Security

Malware Analysis – discovery – f14153bbd95fc26d9ccea77c49cf09b9

January 18, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, evasion, persistence, ransomware, spyware, stealer, trojanMD5: f14153bbd95fc26d9ccea77c49cf09b9SHA1: cb59f900711ea751c4322b4dab50fa2c0ee70b33ANALYSIS DATE: 2023-01-18T03:19:01ZTTPS: T1130, T1112, T1042, T1012, T1082,...

Malware Analysis – djvu – 7759fcd2fb56a92edd795ce8816beec2

January 18, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 7759fcd2fb56a92edd795ce8816beec2SHA1: 485ab66daee6cc85c335f793f0e3817256529ea8ANALYSIS DATE: 2023-01-18T05:41:10ZTTPS: T1222, T1005, T1081, T1082,...

Malware Analysis – discovery – cc11aad00f58586019f729fc87ae0770

January 18, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, evasion, persistence, ransomware, spyware, stealer, trojanMD5: cc11aad00f58586019f729fc87ae0770SHA1: 0ad616a4f634dc25f8d01496ebb4ce2c803036f2ANALYSIS DATE: 2023-01-18T03:44:20ZTTPS: T1082, T1012, T1120, T1112, T1042,...

Malware Analysis – djvu – 008d06f2da41aff875920ca2fc30dbeb

January 18, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 008d06f2da41aff875920ca2fc30dbebSHA1: 48a340ee73ea1f73ce0b5e107f92899fa31a81dfANALYSIS DATE: 2023-01-18T03:45:29ZTTPS: T1082, T1012, T1222, T1053,...

Malware Analysis – upx – adfd72bcc56ad11b2736584c152e3cdc

January 18, 2023

Score: 9 MALWARE FAMILY: upxTAGS:upxMD5: adfd72bcc56ad11b2736584c152e3cdcSHA1: 7c2745c476490a68d6a8a3ee3207312c7d7c5ac4ANALYSIS DATE: 2023-01-18T04:09:08ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Cobalt Stike Beacon Detected – 124[.]221[.]169[.]111:9999

January 18, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 91[.]240[.]118[.]212:82

January 18, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 179[.]43[.]156[.]148:443

January 18, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 66[.]165[.]243[.]44:80

January 18, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – 1dbe2a7afbed81c1d517f0d29c08cd03

January 18, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 1dbe2a7afbed81c1d517f0d29c08cd03SHA1: 06bb32dd20d2726d9d1fb859c70846d70e6988eaANALYSIS DATE: 2023-01-17T23:52:48ZTTPS: T1005, T1081, T1222, T1082,...

Malware Analysis – discovery – 1bf2e99364940f8a814104325b4ee679

January 18, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: 1bf2e99364940f8a814104325b4ee679SHA1: 6e68aa272b02059cab325334ace34fe505e994caANALYSIS DATE: 2023-01-17T22:19:03ZTTPS: T1057, T1012, T1060, T1082 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – djvu – 8a8c49b680a83c2393bffa1f436c1123

January 18, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, stealerMD5: 8a8c49b680a83c2393bffa1f436c1123SHA1: 314c05651c18a4485744f17244c2d175e7883198ANALYSIS DATE: 2023-01-17T21:59:52ZTTPS: T1082, T1012, T1053, T1060, T1112,...

Malware Analysis – ransomware – 0bfcb2a4ad4975ee352cf455ccbbb9a7

January 18, 2023

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 0bfcb2a4ad4975ee352cf455ccbbb9a7SHA1: 9333b2b05821edffe504039afa7e30245b93def2ANALYSIS DATE: 2023-01-17T22:17:13ZTTPS: T1082, T1005, T1081, T1491, T1112 ScoreMeaningExample10Known badA malware family...

Cobalt Stike Beacon Detected – 77[.]73[.]134[.]51:80

January 18, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 47[.]100[.]48[.]185:8007

January 18, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 23[.]227[.]203[.]14:443

January 18, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 43[.]154[.]23[.]98:443

January 18, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

CISA: CISA Updates Best Practices for Mapping to MITRE ATT&CK®

January 17, 2023

CISA Updates Best Practices for Mapping to MITRE ATT&CK® Today, CISA updated Best Practices for MITRE ATT&CK® Mapping. The MITRE...

