Security

Malware Analysis – lockbit – 01ccead2e9497ce04ab0c2531320224d

January 24, 2023

Score: 10 MALWARE FAMILY: lockbitTAGS:family:lockbit, discovery, evasion, persistence, ransomware, spyware, stealer, trojanMD5: 01ccead2e9497ce04ab0c2531320224dSHA1: 9b7ebc4d8f97b0e7463a382f3b748a4be48a06a1ANALYSIS DATE: 2023-01-23T21:24:54ZTTPS: T1490, T1059, T1107, T1082,...

Malware Analysis – djvu – 1b2d5ea242f2354691c62b680893df7a

January 24, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 1b2d5ea242f2354691c62b680893df7aSHA1: 77684b9079f760e75bbe3aa31d264150847e5de0ANALYSIS DATE: 2023-01-23T23:00:30ZTTPS: T1012, T1082, T1005, T1081,...

Malware Analysis – ransomware – ddbb68a048aa1dc2d70def4ed51d7f72

January 24, 2023

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: ddbb68a048aa1dc2d70def4ed51d7f72SHA1: 9ecd8e12cf00616b05cdb8103eb44af9bec6ffe2ANALYSIS DATE: 2023-01-23T23:30:19ZTTPS: T1491, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Cobalt Stike Beacon Detected – 45[.]61[.]186[.]9:80

January 23, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 162[.]19[.]155[.]49:80

January 23, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

743c9339845a954b9f2734d02076d2e92543a9c782acc2552e2f32d8eb3d5264

SQLiDetector – Helps You To Detect SQL Injection “Error Based” By Sending Multiple Requests With 14 Payloads And Checking For 152 Regex Patterns For Different Databases

January 23, 2023

Simple python script supported with BurpBouty profile that helps you to detect SQL injection "Error based" by sending multiple requests...

Cobalt Stike Beacon Detected – 49[.]232[.]21[.]201:9091

January 23, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 91[.]215[.]85[.]196:80

January 23, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 43[.]159[.]43[.]58:80

January 23, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 103[.]146[.]158[.]251:443

January 23, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 119[.]29[.]82[.]40:8053

January 23, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 52[.]60[.]155[.]85:443

January 23, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

857f5d28b5c05921f32f39017d49e10df39d0fb47d46101a27be4d853b2c62c5

Popeye – A Kubernetes Cluster Resource Sanitizer

January 22, 2023

Popeye - A Kubernetes Cluster Sanitizer Popeye is a utility that scans live Kubernetes cluster and reports potential issues with...

Cobalt Stike Beacon Detected – 18[.]192[.]181[.]229:443

January 22, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – discovery – 5353103470722f4778485e5874392a0a

January 22, 2023

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploit, persistenceMD5: 5353103470722f4778485e5874392a0aSHA1: 596b5989ba88f6a3aa7b4bdd97c8367526291575ANALYSIS DATE: 2023-01-22T09:43:57ZTTPS: T1222, T1060, T1112, T1012, T1120, T1082, T1158 ScoreMeaningExample10Known badA...

Malware Analysis – djvu – 651066b4edb5d4aaab16a5083645d9db

January 22, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 651066b4edb5d4aaab16a5083645d9dbSHA1: 43039594af889953321a09b6579a0a26798e157dANALYSIS DATE: 2023-01-22T09:04:59ZTTPS: T1053, T1005, T1081, T1012,...

Malware Analysis – djvu – 1584bcd7634fb887f9cfa961bc759828

January 22, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 1584bcd7634fb887f9cfa961bc759828SHA1: 4e6832807c3303cfbde71c9a88f487a7cbe9b76eANALYSIS DATE: 2023-01-22T09:50:00ZTTPS: T1082, T1005, T1081, T1060,...

Malware Analysis – djvu – 8481d406605697e84dacab3bb8f0644a

January 22, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 8481d406605697e84dacab3bb8f0644aSHA1: ddd50a4c59f2324a8d5f8d890d0c0728e7062ad2ANALYSIS DATE: 2023-01-22T09:53:55ZTTPS: T1012, T1082, T1053, T1005,...

