Security

Malware Analysis – djvu – 712a61ae2ddf17f0e35543284b38ecb5

May 9, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: 712a61ae2ddf17f0e35543284b38ecb5SHA1: ec7f3c7187b940993ee0ee3a5e6ecdb5c2f46248ANALYSIS DATE: 2023-05-09T15:10:10ZTTPS: T1053, T1060, T1112, T1222, T1082, T1012 ScoreMeaningExample10Known badA...

Malware Analysis – – b75fe8539b7dc28190a501e879a05a9d

May 9, 2023

Score: 1 MALWARE FAMILY: TAGS:MD5: b75fe8539b7dc28190a501e879a05a9dSHA1: a2f1d03ac8c2c3c33c0f77e8882572cac188b762ANALYSIS DATE: 2023-05-09T17:34:11ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – evasion – 1df3b454fe1eb4550d029b5236b0f6e8

May 9, 2023

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealer, trojanMD5: 1df3b454fe1eb4550d029b5236b0f6e8SHA1: 7687ccc4f088d6a119c814a4bd66ffa903c72afbANALYSIS DATE: 2023-05-09T17:53:47ZTTPS: T1012, T1082, T1088, T1089, T1112, T1158,...

Malware Analysis – ransomware – c46070b5e113a7f5d9a58de14a11e430

May 9, 2023

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: c46070b5e113a7f5d9a58de14a11e430SHA1: 5007943bec2cf5310cfe8b8c49d6f55f79ad0e4cANALYSIS DATE: 2023-05-09T17:33:53ZTTPS: T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – – 00d4835bed9d6c2cc78aa335947264d0

May 9, 2023

Score: 1 MALWARE FAMILY: TAGS:MD5: 00d4835bed9d6c2cc78aa335947264d0SHA1: 4056a37dfe3b3465280e472ba5af54413ad68ac6ANALYSIS DATE: 2023-05-09T16:44:51ZTTPS: T1012, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Security

Malware Analysis – djvu – 712a61ae2ddf17f0e35543284b38ecb5

Malware Analysis – – b75fe8539b7dc28190a501e879a05a9d

Malware Analysis – evasion – 1df3b454fe1eb4550d029b5236b0f6e8

Malware Analysis – ransomware – c46070b5e113a7f5d9a58de14a11e430

Malware Analysis – – 00d4835bed9d6c2cc78aa335947264d0

CISA: Mozilla Releases Security Advisories for Multiple Products

CISA: CISA and Partners Disclose Snake Malware Threat From Russian Cyber Actors

Cobalt Stike Beacon Detected – 42[.]193[.]97[.]39:7777

Cobalt Stike Beacon Detected – 39[.]105[.]31[.]104:81

Cobalt Stike Beacon Detected – 3[.]219[.]128[.]36:80

Cobalt Stike Beacon Detected – 175[.]178[.]118[.]27:443

Cobalt Stike Beacon Detected – 39[.]105[.]184[.]15:8443

Cobalt Stike Beacon Detected – 124[.]222[.]220[.]126:80

CISA: CISA Adds Three Known Exploited Vulnerabilities to Catalog

CISA: CISA Releases One Industrial Control Systems Medical Advisory

CISA: CISA Releases Two Industrial Control Systems Advisories

CISA: Abuse of the Service Location Protocol May Lead to DoS Attacks

CISA: VMware Releases Security Update for Aria Operations for Logs

CISA: CISA Releases One Industrial Control Systems Advisory

CISA: CISA Releases One Industrial Control Systems Advisory

CISA: CISA Urges Organizations to Incorporate the FCC Covered List Into Risk Management Plans

CISA: CISA Requests for Comment on Secure Software Self-Attestation Form

CISA: CISA Adds Three Known Exploited Vulnerabilities to Catalog

Cobalt Stike Beacon Detected – 206[.]119[.]74[.]215:80

[RHYSIDA] – Ransomware Victim: Invacare

[SPACEBEARS] – Ransomware Victim: Rios Espinosa

[DEVMAN] – Ransomware Victim: www[.]heitech[.]com[.]my

BugCrowd Bug Bounty Disclosure: P5 – Session ID Disclosure via Referer Header to Third-Party Domains (nspires.nasaprs.com) – madhu873

CVE Alert: CVE-2025-11733 – lumiblog – Footnotes Made Easy

You may have missed