Security

Malware Analysis – ransomware – c9de3e12413b17ccf07b06ad507bfa52

March 1, 2023

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: c9de3e12413b17ccf07b06ad507bfa52SHA1: 132b4abc0037b2137d295434038a97cb2a7579f1ANALYSIS DATE: 2023-03-01T16:24:40ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – 6de183ada65327369b9de957245b3b8e

March 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 6de183ada65327369b9de957245b3b8eSHA1: e011e1cceed94d1a59d584126495dfc86cd39dedANALYSIS DATE: 2023-03-01T16:31:03ZTTPS: T1222, T1005, T1081, T1130, T1112,...

Malware Analysis – quantum – 4f497663f23fb2e6b46db9ffa70f6030

March 1, 2023

Score: 10 MALWARE FAMILY: quantumTAGS:family:quantum, ransomwareMD5: 4f497663f23fb2e6b46db9ffa70f6030SHA1: 68dfd51dfa1e66ec673f3adda08469f4c88c93a0ANALYSIS DATE: 2023-03-01T17:08:06ZTTPS: T1158, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – quantum – f6ae7a37bae4e80f6514c14695b9cc38

March 1, 2023

Score: 10 MALWARE FAMILY: quantumTAGS:family:quantum, ransomwareMD5: f6ae7a37bae4e80f6514c14695b9cc38SHA1: 42987e66bd73418085e798a60f8ae1e0f1e02119ANALYSIS DATE: 2023-03-01T17:27:28ZTTPS: T1158 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – quantum – 14803cb39cd81efd2a40a38a58dcba70

March 1, 2023

Score: 10 MALWARE FAMILY: quantumTAGS:family:quantum, ransomwareMD5: 14803cb39cd81efd2a40a38a58dcba70SHA1: fe328839ea5f9a472ee47b68ca92c0d7eac2a47cANALYSIS DATE: 2023-03-01T17:12:24ZTTPS: T1158, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – quantum – 6ca72f4a8882bf012916dee92b634e6b

March 1, 2023

Score: 10 MALWARE FAMILY: quantumTAGS:family:quantum, ransomwareMD5: 6ca72f4a8882bf012916dee92b634e6bSHA1: b57cd4e9e641640b84fbeec42f8272b09b46b834ANALYSIS DATE: 2023-03-01T17:05:17ZTTPS: T1158, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Cobalt Stike Beacon Detected – 195[.]2[.]67[.]185:7443

March 1, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 43[.]138[.]168[.]20:99

March 1, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 43[.]139[.]15[.]98:80

March 1, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 45[.]227[.]252[.]241:443

March 1, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – 7f65c8c6ccea193f5d9566b41101bcf7

March 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 7f65c8c6ccea193f5d9566b41101bcf7SHA1: 9d169844ba08a0c8b5a90f45d188a1fc18c45833ANALYSIS DATE: 2023-03-01T09:17:06ZTTPS: T1222, T1053, T1005, T1081, T1012,...

Malware Analysis – djvu – b37dbbda5cccadaf790a2f4ba521655c

March 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: b37dbbda5cccadaf790a2f4ba521655cSHA1: ff1b5b752b332e58fa677f94439b6794163845ccANALYSIS DATE: 2023-03-01T09:15:10ZTTPS: T1222, T1005, T1081, T1060, T1112,...

Malware Analysis – djvu – d2759f5309e55616b031b25eb74590d6

March 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: d2759f5309e55616b031b25eb74590d6SHA1: af830fa93d673f977e90eb65cb05103d924d5f93ANALYSIS DATE: 2023-03-01T10:13:59ZTTPS: T1012, T1060, T1112, T1222, T1005,...

Malware Analysis – djvu – 93c4c47e97687f03ad471d4d0d2f0291

March 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 93c4c47e97687f03ad471d4d0d2f0291SHA1: ad5800536b4053b7c87a4678900ba37fefe22accANALYSIS DATE: 2023-03-01T10:09:18ZTTPS: T1012, T1082, T1005, T1081, T1222,...