Malware Analysis – discovery – b7cdd21a7d0fabcd1ce4168972768842

January 22, 2023

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomware, spyware, stealerMD5: b7cdd21a7d0fabcd1ce4168972768842SHA1: 93f6c45b6d57c9ba9938e0466bbbb1c6d6d64620ANALYSIS DATE: 2023-01-22T10:41:49ZTTPS: T1082, T1060, T1112, T1012, T1120, T1005, T1081...

Malware Analysis – discovery – 8a9690b972368f4b037caabc85d2118f

January 22, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: 8a9690b972368f4b037caabc85d2118fSHA1: d209481d5629089db3ba95662110ec3efbfcdf7bANALYSIS DATE: 2023-01-22T10:30:28ZTTPS: T1012, T1082, T1060, T1112, T1130 ScoreMeaningExample10Known badA malware family...

Malware Analysis – djvu – e1e817e5b87307ca93a995eb612892f5

January 22, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: e1e817e5b87307ca93a995eb612892f5SHA1: cddcf161783f0de3b69d41e557c4c1f45cbb01c7ANALYSIS DATE: 2023-01-22T10:43:32ZTTPS: T1082, T1053, T1005, T1081,...

Malware Analysis – djvu – 243940be99aa38e3cc06b7f589064103

January 22, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 243940be99aa38e3cc06b7f589064103SHA1: f4b9ddd11cf143c1e1b21993172914e89a91418bANALYSIS DATE: 2023-01-22T11:42:54ZTTPS: T1060, T1112, T1005, T1081,...

Tai-e – An Easy-To-Learn/Use Static Analysis Framework For Java

January 22, 2023

Tai-e What is Tai-e? Tai-e (Chinese: 太阿; pronunciation: ) is a new static analysis framework for Java (please see our...

Cobalt Stike Beacon Detected – 43[.]138[.]215[.]2:8001

January 22, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Security

Malware Analysis – lockbit – 01ccead2e9497ce04ab0c2531320224d

Malware Analysis – djvu – 1b2d5ea242f2354691c62b680893df7a

Malware Analysis – ransomware – ddbb68a048aa1dc2d70def4ed51d7f72

Cobalt Stike Beacon Detected – 45[.]61[.]186[.]9:80

Cobalt Stike Beacon Detected – 162[.]19[.]155[.]49:80

SQLiDetector – Helps You To Detect SQL Injection “Error Based” By Sending Multiple Requests With 14 Payloads And Checking For 152 Regex Patterns For Different Databases

Cobalt Stike Beacon Detected – 49[.]232[.]21[.]201:9091

Cobalt Stike Beacon Detected – 91[.]215[.]85[.]196:80

Cobalt Stike Beacon Detected – 43[.]159[.]43[.]58:80

Cobalt Stike Beacon Detected – 103[.]146[.]158[.]251:443

Cobalt Stike Beacon Detected – 119[.]29[.]82[.]40:8053

Cobalt Stike Beacon Detected – 52[.]60[.]155[.]85:443

Popeye – A Kubernetes Cluster Resource Sanitizer

Cobalt Stike Beacon Detected – 18[.]192[.]181[.]229:443

Malware Analysis – discovery – 5353103470722f4778485e5874392a0a

Malware Analysis – djvu – 651066b4edb5d4aaab16a5083645d9db

Malware Analysis – djvu – 1584bcd7634fb887f9cfa961bc759828

Malware Analysis – djvu – 8481d406605697e84dacab3bb8f0644a

Malware Analysis – discovery – b7cdd21a7d0fabcd1ce4168972768842

Malware Analysis – discovery – 8a9690b972368f4b037caabc85d2118f

Malware Analysis – djvu – e1e817e5b87307ca93a995eb612892f5

Malware Analysis – djvu – 243940be99aa38e3cc06b7f589064103

Tai-e – An Easy-To-Learn/Use Static Analysis Framework For Java

Cobalt Stike Beacon Detected – 43[.]138[.]215[.]2:8001

Cobalt Strike Beacon Detected – 101[.]42[.]239[.]131:8880

Cobalt Strike Beacon Detected – 119[.]8[.]124[.]29:9999

Cobalt Strike Beacon Detected – 47[.]113[.]217[.]92:8001

Cobalt Strike Beacon Detected – 120[.]27[.]235[.]78:443

Cobalt Strike Beacon Detected – 111[.]231[.]144[.]159:4444

You may have missed