a487beba33a

March 2, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 28beebe57db41c975b328a487beba33aSHA1: 1827147c4ef25a00bdf81b4184bc491ba6fb2bdaANALYSIS DATE: 2023-03-02T09:01:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ransomware – 1fec77da8ea12cc2245f788a00c61e5a

March 2, 2023

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 1fec77da8ea12cc2245f788a00c61e5aSHA1: 020fac51665c22287776dadfe5d1b0b747345285ANALYSIS DATE: 2023-03-02T09:41:49ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Cobalt Stike Beacon Detected – 8[.]134[.]212[.]47:443

March 2, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – – fe36158ca607e9aa15c18db622da2205

March 2, 2023

Score: 1 MALWARE FAMILY: TAGS:MD5: fe36158ca607e9aa15c18db622da2205SHA1: 3ad0c9e4f9b3da8b4ef081122706f5b1cc2fa736ANALYSIS DATE: 2023-03-02T09:45:09ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – – 8c59135798f09e59c51177c3de48ee6a

March 2, 2023

Score: 1 MALWARE FAMILY: TAGS:MD5: 8c59135798f09e59c51177c3de48ee6aSHA1: d9c747e2c2bcade363b3d0dfa6a4f6c0f31d7e6cANALYSIS DATE: 2023-03-02T09:44:54ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – a88772146b105c4ebad2b01f1e75ceeb

March 2, 2023

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: a88772146b105c4ebad2b01f1e75ceebSHA1: 68339762daf052cf0159a7b1eb890401668183c7ANALYSIS DATE: 2023-03-02T09:41:49ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – 3096ca553ec454e84fc2c549717bd553

March 2, 2023

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 3096ca553ec454e84fc2c549717bd553SHA1: 9f91d90abf86f8e8a131f3656d186b6638e79b42ANALYSIS DATE: 2023-03-02T09:44:55ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Cobalt Stike Beacon Detected – 45[.]88[.]170[.]91:444

March 2, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 107[.]182[.]18[.]105:443

March 2, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 49[.]233[.]60[.]12:8080

March 2, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 106[.]13[.]1[.]223:8443

March 2, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – – 1a1f978153c0fa0f1a64aa0eeb123fc7

March 2, 2023

Score: 1 MALWARE FAMILY: TAGS:MD5: 1a1f978153c0fa0f1a64aa0eeb123fc7SHA1: 111a254b8aa47a14bf1876e8746bae62a45540ecANALYSIS DATE: 2023-03-02T09:47:36ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – – 9b7fb8b2a3c19a37916304a41a299dc9

March 2, 2023

Score: 1 MALWARE FAMILY: TAGS:MD5: 9b7fb8b2a3c19a37916304a41a299dc9SHA1: eda4e89b108d75d64fdc932f59dae73f6a9b7122ANALYSIS DATE: 2023-03-02T09:45:10ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – 92642c82cbcddaccd919e26283db00dd

March 2, 2023

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 92642c82cbcddaccd919e26283db00ddSHA1: b5da30677a203a55d00bc82472c1809f69c92af6ANALYSIS DATE: 2023-03-02T09:47:38ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – 2442d98f0b640d84868070686643c98f

March 2, 2023

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 2442d98f0b640d84868070686643c98fSHA1: afa3648074e1e3122457ca188316f5cdfa8db3d5ANALYSIS DATE: 2023-03-02T09:47:32ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Security

Malware Analysis – djvu – 2e0b52e14e9d0e424a02c7e2b84befce

Malware Analysis – amadey – e4e1d4d2eda54d7f87018e5cda0b08e6

Malware Analysis – ransomware – 04edfb7f28e85eb9bdefd63e81c37753

Malware Analysis – amadey – 36cb7a71342ea66c57aa3a6765183f8a

Malware Analysis – djvu – e03f2b379b9364fbdfa47188787fae72

Malware Analysis – djvu – 47fbfbeb34089da50cd0d210833d7b1d

Malware Analysis – ransomware – 7600a86cef77ee6ed91f681f237fc5d8

Malware Analysis – ransomware – c603eae0bf01b5d6cab56f890a093e47

Malware Analysis – djvu – b122c6803445b0fdcaa0ce722f2c4daa

Malware Analysis – smokeloader – 28beebe57db41c975b328a487beba33a

Malware Analysis – ransomware – 1fec77da8ea12cc2245f788a00c61e5a

Cobalt Stike Beacon Detected – 8[.]134[.]212[.]47:443

Malware Analysis – – fe36158ca607e9aa15c18db622da2205

Malware Analysis – – 8c59135798f09e59c51177c3de48ee6a

Malware Analysis – ransomware – a88772146b105c4ebad2b01f1e75ceeb

Malware Analysis – ransomware – 3096ca553ec454e84fc2c549717bd553

Cobalt Stike Beacon Detected – 45[.]88[.]170[.]91:444

Cobalt Stike Beacon Detected – 107[.]182[.]18[.]105:443

Cobalt Stike Beacon Detected – 49[.]233[.]60[.]12:8080

Cobalt Stike Beacon Detected – 106[.]13[.]1[.]223:8443

Malware Analysis – – 1a1f978153c0fa0f1a64aa0eeb123fc7

Malware Analysis – – 9b7fb8b2a3c19a37916304a41a299dc9

Malware Analysis – ransomware – 92642c82cbcddaccd919e26283db00dd

Malware Analysis – ransomware – 2442d98f0b640d84868070686643c98f

[KAWA4096] – Ransomware Victim: tokiomarine-nichido[.]co[.]jp

[KAWA4096] – Ransomware Victim: www[.]ogr-jp[.]com

[QILIN] – Ransomware Victim: exhibits-intl[.]com

CVE Alert: CVE-2024-12915

CVE Alert: CVE-2025-2895

You may have missed