Security

Malware Analysis – djvu – ebd732413ad94faef28ac9ad9bee62dc

February 19, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: ebd732413ad94faef28ac9ad9bee62dcSHA1: 5a7276c719834cca12c210f7efa00a8c8c09d1bdANALYSIS DATE: 2023-02-19T05:20:58ZTTPS: T1082, T1053, T1005, T1081,...

Malware Analysis – ransomware – a7219bd2b24f0684c2506dd03b979d92

February 19, 2023

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealer, upxMD5: a7219bd2b24f0684c2506dd03b979d92SHA1: 8b5029806c496ffceae3ac12251592e0b652edf2ANALYSIS DATE: 2023-02-19T05:14:19ZTTPS: T1005, T1081 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – persistence – 32bcfa01d675b5423260d227c2f32e0b

February 19, 2023

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 32bcfa01d675b5423260d227c2f32e0bSHA1: f46304ec4bbf4c03ce9fdfd3d2c194489ae90fb1ANALYSIS DATE: 2023-02-19T04:52:52ZTTPS: T1107, T1490, T1005, T1081, T1004, T1112 ScoreMeaningExample10Known badA...

Malware Analysis – djvu – 3c20a735ee58e7b135faf380bee3c413

February 19, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:19, backdoor, discovery, evasion, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: 3c20a735ee58e7b135faf380bee3c413SHA1: e91622bf8259b360b6a1b8966c95d29c00104bb6ANALYSIS DATE:...

Cobalt Stike Beacon Detected – 81[.]68[.]75[.]45:80

February 19, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 81[.]71[.]162[.]183:80

February 19, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 43[.]139[.]241[.]58:80

February 19, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – a409820f519f9c076e163077322bbb58

February 18, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: a409820f519f9c076e163077322bbb58SHA1: 62ed6910fb11da432ef2896e764f7a66a6435f6aANALYSIS DATE: 2023-02-18T15:01:27ZTTPS: T1082, T1053, T1005, T1081,...

Malware Analysis – djvu – ae9c7ae252083e636ea556642e0c4873

February 18, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:laplas, family:smokeloader, family:vidar, botnet:19, backdoor, clipper, discovery, evasion, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: ae9c7ae252083e636ea556642e0c4873SHA1:...

Malware Analysis – – 30452e015ad4e6da2b248dcf03ad4c31

February 18, 2023

Score: 7 MALWARE FAMILY: TAGS:MD5: 30452e015ad4e6da2b248dcf03ad4c31SHA1: ba4aa977a7cf9766e137922c786ea8167615176eANALYSIS DATE: 2023-02-18T15:22:59ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – chaos – 40d3bd592cbeefff05b530ad8450c960

February 18, 2023

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, evasion, persistence, ransomware, spyware, stealerMD5: 40d3bd592cbeefff05b530ad8450c960SHA1: 1f61dc040fc2a830028060b8ba7f23a180e5a51fANALYSIS DATE: 2023-02-18T16:29:03ZTTPS: T1490, T1059, T1107, T1082, T1060, T1112,...

Malware Analysis – djvu – 747eea1cbc8b8a498508807a41a4424b

February 18, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:laplas, family:smokeloader, family:vidar, botnet:19, backdoor, clipper, discovery, evasion, persistence, ransomware, stealer, trojan, vmprotectMD5: 747eea1cbc8b8a498508807a41a4424bSHA1: d104137508c56796482869ab7f375c54e07ef797ANALYSIS...

Malware Analysis – djvu – 5ccc511ddadedfb73f7fcae4eb566703

February 18, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 5ccc511ddadedfb73f7fcae4eb566703SHA1: 35f017575b6c496dd62be36bc59bee7d4ccd20a3ANALYSIS DATE: 2023-02-18T15:19:07ZTTPS: T1222, T1005, T1081, T1012,...

Malware Analysis – chaos – f5ad2a45442c0028f4268c72e21e2035

February 18, 2023

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, family:quasar, botnet:ransomware, ransomware, spyware, trojanMD5: f5ad2a45442c0028f4268c72e21e2035SHA1: 1edc22b76db0a40f9267a10ab3805bc4955e86b4ANALYSIS DATE: 2023-02-18T16:31:03ZTTPS: T1082, T1053 ScoreMeaningExample10Known badA malware family...

