Security

Malware Analysis – djvu – fd9ec571c9317b69d96d3ef09fc3b722

March 8, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: fd9ec571c9317b69d96d3ef09fc3b722SHA1: 62950112b396b6299fb1e7fb3bb2bba5cf5f64b5ANALYSIS DATE: 2023-03-08T10:11:38ZTTPS: T1005, T1081, T1012, T1082, T1060,...

Malware Analysis – smokeloader – f4b08f9f07a4938b83f1564b1c21cf27

March 8, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: f4b08f9f07a4938b83f1564b1c21cf27SHA1: 7ac9dd5a0f7464836ae4b001c2774bb5eb352b5aANALYSIS DATE: 2023-03-08T10:26:12ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – amadey – cf4c9cd6e648b12c80bf947c77be8f89

March 8, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:vidar, backdoor, discovery, evasion, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: cf4c9cd6e648b12c80bf947c77be8f89SHA1: 1683c6778019a0269a430a40fa26872a484df307ANALYSIS DATE:...

Malware Analysis – djvu – 2cfcb21bd5b1513337f74222240a83e9

March 8, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: 2cfcb21bd5b1513337f74222240a83e9SHA1: c64a12aab3c9192d1969762c4d97dfe6947bebfaANALYSIS DATE: 2023-03-08T10:25:44ZTTPS: T1222, T1060, T1112, T1082, T1053 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – cb8e4278d5baa134718728a057f7076b

March 8, 2023

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: cb8e4278d5baa134718728a057f7076bSHA1: ef3247d324af56d5254d6d1bebc84d0223da2b4aANALYSIS DATE: 2023-03-08T10:24:51ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – cf5f0ec10c96449539d5fb28714034a8

March 8, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: cf5f0ec10c96449539d5fb28714034a8SHA1: d4e2fa2c5631f9e48c862b8f70a2c82b1c4e586eANALYSIS DATE: 2023-03-08T11:11:05ZTTPS: T1222, T1060, T1112, T1082, T1012,...

Malware Analysis – smokeloader – ff7b81d1699ab3539723c7b373112acf

March 8, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: ff7b81d1699ab3539723c7b373112acfSHA1: 252fdf43cd58f3b4690c8ee44a6fb0b633365245ANALYSIS DATE: 2023-03-08T10:32:39ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – d1c3d5824dfbb2c0b0965194f0679cc9

March 8, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: d1c3d5824dfbb2c0b0965194f0679cc9SHA1: 44e1cae1144368395fcd7bb9e13d2b88e47a1b6cANALYSIS DATE: 2023-03-08T10:32:39ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ransomware – 34841af731c1b0be5c9309017b67bbff

March 8, 2023

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 34841af731c1b0be5c9309017b67bbffSHA1: 5b760afa71a95ba24140a56012f0faaf99154a04ANALYSIS DATE: 2023-03-08T11:18:10ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Cobalt Stike Beacon Detected – 107[.]175[.]111[.]199:443

March 8, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 74[.]119[.]193[.]128:443

March 8, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 23[.]227[.]196[.]17:443

March 8, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – smokeloader – 45e9ebac4458e3e5bfd25e9ced12442d

March 8, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 45e9ebac4458e3e5bfd25e9ced12442dSHA1: 581159e264a22f962795e53b058dcd8a47056042ANALYSIS DATE: 2023-03-08T11:25:05ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 89bd882e0242cae0249a90795d9e029e

March 8, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 89bd882e0242cae0249a90795d9e029eSHA1: e754d8689aea58c801f93aa5ac1dae609b2d81d2ANALYSIS DATE: 2023-03-08T11:25:05ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – dab230c7e5cb1132fd5588950ed6bae7

March 8, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: dab230c7e5cb1132fd5588950ed6bae7SHA1: 301b5a8db37427dbad3887b6e2069c8e8c3fbffeANALYSIS DATE: 2023-03-08T11:20:58ZTTPS: T1012, T1082, T1005, T1081, T1222,...

Malware Analysis – smokeloader – ce55326184e2c015b6f24334c3084540

March 8, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: ce55326184e2c015b6f24334c3084540SHA1: 7750094147cc42c9b38e5c5d17b4d37f580487a1ANALYSIS DATE: 2023-03-08T11:19:25ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Security

Malware Analysis – djvu – fd9ec571c9317b69d96d3ef09fc3b722

Malware Analysis – smokeloader – f4b08f9f07a4938b83f1564b1c21cf27

Malware Analysis – amadey – cf4c9cd6e648b12c80bf947c77be8f89

Malware Analysis – djvu – 2cfcb21bd5b1513337f74222240a83e9

Malware Analysis – ransomware – cb8e4278d5baa134718728a057f7076b

Malware Analysis – djvu – cf5f0ec10c96449539d5fb28714034a8

Malware Analysis – smokeloader – ff7b81d1699ab3539723c7b373112acf

Malware Analysis – smokeloader – d1c3d5824dfbb2c0b0965194f0679cc9

Malware Analysis – ransomware – 34841af731c1b0be5c9309017b67bbff

Cobalt Stike Beacon Detected – 107[.]175[.]111[.]199:443

Cobalt Stike Beacon Detected – 74[.]119[.]193[.]128:443

Cobalt Stike Beacon Detected – 23[.]227[.]196[.]17:443

Malware Analysis – smokeloader – 45e9ebac4458e3e5bfd25e9ced12442d

Malware Analysis – smokeloader – 89bd882e0242cae0249a90795d9e029e

Malware Analysis – djvu – dab230c7e5cb1132fd5588950ed6bae7

Malware Analysis – smokeloader – ce55326184e2c015b6f24334c3084540

Cobalt Stike Beacon Detected – 216[.]83[.]45[.]175:8443

Cobalt Stike Beacon Detected – 194[.]135[.]24[.]246:80

Cobalt Stike Beacon Detected – 43[.]140[.]193[.]29:80

Cobalt Stike Beacon Detected – 124[.]220[.]45[.]192:80

Posh C2 Detected – 95[.]248[.]117[.]142:443

Cobalt Stike Beacon Detected – 116[.]62[.]218[.]6:2222

Cobalt Stike Beacon Detected – 77[.]91[.]78[.]185:80

Cobalt Stike Beacon Detected – 192[.]211[.]55[.]118:82

[NIGHTSPIRE] – Ransomware Victim: Enem Nostrum Remedies Pvt[.] Ltd

[THEGENTLEMEN] – Ransomware Victim: St Stephen’s International

[QILIN] – Ransomware Victim: Mango’s Tropical Cafe

Cobalt Strike Beacon Detected – 121[.]41[.]167[.]80:80

Cobalt Strike Beacon Detected – 38[.]190[.]224[.]63:80

You may have missed