Security

Malware Analysis – djvu – 21b2fa42134d031de96e30172badfe1f

February 22, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 21b2fa42134d031de96e30172badfe1fSHA1: 1b43a994e943bd0dcb4c37b824908c6d49815450ANALYSIS DATE: 2023-02-22T05:35:08ZTTPS: T1012, T1082, T1053, T1005,...

Malware Analysis – djvu – eb3a93b87aeebce36ef2c599a8a6dfbc

February 22, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:19, backdoor, discovery, evasion, persistence, ransomware, stealer, trojan, vmprotectMD5: eb3a93b87aeebce36ef2c599a8a6dfbcSHA1: d8f67ac9a52e9300fbce7d667ea2f3d3e0bf65e0ANALYSIS DATE: 2023-02-22T04:31:20ZTTPS:...

Malware Analysis – djvu – c0904e41ae1b556e10c96b0bb560c3a3

February 22, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: c0904e41ae1b556e10c96b0bb560c3a3SHA1: 42f10936c427306bb9dd573d2b8269ea9abd0e06ANALYSIS DATE: 2023-02-21T22:11:42ZTTPS: T1060, T1112, T1222, T1005,...

Malware Analysis – djvu – 65265918b765429783ce5fa95a0622a2

February 22, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 65265918b765429783ce5fa95a0622a2SHA1: 1d703e95d884410e5877e90607cdaed2153acd27ANALYSIS DATE: 2023-02-21T22:20:06ZTTPS: T1060, T1112, T1082, T1012,...

Malware Analysis – discovery – a8cd74892388fd177dcc73a4ffcc7597

February 22, 2023

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, evasion, exploit, themidaMD5: a8cd74892388fd177dcc73a4ffcc7597SHA1: 1af61835c4e5dc78c93dad7b1352ff45350f1ae2ANALYSIS DATE: 2023-02-21T22:20:27ZTTPS: T1158, T1012, T1120, T1082, T1222 ScoreMeaningExample10Known badA malware...

Cobalt Stike Beacon Detected – 195[.]123[.]241[.]169:443

February 22, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 147[.]78[.]47[.]209:443

February 22, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 209[.]141[.]36[.]163:80

February 22, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 104[.]237[.]135[.]20:443

February 22, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – discovery – aaa0a4c3e66a85daa7f5d639e4cbb569

February 22, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, evasion, persistence, ransomwareMD5: aaa0a4c3e66a85daa7f5d639e4cbb569SHA1: 7cd22ae424f29b1aa127c8b19c215bdca57a3921ANALYSIS DATE: 2023-02-21T22:26:45ZTTPS: T1112, T1107, T1490, T1089, T1060, T1012, T1102, T1158,...

Malware Analysis – – 8bf945bbf9308d79875d4000db5272e2

February 22, 2023

Score: 7 MALWARE FAMILY: TAGS:MD5: 8bf945bbf9308d79875d4000db5272e2SHA1: 92f9abadb7ebc187304da07ec01469ad6958d220ANALYSIS DATE: 2023-02-21T22:33:10ZTTPS: T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – djvu – 57a2bb0db2912fc739932cd12df7bc65

February 22, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:pseudomanuscrypt, family:smokeloader, family:vidar, botnet:19, backdoor, discovery, evasion, loader, persistence, ransomware, stealer, trojan, vmprotectMD5: 57a2bb0db2912fc739932cd12df7bc65SHA1: 4d4491b07ced2422c14af94a87aec540d94a3e35ANALYSIS...

Malware Analysis – ransomware – 3907c7fbd4148395284d8e6e3c1dba5d

February 22, 2023

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 3907c7fbd4148395284d8e6e3c1dba5dSHA1: a67205dc84ec29eb71bb259b19c1a1783865c0fcANALYSIS DATE: 2023-02-21T23:41:14ZTTPS: T1005, T1081, T1018 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 45f9335fcefc8ff05db68a33b618b079

February 21, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 45f9335fcefc8ff05db68a33b618b079SHA1: 1928b38120ab18f78619fc4b2b477e406bfb10cfANALYSIS DATE: 2023-02-21T09:31:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – – e1ddaabd6670e833268511839fdc9fa4

February 21, 2023

Score: 1 MALWARE FAMILY: TAGS:MD5: e1ddaabd6670e833268511839fdc9fa4SHA1: ab90a6db6e088ad5c6b1ab0f095255e6e10e122aANALYSIS DATE: 2023-02-21T09:43:33ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – smokeloader – b63f8a61fb95a0186241e5fcf517434a

