Security

Malware Analysis – smokeloader – 5138399605906d20f0d997f76a455305

January 26, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 5138399605906d20f0d997f76a455305SHA1: 1c3d6a4e2e3c06654cd6ce9a63df125285cc39ecANALYSIS DATE: 2023-01-26T09:23:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 1e26a5b4fef1212594a1a80192b5af49

January 26, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 1e26a5b4fef1212594a1a80192b5af49SHA1: 805eab0ee48f53b202a4e9e518d957630b06483dANALYSIS DATE: 2023-01-26T09:10:44ZTTPS: T1060, T1112, T1222, T1053,...

Malware Analysis – djvu – 09a0cb3a24b41bc88ad4e89bbc66b492

January 26, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:19, backdoor, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: 09a0cb3a24b41bc88ad4e89bbc66b492SHA1: 4587378995be7068c587591933f38990fe5bee23ANALYSIS DATE: 2023-01-26T10:08:47ZTTPS:...

Malware Analysis – discovery – 1b8f29e2103cf73b4844c685c6f6ce5e

January 26, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomware, spyware, stealerMD5: 1b8f29e2103cf73b4844c685c6f6ce5eSHA1: bc2607fce6742c21c4d8a679968e3769e40261f6ANALYSIS DATE: 2023-01-26T09:50:00ZTTPS: T1060, T1012, T1112, T1005, T1081, T1082, T1042...

Malware Analysis – discovery – 69a60a65668851b6ddb406e3094b2e86

January 26, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: 69a60a65668851b6ddb406e3094b2e86SHA1: 484a781471ed7227ed6636122fdbac56e9895b3fANALYSIS DATE: 2023-01-26T10:29:17ZTTPS: T1060, T1112, T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family...

Malware Analysis – djvu – afd4bd2d1bf9a2648a0ddfd0bd572e57

January 26, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: afd4bd2d1bf9a2648a0ddfd0bd572e57SHA1: 25c7285f2d5da15e1d60945ccbac73b6ae04fc33ANALYSIS DATE: 2023-01-26T09:30:51ZTTPS: T1012, T1222, T1082, T1005,...

Malware Analysis – djvu – 8edc269873eb17d0c726919b0b2855d5

January 26, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, backdoor, discovery, persistence, ransomware, trojan, vmprotectMD5: 8edc269873eb17d0c726919b0b2855d5SHA1: 1ccb3faed9993c542e92f66f10fe2ec992408971ANALYSIS DATE: 2023-01-26T10:57:08ZTTPS: T1012, T1120, T1082, T1222,...

Malware Analysis – djvu – 4623857875232b3cd157433eb1fd0e46

January 26, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 4623857875232b3cd157433eb1fd0e46SHA1: f5b05f67ddf98eb52427f49f346736eeb1f47ffcANALYSIS DATE: 2023-01-26T10:54:21ZTTPS: T1005, T1081, T1082, T1012,...

Malware Analysis – smokeloader – 7961d2f393fbc2f1fa49db7410feaa21

January 26, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 7961d2f393fbc2f1fa49db7410feaa21SHA1: d7b1b94ee117bf2a4be1f3b6044fde46d175d27eANALYSIS DATE: 2023-01-26T11:25:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – f949ebdd228fd1ff03e7a1c963886ef2

January 26, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: f949ebdd228fd1ff03e7a1c963886ef2SHA1: 6a30d8454bedc3353ab8b7d5c9095e19583ac99aANALYSIS DATE: 2023-01-26T10:45:45ZTTPS: T1222, T1082, T1053, T1005,...

Cobalt Stike Beacon Detected – 100[.]26[.]163[.]51:80

January 26, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 104[.]208[.]73[.]11:80

January 26, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 107[.]151[.]195[.]11:80

January 26, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 47[.]92[.]126[.]214:8888

January 26, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – 5d45ed8d173bcc871ca7c828b09832f3

January 26, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:19, backdoor, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: 5d45ed8d173bcc871ca7c828b09832f3SHA1: 8281eace3216fd0416ac4a0cf86f9169e8120fb5ANALYSIS DATE: 2023-01-26T03:18:18ZTTPS:...

Malware Analysis – djvu – 9d1e9d088036afdacfb2f89ca29dd137

January 26, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:19, backdoor, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: 9d1e9d088036afdacfb2f89ca29dd137SHA1: 1743eb444c948dbdf2d58508a72851daee0b6d69ANALYSIS DATE: 2023-01-26T03:02:38ZTTPS:...

Malware Analysis – – f26a8722a6deec5f530ebcfd2469087f

January 26, 2023

Score: 7 MALWARE FAMILY: TAGS:MD5: f26a8722a6deec5f530ebcfd2469087fSHA1: 7153ef673457d29166228f5977dff128722cf0d4ANALYSIS DATE: 2023-01-26T04:41:36ZTTPS: T1082, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – discovery – 39945d030f4f19876d81dd4f16ac8369

January 26, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: 39945d030f4f19876d81dd4f16ac8369SHA1: e4ff8415a04dca259205298d27236092d360dbb3ANALYSIS DATE: 2023-01-26T04:16:30ZTTPS: T1060, T1012, T1120, T1082, T1102 ScoreMeaningExample10Known badA malware family...

