Security

Malware Analysis – djvu – 2a769aad476e90904b8c865605eb4deb

February 25, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 2a769aad476e90904b8c865605eb4debSHA1: baca7c106a0bcc47ca8068334fbf987fb358cb53ANALYSIS DATE: 2023-02-24T21:50:50ZTTPS: T1053, T1012, T1082, T1005, T1081,...

Cobalt Stike Beacon Detected – 150[.]158[.]55[.]102:443

February 25, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – ransomware – 636a8b982ad672755dae99ac2cb8410b

February 25, 2023

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 636a8b982ad672755dae99ac2cb8410bSHA1: acad7f4140ea8ec970a8c4c91ef7ac5e61ecc1ccANALYSIS DATE: 2023-02-24T22:05:58ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – 253efb250e4405950a48961913a5ed55

February 25, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 253efb250e4405950a48961913a5ed55SHA1: 2289e888d0ac933f1cd7f5eecce18db00d5a7904ANALYSIS DATE: 2023-02-24T22:11:56ZTTPS: T1060, T1112, T1053, T1012, T1082,...

Malware Analysis – djvu – eea32f0092b7de5879bea9e43614eb57

February 25, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, backdoor, discovery, evasion, persistence, ransomware, spyware, stealer, themida, trojan, vmprotectMD5: eea32f0092b7de5879bea9e43614eb57SHA1: a0889f72df365adc17f058102f439a7598e22e29ANALYSIS DATE:...

Malware Analysis – redline – 973978433de985f2e501f5a0484b1fc3

February 25, 2023

Score: 10 MALWARE FAMILY: redlineTAGS:family:redline, discovery, infostealer, persistence, ransomware, spywareMD5: 973978433de985f2e501f5a0484b1fc3SHA1: f93b4408195b0904cc84c9496cc3a54dcfa5a146ANALYSIS DATE: 2023-02-24T21:53:12ZTTPS: T1112, T1042, T1012, T1082, T1005, T1081,...

Cobalt Stike Beacon Detected – 45[.]227[.]252[.]252:80

February 25, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 154[.]88[.]14[.]34:8443

February 25, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 37[.]220[.]87[.]75:443

February 25, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 45[.]76[.]79[.]8:80

February 25, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – – 265024416449b79960ac63a4934a04ab

February 25, 2023

Score: 1 MALWARE FAMILY: TAGS:MD5: 265024416449b79960ac63a4934a04abSHA1: e37184e090f5c8b2d8ca68804c3b3b4161b35b49ANALYSIS DATE: 2023-02-24T22:59:11ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – 917e23d9af8ffc41f59b222d4d0062b6

February 25, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 917e23d9af8ffc41f59b222d4d0062b6SHA1: 40b9dce6353fb98421c7d46f9fb4cdcf0134df94ANALYSIS DATE: 2023-02-24T23:55:39ZTTPS: T1012, T1082, T1005, T1081, T1060,...

Malware Analysis – discovery – 923a5ca3ef3ddec2506d0bffbae51930

February 25, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, evasion, exploit, persistence, spyware, stealer, trojan, upxMD5: 923a5ca3ef3ddec2506d0bffbae51930SHA1: b616b545db7cdef13318fa82a54ba8ad1878ec62ANALYSIS DATE: 2023-02-24T22:33:40ZTTPS: T1112, T1158, T1042, T1012,...

Malware Analysis – djvu – 67d96d0e3bd084531027da3adb28c196

February 25, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 67d96d0e3bd084531027da3adb28c196SHA1: 8790617b397467bfef79a49572e08c6f0a38df61ANALYSIS DATE: 2023-02-24T23:54:28ZTTPS: T1222, T1005, T1081, T1060, T1112,...

Cobalt Stike Beacon Detected – 118[.]194[.]230[.]222:8443

February 25, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 47[.]94[.]3[.]175:55443

February 25, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 45[.]61[.]186[.]108:4433

February 25, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 142[.]11[.]211[.]228:443

February 25, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – 0753e980a0dd89c0777905ed5553f085

February 24, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 0753e980a0dd89c0777905ed5553f085SHA1: 71ba67a7571e5d24a63d930381cb7fa98f6c8d18ANALYSIS DATE: 2023-02-24T16:37:00ZTTPS: T1222, T1060, T1112, T1012, T1082,...

