Security

Malware Analysis – djvu – a9bac1dee06b3257cab19cb09bef3d1c

January 17, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: a9bac1dee06b3257cab19cb09bef3d1cSHA1: 2be37ca987a82592dde5e01293266a6a26e7892cANALYSIS DATE: 2023-01-17T16:47:09ZTTPS: T1082, T1005, T1081, T1012,...

Cobalt Stike Beacon Detected – 45[.]128[.]211[.]137:8080

January 17, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 179[.]43[.]156[.]146:443

January 17, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 103[.]187[.]168[.]153:443

January 17, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 85[.]239[.]54[.]14:443

January 17, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 60[.]249[.]20[.]183:9000

January 17, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 52[.]18[.]131[.]129:443

January 17, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 91[.]213[.]50[.]35:80

January 17, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 84[.]32[.]131[.]35:80

January 17, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Posh C2 Detected – 45[.]87[.]43[.]114:443

January 17, 2023

The Information provided at the time of posting was detected as "Posh C2". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 47[.]99[.]62[.]199:8888

January 17, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 20[.]253[.]66[.]206:80

January 17, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 124[.]222[.]105[.]70:6789

January 17, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 47[.]106[.]193[.]75:7777

January 17, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 198[.]98[.]50[.]31:443

January 17, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 38[.]47[.]100[.]176:8099

January 17, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 3[.]114[.]28[.]125:443

January 17, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – bootkit – d2f9b86aded4ecd4b309d460d5ded850

January 17, 2023

Score: 10 MALWARE FAMILY: bootkitTAGS:bootkit, discovery, evasion, persistence, ransomware, trojanMD5: d2f9b86aded4ecd4b309d460d5ded850SHA1: 5d1d8f05d6bdc025f4edac3db52873779b8975a2ANALYSIS DATE: 2023-01-16T22:31:14ZTTPS: T1012, T1497, T1082, T1060, T1112, T1031,...

Malware Analysis – djvu – 55602580c3b839262b5c51c02c784e33

January 17, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 55602580c3b839262b5c51c02c784e33SHA1: 1ca65ac61268be63416abe9034681f368fbf59eeANALYSIS DATE: 2023-01-16T23:11:51ZTTPS: T1012, T1082, T1005, T1081,...

Malware Analysis – djvu – d53ebb314c2c89b7057c4449b8356314

January 17, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: d53ebb314c2c89b7057c4449b8356314SHA1: c7daac2a127bc9672ca5fca6bd0177838e7b561eANALYSIS DATE: 2023-01-16T22:28:06ZTTPS: T1130, T1112, T1012, T1005,...

Malware Analysis – djvu – f0ed4abc044e5d3d555b9a7a567c3f68

January 17, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, stealerMD5: f0ed4abc044e5d3d555b9a7a567c3f68SHA1: 6cfc80ce713f433b764189611195df7ed2fa3d77ANALYSIS DATE: 2023-01-16T22:05:53ZTTPS: T1222, T1082, T1130, T1112, T1060...

Security

Malware Analysis – djvu – a9bac1dee06b3257cab19cb09bef3d1c

Cobalt Stike Beacon Detected – 45[.]128[.]211[.]137:8080

Cobalt Stike Beacon Detected – 179[.]43[.]156[.]146:443

Cobalt Stike Beacon Detected – 103[.]187[.]168[.]153:443

Cobalt Stike Beacon Detected – 85[.]239[.]54[.]14:443

Cobalt Stike Beacon Detected – 60[.]249[.]20[.]183:9000

Cobalt Stike Beacon Detected – 52[.]18[.]131[.]129:443

Cobalt Stike Beacon Detected – 91[.]213[.]50[.]35:80

Cobalt Stike Beacon Detected – 84[.]32[.]131[.]35:80

Posh C2 Detected – 45[.]87[.]43[.]114:443

Cobalt Stike Beacon Detected – 47[.]99[.]62[.]199:8888

Cobalt Stike Beacon Detected – 20[.]253[.]66[.]206:80

Cobalt Stike Beacon Detected – 124[.]222[.]105[.]70:6789

Cobalt Stike Beacon Detected – 47[.]106[.]193[.]75:7777

Cobalt Stike Beacon Detected – 198[.]98[.]50[.]31:443

Cobalt Stike Beacon Detected – 38[.]47[.]100[.]176:8099

Cobalt Stike Beacon Detected – 3[.]114[.]28[.]125:443

Malware Analysis – bootkit – d2f9b86aded4ecd4b309d460d5ded850

Malware Analysis – djvu – 55602580c3b839262b5c51c02c784e33

Malware Analysis – djvu – d53ebb314c2c89b7057c4449b8356314

Malware Analysis – djvu – f0ed4abc044e5d3d555b9a7a567c3f68

LATMA – Lateral Movement Analyzer Tool

Cobalt Stike Beacon Detected – 84[.]32[.]131[.]35:443

Cobalt Stike Beacon Detected – 1[.]116[.]132[.]251:81

Cobalt Strike Beacon Detected – 38[.]173[.]19[.]175:8731

Cobalt Strike Beacon Detected – 8[.]219[.]76[.]168:443

Cobalt Strike Beacon Detected – 39[.]104[.]78[.]25:8443

Cobalt Strike Beacon Detected – 8[.]147[.]128[.]54:443

Cobalt Strike Beacon Detected – 43[.]138[.]30[.]109:9999

You may have missed