8d03c11b8a5459b2259cfb42bf7788483c35efbf6a37a1b2de38009134359fe6

APTRS – Automated Penetration Testing Reporting System

January 17, 2023

APTRS (Automated Penetration Testing Reporting System) is an automated reporting tool in Python and Django. The tool allows Penetration testers...

Malware Analysis – djvu – e8b5ced1c7421ee80a25afe48e816a08

January 17, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, stealerMD5: e8b5ced1c7421ee80a25afe48e816a08SHA1: d4d88fe22b4c6fdc3222486d6de353c8fff8643aANALYSIS DATE: 2023-01-17T16:41:57ZTTPS: T1130, T1112, T1060, T1222, T1082...

Malware Analysis – ransomware – b4447fd459e4d3f8c74d0dd61b363f35

January 17, 2023

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: b4447fd459e4d3f8c74d0dd61b363f35SHA1: 2f531904e872f4cb4a481c6983b4e7bb68541744ANALYSIS DATE: 2023-01-17T16:36:34ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – caffd0c766788c61986d86fd2e608d81

January 17, 2023

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: caffd0c766788c61986d86fd2e608d81SHA1: 3fe95f91eb2cf49e160b3dd3908997dbde9a9277ANALYSIS DATE: 2023-01-17T17:34:04ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – discovery – fba93d8d029e85e0cde3759b7903cee2

January 17, 2023

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploit, persistenceMD5: fba93d8d029e85e0cde3759b7903cee2SHA1: 525b1aa549188f4565c75ab69e51f927204ca384ANALYSIS DATE: 2023-01-17T17:38:51ZTTPS: T1012, T1060, T1112, T1222 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – djvu – a9bac1dee06b3257cab19cb09bef3d1c

January 17, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: a9bac1dee06b3257cab19cb09bef3d1cSHA1: 2be37ca987a82592dde5e01293266a6a26e7892cANALYSIS DATE: 2023-01-17T16:47:09ZTTPS: T1082, T1005, T1081, T1012,...

Security

Malware Analysis – discovery – f14153bbd95fc26d9ccea77c49cf09b9

Malware Analysis – djvu – 7759fcd2fb56a92edd795ce8816beec2

Malware Analysis – discovery – cc11aad00f58586019f729fc87ae0770

Malware Analysis – djvu – 008d06f2da41aff875920ca2fc30dbeb

Malware Analysis – upx – adfd72bcc56ad11b2736584c152e3cdc

Cobalt Stike Beacon Detected – 124[.]221[.]169[.]111:9999

Cobalt Stike Beacon Detected – 91[.]240[.]118[.]212:82

Cobalt Stike Beacon Detected – 179[.]43[.]156[.]148:443

Cobalt Stike Beacon Detected – 66[.]165[.]243[.]44:80

Malware Analysis – djvu – 1dbe2a7afbed81c1d517f0d29c08cd03

Malware Analysis – discovery – 1bf2e99364940f8a814104325b4ee679

Malware Analysis – djvu – 8a8c49b680a83c2393bffa1f436c1123

Malware Analysis – ransomware – 0bfcb2a4ad4975ee352cf455ccbbb9a7

Cobalt Stike Beacon Detected – 77[.]73[.]134[.]51:80

Cobalt Stike Beacon Detected – 47[.]100[.]48[.]185:8007

Cobalt Stike Beacon Detected – 23[.]227[.]203[.]14:443

Cobalt Stike Beacon Detected – 43[.]154[.]23[.]98:443

CISA: CISA Updates Best Practices for Mapping to MITRE ATT&CK®

APTRS – Automated Penetration Testing Reporting System

Malware Analysis – djvu – e8b5ced1c7421ee80a25afe48e816a08

Malware Analysis – ransomware – b4447fd459e4d3f8c74d0dd61b363f35

Malware Analysis – ransomware – caffd0c766788c61986d86fd2e608d81

Malware Analysis – discovery – fba93d8d029e85e0cde3759b7903cee2

Malware Analysis – djvu – a9bac1dee06b3257cab19cb09bef3d1c

Cobalt Strike Beacon Detected – 38[.]173[.]19[.]175:8731

Cobalt Strike Beacon Detected – 8[.]219[.]76[.]168:443

Cobalt Strike Beacon Detected – 39[.]104[.]78[.]25:8443

Cobalt Strike Beacon Detected – 8[.]147[.]128[.]54:443

Cobalt Strike Beacon Detected – 43[.]138[.]30[.]109:9999

You may have missed