February 21, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: b63f8a61fb95a0186241e5fcf517434aSHA1: 7e8bc5300560f9b0614a96b33016ff3dbb389b61ANALYSIS DATE: 2023-02-21T09:06:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Cobalt Stike Beacon Detected – 150[.]158[.]11[.]76:80

February 21, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 79[.]137[.]204[.]118:80

February 21, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – smokeloader – 57bea51fa7d68734cd7d73f4adf78995

February 21, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 57bea51fa7d68734cd7d73f4adf78995SHA1: 451b2cb0928cf1397b101954797d6a714bba0359ANALYSIS DATE: 2023-02-21T10:11:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 3a02e44029ea6e83d55d28f386addd12

February 21, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 3a02e44029ea6e83d55d28f386addd12SHA1: 117eac938bffbfeb4b8c7c2c56a127e62c10b904ANALYSIS DATE: 2023-02-21T10:13:55ZTTPS: T1082, T1012, T1005, T1081,...

Malware Analysis – djvu – 13ac56707b9294519be6f69d193aab58

February 21, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:pseudomanuscrypt, family:smokeloader, family:vidar, botnet:19, backdoor, discovery, evasion, loader, persistence, ransomware, stealer, trojan, vmprotectMD5: 13ac56707b9294519be6f69d193aab58SHA1: 0d9b4a06e0ee67aff16f4e58f86d2d07c1a7198dANALYSIS...

Malware Analysis – djvu – f52a9a82201e80b74d883d82e651b264

February 21, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: f52a9a82201e80b74d883d82e651b264SHA1: 71c911801a0419b1e023b9f02215b3c8352d0028ANALYSIS DATE: 2023-02-21T10:13:33ZTTPS: T1060, T1112, T1222, T1012,...

Cobalt Stike Beacon Detected – 119[.]3[.]187[.]232:443

February 21, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 67[.]207[.]90[.]203:443

February 21, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Security

Malware Analysis – djvu – 21b2fa42134d031de96e30172badfe1f

Malware Analysis – djvu – eb3a93b87aeebce36ef2c599a8a6dfbc

Malware Analysis – djvu – c0904e41ae1b556e10c96b0bb560c3a3

Malware Analysis – djvu – 65265918b765429783ce5fa95a0622a2

Malware Analysis – discovery – a8cd74892388fd177dcc73a4ffcc7597

Cobalt Stike Beacon Detected – 195[.]123[.]241[.]169:443

Cobalt Stike Beacon Detected – 147[.]78[.]47[.]209:443

Cobalt Stike Beacon Detected – 209[.]141[.]36[.]163:80

Cobalt Stike Beacon Detected – 104[.]237[.]135[.]20:443

Malware Analysis – discovery – aaa0a4c3e66a85daa7f5d639e4cbb569

Malware Analysis – – 8bf945bbf9308d79875d4000db5272e2

Malware Analysis – djvu – 57a2bb0db2912fc739932cd12df7bc65

Malware Analysis – ransomware – 3907c7fbd4148395284d8e6e3c1dba5d

Malware Analysis – smokeloader – 45f9335fcefc8ff05db68a33b618b079

Malware Analysis – – e1ddaabd6670e833268511839fdc9fa4

Malware Analysis – smokeloader – b63f8a61fb95a0186241e5fcf517434a

Cobalt Stike Beacon Detected – 150[.]158[.]11[.]76:80

Cobalt Stike Beacon Detected – 79[.]137[.]204[.]118:80

Malware Analysis – smokeloader – 57bea51fa7d68734cd7d73f4adf78995

Malware Analysis – djvu – 3a02e44029ea6e83d55d28f386addd12

Malware Analysis – djvu – 13ac56707b9294519be6f69d193aab58

Malware Analysis – djvu – f52a9a82201e80b74d883d82e651b264

Cobalt Stike Beacon Detected – 119[.]3[.]187[.]232:443

Cobalt Stike Beacon Detected – 67[.]207[.]90[.]203:443

[WARLOCK] – Ransomware Victim: tein[.]co[.]jp

[WARLOCK] – Ransomware Victim: mytune[.]me

[WARLOCK] – Ransomware Victim: energogroup[.]net

[WARLOCK] – Ransomware Victim: goldenline[.]com

[WARLOCK] – Ransomware Victim: metro[.]local

You may have missed