Malware Analysis – discovery – c2cf2b9242a2dd7550a36f63467c30b2

January 26, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: c2cf2b9242a2dd7550a36f63467c30b2SHA1: 196236477150bd5ccd5fb17b0d01017d9eda47bcANALYSIS DATE: 2023-01-26T05:23:31ZTTPS: T1060, T1082, T1057, T1012 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – medusalocker – 646698572afbbf24f50ec5681feb2db7

January 26, 2023

Score: 10 MALWARE FAMILY: medusalockerTAGS:family:medusalocker, evasion, ransomware, spyware, stealer, trojanMD5: 646698572afbbf24f50ec5681feb2db7SHA1: 70530bc23bad38e6aee66cbb2c2f58a96a18fb79ANALYSIS DATE: 2023-01-26T05:33:48ZTTPS: T1082, T1112, T1012, T1120, T1107, T1490,...

Malware Analysis – djvu – 504863d5dc6d3062a34f399173b61ec7

January 26, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:19, backdoor, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: 504863d5dc6d3062a34f399173b61ec7SHA1: c895012708971193f8462d28860bacfe3e36d510ANALYSIS DATE: 2023-01-26T05:42:07ZTTPS:...

Malware Analysis – ransomware – f7b5b9fd8c7020dedb138ef75190dffc

January 26, 2023

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: f7b5b9fd8c7020dedb138ef75190dffcSHA1: adebd8a52b6dc9ad35dee583eae8d93e0040b837ANALYSIS DATE: 2023-01-26T05:34:00ZTTPS: T1012, T1120, T1082, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – persistence – 20ebc478a429ac5c954870668f453cb2

January 26, 2023

Score: 8 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 20ebc478a429ac5c954870668f453cb2SHA1: 91c5fa33d5848a4e5bce867cf06a760aafd9dbd0ANALYSIS DATE: 2023-01-26T05:33:55ZTTPS: T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – dharma – 8bacbf2e386dbc47af1f1390e1bdbbf7

January 26, 2023

Score: 10 MALWARE FAMILY: dharmaTAGS:family:dharma, persistence, ransomware, spyware, stealerMD5: 8bacbf2e386dbc47af1f1390e1bdbbf7SHA1: 1101a108e9ae5aa0a0b905dd3cbbbaa05b7dd41dANALYSIS DATE: 2023-01-26T05:33:52ZTTPS: T1107, T1490, T1005, T1081, T1082, T1112, T1060...

Security

Malware Analysis – smokeloader – 5138399605906d20f0d997f76a455305

Malware Analysis – djvu – 1e26a5b4fef1212594a1a80192b5af49

Malware Analysis – djvu – 09a0cb3a24b41bc88ad4e89bbc66b492

Malware Analysis – discovery – 1b8f29e2103cf73b4844c685c6f6ce5e

Malware Analysis – discovery – 69a60a65668851b6ddb406e3094b2e86

Malware Analysis – djvu – afd4bd2d1bf9a2648a0ddfd0bd572e57

Malware Analysis – djvu – 8edc269873eb17d0c726919b0b2855d5

Malware Analysis – djvu – 4623857875232b3cd157433eb1fd0e46

Malware Analysis – smokeloader – 7961d2f393fbc2f1fa49db7410feaa21

Malware Analysis – djvu – f949ebdd228fd1ff03e7a1c963886ef2

Cobalt Stike Beacon Detected – 100[.]26[.]163[.]51:80

Cobalt Stike Beacon Detected – 104[.]208[.]73[.]11:80

Cobalt Stike Beacon Detected – 107[.]151[.]195[.]11:80

Cobalt Stike Beacon Detected – 47[.]92[.]126[.]214:8888

Malware Analysis – djvu – 5d45ed8d173bcc871ca7c828b09832f3

Malware Analysis – djvu – 9d1e9d088036afdacfb2f89ca29dd137

Malware Analysis – – f26a8722a6deec5f530ebcfd2469087f

Malware Analysis – discovery – 39945d030f4f19876d81dd4f16ac8369

Malware Analysis – discovery – c2cf2b9242a2dd7550a36f63467c30b2

Malware Analysis – medusalocker – 646698572afbbf24f50ec5681feb2db7

Malware Analysis – djvu – 504863d5dc6d3062a34f399173b61ec7

Malware Analysis – ransomware – f7b5b9fd8c7020dedb138ef75190dffc

Malware Analysis – persistence – 20ebc478a429ac5c954870668f453cb2

Malware Analysis – dharma – 8bacbf2e386dbc47af1f1390e1bdbbf7

HackerOne Bug Bounty Disclosure: stack-buffer-overflow-in-curl-cookie-parsing-leads-to-rce-batuhanilgarr

BugCrowd Bug Bounty Disclosure: P3 – Publicly Editable Google Docs Linked from NASA SnowEx PPT –

BugCrowd Bug Bounty Disclosure: P3 – Details of the collaboration between NASA and Inmarsat Government and the type of contract –

Apple Products Multiple Vulnerabilities

Miljödata – 870,108 breached accounts

You may have missed