Cobalt Stike Beacon Detected – 47[.]122[.]22[.]26:80

March 1, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 47[.]95[.]149[.]125:8443

March 1, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 108[.]165[.]178[.]42:9091

March 1, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 81[.]70[.]239[.]223:80

March 1, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – cb3729af6606d66259fb727b19f929d4

March 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: cb3729af6606d66259fb727b19f929d4SHA1: e67dfef686231b24b924f796f4e11420ad0fcf0cANALYSIS DATE: 2023-03-01T10:32:09ZTTPS: T1012, T1005, T1081, T1222, T1082,...

Malware Analysis – djvu – 6ac21b17bfbee755658feed1d8b2e0e2

March 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, backdoor, discovery, persistence, ransomware, stealer, trojanMD5: 6ac21b17bfbee755658feed1d8b2e0e2SHA1: d882a45a35c9195328505bc8b19515a10f416d5dANALYSIS DATE: 2023-03-01T11:30:33ZTTPS: T1012, T1120, T1082,...

Malware Analysis – djvu – c84e72c07920476083196bcca616c4fa

March 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: c84e72c07920476083196bcca616c4faSHA1: 2fb00ae12e8ae7569bee5285265aa465f4b6710fANALYSIS DATE: 2023-03-01T10:30:48ZTTPS: T1082, T1012, T1005, T1081, T1222,...

Malware Analysis – djvu – 7ef1217630afde6b4dd32eabbfa571ad

March 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 7ef1217630afde6b4dd32eabbfa571adSHA1: 969f7af1fe55f54aac5c572a167f1df3623b76bfANALYSIS DATE: 2023-03-01T10:29:57ZTTPS: T1222, T1082, T1012, T1005, T1081,...

Cobalt Stike Beacon Detected – 47[.]106[.]123[.]86:8080

March 1, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 139[.]198[.]181[.]40:80

March 1, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Security

Malware Analysis – ransomware – c9de3e12413b17ccf07b06ad507bfa52

Malware Analysis – djvu – 6de183ada65327369b9de957245b3b8e

Malware Analysis – quantum – 4f497663f23fb2e6b46db9ffa70f6030

Malware Analysis – quantum – f6ae7a37bae4e80f6514c14695b9cc38

Malware Analysis – quantum – 14803cb39cd81efd2a40a38a58dcba70

Malware Analysis – quantum – 6ca72f4a8882bf012916dee92b634e6b

Cobalt Stike Beacon Detected – 195[.]2[.]67[.]185:7443

Cobalt Stike Beacon Detected – 43[.]138[.]168[.]20:99

Cobalt Stike Beacon Detected – 43[.]139[.]15[.]98:80

Cobalt Stike Beacon Detected – 45[.]227[.]252[.]241:443

Malware Analysis – djvu – 7f65c8c6ccea193f5d9566b41101bcf7

Malware Analysis – djvu – b37dbbda5cccadaf790a2f4ba521655c

Malware Analysis – djvu – d2759f5309e55616b031b25eb74590d6

Malware Analysis – djvu – 93c4c47e97687f03ad471d4d0d2f0291

Cobalt Stike Beacon Detected – 47[.]122[.]22[.]26:80

Cobalt Stike Beacon Detected – 47[.]95[.]149[.]125:8443

Cobalt Stike Beacon Detected – 108[.]165[.]178[.]42:9091

Cobalt Stike Beacon Detected – 81[.]70[.]239[.]223:80

Malware Analysis – djvu – cb3729af6606d66259fb727b19f929d4

Malware Analysis – djvu – 6ac21b17bfbee755658feed1d8b2e0e2

Malware Analysis – djvu – c84e72c07920476083196bcca616c4fa

Malware Analysis – djvu – 7ef1217630afde6b4dd32eabbfa571ad

Cobalt Stike Beacon Detected – 47[.]106[.]123[.]86:8080

Cobalt Stike Beacon Detected – 139[.]198[.]181[.]40:80

[NIGHTSPIRE] – Ransomware Victim: Eversendai

[NIGHTSPIRE] – Ransomware Victim: Premier 1888 Ltd[.]

[NIGHTSPIRE] – Ransomware Victim: JIEI CO[.], LTD

CVE Alert: CVE-2025-32462

CVE Alert: CVE-2025-49493

You may have missed