Security

Malware Analysis – djvu – 1e12ef6d811ea006a932860cd74b0282

January 19, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, stealerMD5: 1e12ef6d811ea006a932860cd74b0282SHA1: fcbef26773b2ef3a41bf1a74f4ed59233283321dANALYSIS DATE: 2023-01-19T09:27:14ZTTPS: T1130, T1112, T1060, T1222, T1082,...

Cobalt Stike Beacon Detected – 47[.]242[.]164[.]33:9998

January 19, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 1[.]117[.]117[.]162:8888

January 19, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 202[.]182[.]117[.]134:8087

January 19, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 103[.]105[.]49[.]52:80

January 19, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – vidar – 6fb6025c04ba6fa3d4820aea944e3667

January 19, 2023

Score: 10 MALWARE FAMILY: vidarTAGS:family:vidar, botnet:408, discovery, persistence, ransomware, spyware, stealerMD5: 6fb6025c04ba6fa3d4820aea944e3667SHA1: b5fa73ed8561665ddaa9b9baecb427dd166d034bANALYSIS DATE: 2023-01-19T09:28:45ZTTPS: T1005, T1081, T1130, T1112, T1082,...

Malware Analysis – djvu – 892865bd136926da1ef72498bb1fb355

January 19, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 892865bd136926da1ef72498bb1fb355SHA1: 53103a535dd72d6156b0a2ba739071b98ec549a8ANALYSIS DATE: 2023-01-19T11:02:44ZTTPS: T1012, T1082, T1005, T1081,...

Malware Analysis – djvu – 30f074e92a9351c582e31b3be1e4a6c3

January 19, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:rhadamanthys, family:smokeloader, family:vidar, botnet:19, botnet:test, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5:...

Malware Analysis – djvu – 1c7c18d59d23a9901b0e2b8e48dcde2c

January 19, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, stealerMD5: 1c7c18d59d23a9901b0e2b8e48dcde2cSHA1: 4579072148edd252a0a6eaa87eea1a0f73599258ANALYSIS DATE: 2023-01-19T11:39:45ZTTPS: T1222, T1082, T1130, T1112, T1060...

Malware Analysis – – bf9859562a838793808f162f59a451a6

January 19, 2023

Score: 3 MALWARE FAMILY: TAGS:MD5: bf9859562a838793808f162f59a451a6SHA1: 6edf259df3a9031428ca8a2e56c4da1caff643afANALYSIS DATE: 2023-01-19T03:46:06ZTTPS: T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – smokeloader – 0ed65c594991f0a57f7209966ce2c081

January 19, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 0ed65c594991f0a57f7209966ce2c081SHA1: 101e646cddf7eb518ed185e1946b3a2715b21057ANALYSIS DATE: 2023-01-19T03:05:05ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 1e61d2b0a41e30bb734ddbe53bb66880

January 19, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 1e61d2b0a41e30bb734ddbe53bb66880SHA1: 26dc0624b6d0286043cf55c3299bd14161f9e19fANALYSIS DATE: 2023-01-19T03:00:52ZTTPS: T1060, T1112, T1012, T1082,...

Malware Analysis – discovery – e2c876ff5b1f24b59d928e595234cdef

January 19, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, evasion, exploit, vmprotectMD5: e2c876ff5b1f24b59d928e595234cdefSHA1: 82d06b09b2a8c514929aab293242d4796d4ee39fANALYSIS DATE: 2023-01-19T04:56:27ZTTPS: T1031, T1562, T1489, T1222, T1112, T1082, T1053, T1102,...