Malware Analysis – ransomware – 271cd50fb53b127952ef98762a77a50b

February 18, 2023

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 271cd50fb53b127952ef98762a77a50bSHA1: 0e95a7c9cc80c1d89808008ddec255635840f903ANALYSIS DATE: 2023-02-18T16:50:28ZTTPS: T1012, T1082, T1120 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – chaos – 45f6effd67ff42b7285c6852ac84089e

February 18, 2023

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, evasion, ransomware, spyware, stealerMD5: 45f6effd67ff42b7285c6852ac84089eSHA1: 98a8ff6114b65bf0d88fe62ec5faa32c5c4dfa9bANALYSIS DATE: 2023-02-18T16:31:02ZTTPS: T1490, T1059, T1107, T1005, T1081, T1082 ScoreMeaningExample10Known...

Malware Analysis – djvu – c8e50ba08f558fcf82f7d22d48661fc9

February 18, 2023

Malware Analysis – djvu – b06df9c80c32bda4a006a3a49c742af2

February 18, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: b06df9c80c32bda4a006a3a49c742af2SHA1: 323e14b79207907028bd18613648ebeb277b3452ANALYSIS DATE: 2023-02-18T17:14:29ZTTPS: T1060, T1112, T1005, T1081,...

Malware Analysis – djvu – 728bfb5c16833dff2ccaf7d5a3585841

February 18, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 728bfb5c16833dff2ccaf7d5a3585841SHA1: 3ec0be90afce6e5190166cb5313b7b76ed800746ANALYSIS DATE: 2023-02-18T17:14:40ZTTPS: T1060, T1112, T1082, T1053,...

Malware Analysis – djvu – 0347b3417f6fcf5d58ef9d6c1f9c1404

February 18, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 0347b3417f6fcf5d58ef9d6c1f9c1404SHA1: e3ff63b00704de67d0f9f70f24f4566579d80ef2ANALYSIS DATE: 2023-02-18T17:32:03ZTTPS: T1222, T1082, T1005, T1081,...

Security

Malware Analysis – djvu – ebd732413ad94faef28ac9ad9bee62dc

Malware Analysis – ransomware – a7219bd2b24f0684c2506dd03b979d92

Malware Analysis – persistence – 32bcfa01d675b5423260d227c2f32e0b

Malware Analysis – djvu – 3c20a735ee58e7b135faf380bee3c413

Cobalt Stike Beacon Detected – 81[.]68[.]75[.]45:80

Cobalt Stike Beacon Detected – 81[.]71[.]162[.]183:80

Cobalt Stike Beacon Detected – 43[.]139[.]241[.]58:80

Malware Analysis – djvu – a409820f519f9c076e163077322bbb58

Malware Analysis – djvu – ae9c7ae252083e636ea556642e0c4873

Malware Analysis – – 30452e015ad4e6da2b248dcf03ad4c31

Malware Analysis – chaos – 40d3bd592cbeefff05b530ad8450c960

Malware Analysis – djvu – 747eea1cbc8b8a498508807a41a4424b

Malware Analysis – djvu – 5ccc511ddadedfb73f7fcae4eb566703

Malware Analysis – chaos – f5ad2a45442c0028f4268c72e21e2035

Malware Analysis – ransomware – 271cd50fb53b127952ef98762a77a50b

Malware Analysis – chaos – 45f6effd67ff42b7285c6852ac84089e

Malware Analysis – djvu – c8e50ba08f558fcf82f7d22d48661fc9

Malware Analysis – djvu – b06df9c80c32bda4a006a3a49c742af2

Malware Analysis – djvu – 728bfb5c16833dff2ccaf7d5a3585841

Malware Analysis – djvu – 0347b3417f6fcf5d58ef9d6c1f9c1404

Malware Analysis – djvu – 7ff5343fece92fb5d5428a984f89e3bc

Cobalt Stike Beacon Detected – 147[.]182[.]250[.]103:443

Cobalt Stike Beacon Detected – 119[.]91[.]148[.]9:443

Cobalt Stike Beacon Detected – 146[.]190[.]118[.]40:443

[NIGHTSPIRE] – Ransomware Victim: vratatech

[NIGHTSPIRE] – Ransomware Victim: speedmais

[NIGHTSPIRE] – Ransomware Victim: Brihta

[WARLOCK] – Ransomware Victim: tein[.]co[.]jp

[WARLOCK] – Ransomware Victim: mytune[.]me

You may have missed