Security

Malware Analysis – evasion – 6ba0afb7279fdb931ea86cf69d1941cc

March 6, 2023

Score: 8 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 6ba0afb7279fdb931ea86cf69d1941ccSHA1: 50ced7c61c72559952f2eeb81f25dfdf4ead6eb2ANALYSIS DATE: 2023-03-06T09:50:04ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – ransomware – ee57cb6c0e2292903b33adf62a2a7810

March 6, 2023

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: ee57cb6c0e2292903b33adf62a2a7810SHA1: 7715b284d29880a7f4e1df067d030410e1213a58ANALYSIS DATE: 2023-03-06T10:06:03ZTTPS: T1012, T1120, T1082, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ransomware – 166c61424c79b082c52448d66f66156f

March 6, 2023

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 166c61424c79b082c52448d66f66156fSHA1: 0cbd03202b50932f24da07bc91f0aa1e579177f4ANALYSIS DATE: 2023-03-06T10:07:04ZTTPS: T1107, T1490, T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ransomware – d8c43ed3de8a96a1772e4a87f8cc7685

March 6, 2023

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: d8c43ed3de8a96a1772e4a87f8cc7685SHA1: fecc46b4c1d8e3a12a04ab32451ddbe799af2fd7ANALYSIS DATE: 2023-03-06T10:08:07ZTTPS: T1012, T1120, T1082, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ransomware – c5a954205e76a29ede66cde99baaec6f

March 6, 2023

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: c5a954205e76a29ede66cde99baaec6fSHA1: cf027bb97d18b2b255613c3bc0e27964088f2a54ANALYSIS DATE: 2023-03-06T10:09:05ZTTPS: T1012, T1120, T1082, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Cobalt Stike Beacon Detected – 118[.]195[.]172[.]110:8012

March 6, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 81[.]68[.]136[.]116:80

March 6, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 101[.]43[.]215[.]118:9090

March 6, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – 70a8331725cb661616a8082d5b943a35

March 6, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 70a8331725cb661616a8082d5b943a35SHA1: c88a37a811ab884a26ecdf4b29ffce8387a08fd2ANALYSIS DATE: 2023-03-06T10:37:39ZTTPS: T1005, T1081, T1060, T1112, T1222,...

Malware Analysis – djvu – a3cb7cdc9bfe987e3a9d962a3a704c75

March 6, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: a3cb7cdc9bfe987e3a9d962a3a704c75SHA1: 3aafc32da690dd5b16f920b23fe3d28aa3bb3ea3ANALYSIS DATE: 2023-03-06T10:13:49ZTTPS: T1082, T1012, T1005, T1081, T1060,...

Malware Analysis – djvu – 0b8588379ad0cc771f8d05e0fbf72487

March 6, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 0b8588379ad0cc771f8d05e0fbf72487SHA1: 39975389c5a3020cd51a65af82279466cf679d37ANALYSIS DATE: 2023-03-06T10:43:40ZTTPS: T1012, T1082, T1005, T1081, T1222,...

Malware Analysis – djvu – aced83bf00dcddbe5b90f7f43ccd272f

March 6, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: aced83bf00dcddbe5b90f7f43ccd272fSHA1: 39e6dffb435a2c506f14252fc8acdfb0135e2111ANALYSIS DATE: 2023-03-06T10:20:36ZTTPS: T1012, T1082, T1005, T1081, T1060,...

Cobalt Stike Beacon Detected – 179[.]43[.]187[.]185:8080

March 6, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 43[.]142[.]87[.]35:443

March 6, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 84[.]32[.]34[.]97:80

March 6, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 20[.]246[.]185[.]142:80

March 6, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – 76a1e1bfd28d7125af316d6e6b72ad4a

March 6, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 76a1e1bfd28d7125af316d6e6b72ad4aSHA1: b07d28b37e1ba0c3ff482171550599d4ea6c159dANALYSIS DATE: 2023-03-06T10:45:13ZTTPS: T1012, T1053, T1060, T1112, T1005,...