Malware Analysis – – 6e5b443ec0bb37d7d7a332ee1de244b0

January 19, 2023

Score: 3 MALWARE FAMILY: TAGS:MD5: 6e5b443ec0bb37d7d7a332ee1de244b0SHA1: 0973b62f00138342e2f605fd04fe66a408611ab5ANALYSIS DATE: 2023-01-19T03:49:06ZTTPS: T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – djvu – 1aef2be1b15c67a54cbc186937e4066d

January 19, 2023

Malware Analysis – djvu – 3ab3ff502bb6d6cda926109ce676fcbe

January 19, 2023

Malware Analysis – djvu – 81df0f3908f65a7a45c7a927a846f0c0

January 19, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, stealerMD5: 81df0f3908f65a7a45c7a927a846f0c0SHA1: 721c8a579f4cd376f2e286d29f517b0eb99aa018ANALYSIS DATE: 2023-01-19T05:35:02ZTTPS: T1082, T1053, T1130, T1112, T1060,...

Malware Analysis – djvu – 7aeb0ae6802928053059780fd330e216

January 19, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, stealerMD5: 7aeb0ae6802928053059780fd330e216SHA1: a1ce523f846ef964c3d092c155a4001a0110a513ANALYSIS DATE: 2023-01-19T05:34:29ZTTPS: T1222, T1082, T1053, T1130, T1112,...

Malware Analysis – smokeloader – 6711a1ac45718cb729e8698131d914bc

January 19, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 6711a1ac45718cb729e8698131d914bcSHA1: ccacfb714bd9de343d6e923a54736fadda5980cdANALYSIS DATE: 2023-01-19T05:33:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 14e34d7cd3c4a50e368fe65dd20cf05f

January 19, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 14e34d7cd3c4a50e368fe65dd20cf05fSHA1: 1b776fa4abe2c2b4429cc9460696c1bb4339ea70ANALYSIS DATE: 2023-01-19T05:33:20ZTTPS: T1005, T1081, T1060, T1112,...

Security

Malware Analysis – djvu – 1e12ef6d811ea006a932860cd74b0282

Cobalt Stike Beacon Detected – 47[.]242[.]164[.]33:9998

Cobalt Stike Beacon Detected – 1[.]117[.]117[.]162:8888

Cobalt Stike Beacon Detected – 202[.]182[.]117[.]134:8087

Cobalt Stike Beacon Detected – 103[.]105[.]49[.]52:80

Malware Analysis – vidar – 6fb6025c04ba6fa3d4820aea944e3667

Malware Analysis – djvu – 892865bd136926da1ef72498bb1fb355

Malware Analysis – djvu – 30f074e92a9351c582e31b3be1e4a6c3

Malware Analysis – djvu – 1c7c18d59d23a9901b0e2b8e48dcde2c

Malware Analysis – – bf9859562a838793808f162f59a451a6

Malware Analysis – smokeloader – 0ed65c594991f0a57f7209966ce2c081

Malware Analysis – djvu – 1e61d2b0a41e30bb734ddbe53bb66880

Malware Analysis – discovery – e2c876ff5b1f24b59d928e595234cdef

Malware Analysis – – 6e5b443ec0bb37d7d7a332ee1de244b0

Malware Analysis – djvu – 1aef2be1b15c67a54cbc186937e4066d

Malware Analysis – djvu – 3ab3ff502bb6d6cda926109ce676fcbe

Malware Analysis – djvu – 81df0f3908f65a7a45c7a927a846f0c0

Malware Analysis – djvu – 7aeb0ae6802928053059780fd330e216

Malware Analysis – smokeloader – 6711a1ac45718cb729e8698131d914bc

Malware Analysis – djvu – 14e34d7cd3c4a50e368fe65dd20cf05f

Cobalt Stike Beacon Detected – 82[.]157[.]149[.]194:443

Cobalt Stike Beacon Detected – 140[.]143[.]232[.]178:5555

Cobalt Stike Beacon Detected – 1[.]14[.]198[.]89:8022

Cobalt Stike Beacon Detected – 173[.]255[.]211[.]246:9090

HackerOne Bug Bounty Disclosure: exposure-of-personal-ip-address-via-email-micael

[PLAY] – Ransomware Victim: IMSSA Manufacturing

[PLAY] – Ransomware Victim: Morrison Companies

[CRYPTO24] – Ransomware Victim: Warisan TC Holdings Berhad

[CRYPTO24] – Ransomware Victim: Tra ***

You may have missed