Malware Analysis – amadey – 5b3b6822964b4151c6200ecd89722a86

February 24, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:redline, botnet:funka, botnet:ronur, discovery, evasion, infostealer, persistence, ransomware, spyware, stealer, trojanMD5: 5b3b6822964b4151c6200ecd89722a86SHA1: ce7a11dae532b2ade1c96619bbdc8a8325582049ANALYSIS DATE: 2023-02-24T16:11:31ZTTPS:...

Malware Analysis – djvu – be3f0dc5eca44be2b6740356d55379d4

February 24, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: be3f0dc5eca44be2b6740356d55379d4SHA1: 7376492032fc8e4af1e31ffe041cba9d9f0c8e29ANALYSIS DATE: 2023-02-24T16:34:28ZTTPS: T1005, T1081, T1060, T1112, T1222,...

Malware Analysis – djvu – bd20aa572b8361419d8cab9b5625fe2b

February 24, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: bd20aa572b8361419d8cab9b5625fe2bSHA1: 3f84dda234f6b36e466d529b4230fa3a7891ab88ANALYSIS DATE: 2023-02-24T10:11:35ZTTPS: T1005, T1081, T1012, T1082, T1053,...

Cobalt Stike Beacon Detected – 69[.]49[.]235[.]167:8088

February 24, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 139[.]144[.]188[.]75:8088

February 24, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Security

Malware Analysis – djvu – 2a769aad476e90904b8c865605eb4deb

Cobalt Stike Beacon Detected – 150[.]158[.]55[.]102:443

Malware Analysis – ransomware – 636a8b982ad672755dae99ac2cb8410b

Malware Analysis – djvu – 253efb250e4405950a48961913a5ed55

Malware Analysis – djvu – eea32f0092b7de5879bea9e43614eb57

Malware Analysis – redline – 973978433de985f2e501f5a0484b1fc3

Cobalt Stike Beacon Detected – 45[.]227[.]252[.]252:80

Cobalt Stike Beacon Detected – 154[.]88[.]14[.]34:8443

Cobalt Stike Beacon Detected – 37[.]220[.]87[.]75:443

Cobalt Stike Beacon Detected – 45[.]76[.]79[.]8:80

Malware Analysis – – 265024416449b79960ac63a4934a04ab

Malware Analysis – djvu – 917e23d9af8ffc41f59b222d4d0062b6

Malware Analysis – discovery – 923a5ca3ef3ddec2506d0bffbae51930

Malware Analysis – djvu – 67d96d0e3bd084531027da3adb28c196

Cobalt Stike Beacon Detected – 118[.]194[.]230[.]222:8443

Cobalt Stike Beacon Detected – 47[.]94[.]3[.]175:55443

Cobalt Stike Beacon Detected – 45[.]61[.]186[.]108:4433

Cobalt Stike Beacon Detected – 142[.]11[.]211[.]228:443

Malware Analysis – djvu – 0753e980a0dd89c0777905ed5553f085

Malware Analysis – amadey – 5b3b6822964b4151c6200ecd89722a86

Malware Analysis – djvu – be3f0dc5eca44be2b6740356d55379d4

Malware Analysis – djvu – bd20aa572b8361419d8cab9b5625fe2b

Cobalt Stike Beacon Detected – 69[.]49[.]235[.]167:8088

Cobalt Stike Beacon Detected – 139[.]144[.]188[.]75:8088

[INCRANSOM] – Ransomware Victim: The Union League of Philadelphia

CVE Alert: CVE-2025-46784 – Entr’ouvert – Lasso

CVE Alert: CVE-2025-46404 – Entr’ouvert – Lasso

CVE Alert: CVE-2025-46705 – Entr’ouvert – Lasso

Cobalt Strike Beacon Detected – 8[.]138[.]222[.]215:443

You may have missed