Malware Analysis – chaos – 84dbf5b66139cf86f87ac1d420c736c9

March 6, 2023

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, ransomware, spyware, stealerMD5: 84dbf5b66139cf86f87ac1d420c736c9SHA1: 4ca604aec1c66194182b25c4cc0fdf17ef9eeb7fANALYSIS DATE: 2023-03-06T11:20:06ZTTPS: T1005, T1081, T1082 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – ransomware – 72d3f7ad0028d359a27ff01d920b3497

March 6, 2023

Score: 5 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 72d3f7ad0028d359a27ff01d920b3497SHA1: 6b07f1fab9d1598d68bc0b726155ba70a6840477ANALYSIS DATE: 2023-03-06T11:49:23ZTTPS: T1491, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – lockbit – 290ee6b6f6b2a5f0899a6f35073f8eb4

March 6, 2023

Score: 10 MALWARE FAMILY: lockbitTAGS:family:lockbit, ransomwareMD5: 290ee6b6f6b2a5f0899a6f35073f8eb4SHA1: 4fe51b2fd9b481f74f5b56ecb2ab97b3268ba6d0ANALYSIS DATE: 2023-03-06T11:49:07ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Security

Malware Analysis – evasion – 6ba0afb7279fdb931ea86cf69d1941cc

Malware Analysis – ransomware – ee57cb6c0e2292903b33adf62a2a7810

Malware Analysis – ransomware – 166c61424c79b082c52448d66f66156f

Malware Analysis – ransomware – d8c43ed3de8a96a1772e4a87f8cc7685

Malware Analysis – ransomware – c5a954205e76a29ede66cde99baaec6f

Cobalt Stike Beacon Detected – 118[.]195[.]172[.]110:8012

Cobalt Stike Beacon Detected – 81[.]68[.]136[.]116:80

Cobalt Stike Beacon Detected – 101[.]43[.]215[.]118:9090

Malware Analysis – djvu – 70a8331725cb661616a8082d5b943a35

Malware Analysis – djvu – a3cb7cdc9bfe987e3a9d962a3a704c75

Malware Analysis – djvu – 0b8588379ad0cc771f8d05e0fbf72487

Malware Analysis – djvu – aced83bf00dcddbe5b90f7f43ccd272f

Cobalt Stike Beacon Detected – 179[.]43[.]187[.]185:8080

Cobalt Stike Beacon Detected – 43[.]142[.]87[.]35:443

Cobalt Stike Beacon Detected – 84[.]32[.]34[.]97:80

Cobalt Stike Beacon Detected – 20[.]246[.]185[.]142:80

Malware Analysis – djvu – 76a1e1bfd28d7125af316d6e6b72ad4a

Malware Analysis – chaos – 84dbf5b66139cf86f87ac1d420c736c9

Malware Analysis – ransomware – 72d3f7ad0028d359a27ff01d920b3497

Malware Analysis – lockbit – 290ee6b6f6b2a5f0899a6f35073f8eb4

Cobalt Stike Beacon Detected – 57[.]128[.]195[.]112:8443

Cobalt Stike Beacon Detected – 1[.]15[.]141[.]252:8080

Cobalt Stike Beacon Detected – 77[.]91[.]78[.]185:443

Cobalt Stike Beacon Detected – 79[.]137[.]198[.]115:443

CVE Alert: CVE-2025-12384 – bplugins – Document Embedder – Embed PDFs, Word, Excel, and Other Files

CVE Alert: CVE-2025-12139 – princeahmed – File Manager for Google Drive – Integrate Google Drive

CVE Alert: CVE-2025-10622 – Red Hat – Red Hat Satellite 6.18 for RHEL 9

CVE Alert: CVE-2025-12197 – stellarwp – The Events Calendar

[NIGHTSPIRE] – Ransomware Victim: Enem Nostrum Remedies Pvt[.] Ltd

You may have missed