Security

Malware Analysis – djvu – b5b10439e00ff5bba11ffa1f9ca79cfa

December 18, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: b5b10439e00ff5bba11ffa1f9ca79cfaSHA1: 296aaee3553e4a4f25ec7a91979477c4a1df0981ANALYSIS DATE: 2022-12-17T21:47:40ZTTPS: T1060, T1112, T1222, T1082, T1005, T1081,...

Malware Analysis – djvu – ae433782ad5f0d406ed1e834b619db49

December 18, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: ae433782ad5f0d406ed1e834b619db49SHA1: 6a68cd89d719203eafa3abb3c1aa5cadde20a23bANALYSIS DATE: 2022-12-17T22:03:41ZTTPS: T1053, T1005, T1081, T1012, T1082, T1222,...

Samba addressed multiple high-severity vulnerabilities

December 17, 2022

Samba released updates to address multiple vulnerabilities that can be exploited to take control of impacted systems. Samba released updates...

Digital Binary Code on Dark Red Background. Data Breach

Gemini – 5,274,214 breached accounts

December 17, 2022

In late 2022, data allegedly taken from the Gemini crypto exchange was posted to a public hacking forum. The data...

Cobalt Stike Beacon Detected – 77[.]73[.]134[.]23:10443

December 17, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 47[.]98[.]221[.]192:666

December 17, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 138[.]197[.]0[.]238:443

December 17, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 20[.]204[.]47[.]86:80

December 17, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – 246ada05d6ce992e7db8c2fc65df33f3

December 17, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 246ada05d6ce992e7db8c2fc65df33f3SHA1: 91fe33f8825cc735717a0faa13a5902fd6d40bafANALYSIS DATE: 2022-12-17T09:20:24ZTTPS: T1005, T1081, T1060, T1112, T1222, T1082,...

Malware Analysis – danabot – 50795361db9455af2f85372f3cfe0a47

December 17, 2022

Score: 10 MALWARE FAMILY: danabotTAGS:family:danabot, family:djvu, family:raccoon, family:redline, family:smokeloader, botnet:ec7a54fb6492ff3a52d09504b8ecf082, botnet:mario23_10, backdoor, banker, bootkit, collection, discovery, infostealer, persistence, ransomware, spyware,...

Malware Analysis – danabot – 78198165b3be4f33987cf5601a5b6276

December 17, 2022

Malware Analysis – djvu – 18f2a906eb2220e2b4ea8dfbebc2609e

December 17, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:raccoon, family:redline, family:smokeloader, botnet:ec7a54fb6492ff3a52d09504b8ecf082, botnet:mario23_10, backdoor, bootkit, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5:...

Malware Analysis – danabot – 5c6352790c02dc6c8de1cdf48a1d9759

December 17, 2022

Malware Analysis – djvu – 84ddcfcb55c1aa1dfdce65c841fd3193

December 17, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 84ddcfcb55c1aa1dfdce65c841fd3193SHA1: c88b590c9b54f72148143a68c09906ad93aa5904ANALYSIS DATE: 2022-12-17T11:42:22ZTTPS: T1005, T1081, T1222, T1053, T1012, T1082,...

Malware Analysis – danabot – 2141c84aab4a7591fb50e4fd24a9c2a7

December 17, 2022

Malware Analysis – djvu – 33db41f0457efcefc1bb8a720c36cf58

December 17, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 33db41f0457efcefc1bb8a720c36cf58SHA1: 59f2568b418dfdd066a8a8236d8efb568d02a750ANALYSIS DATE: 2022-12-17T04:30:07ZTTPS: T1082, T1053, T1012, T1005, T1081, T1222,...

Security

Malware Analysis – djvu – b5b10439e00ff5bba11ffa1f9ca79cfa

Malware Analysis – djvu – ae433782ad5f0d406ed1e834b619db49

Samba addressed multiple high-severity vulnerabilities

Gemini – 5,274,214 breached accounts

Cobalt Stike Beacon Detected – 77[.]73[.]134[.]23:10443

Cobalt Stike Beacon Detected – 47[.]98[.]221[.]192:666

Cobalt Stike Beacon Detected – 138[.]197[.]0[.]238:443

Cobalt Stike Beacon Detected – 20[.]204[.]47[.]86:80

Malware Analysis – djvu – 246ada05d6ce992e7db8c2fc65df33f3

Malware Analysis – danabot – 50795361db9455af2f85372f3cfe0a47

Malware Analysis – danabot – 78198165b3be4f33987cf5601a5b6276

Malware Analysis – djvu – 18f2a906eb2220e2b4ea8dfbebc2609e

Malware Analysis – danabot – 5c6352790c02dc6c8de1cdf48a1d9759

Malware Analysis – djvu – 84ddcfcb55c1aa1dfdce65c841fd3193

Malware Analysis – danabot – 2141c84aab4a7591fb50e4fd24a9c2a7

Malware Analysis – djvu – 33db41f0457efcefc1bb8a720c36cf58

Cobalt Stike Beacon Detected – 113[.]31[.]126[.]45:8099

Cobalt Stike Beacon Detected – 101[.]43[.]108[.]171:8080

Cobalt Stike Beacon Detected – 121[.]199[.]0[.]54:8080

Cobalt Stike Beacon Detected – 77[.]73[.]134[.]23:8443

Cobalt Stike Beacon Detected – 192[.]3[.]231[.]208:8080

Cobalt Stike Beacon Detected – 77[.]73[.]134[.]23:443

Cobalt Stike Beacon Detected – 85[.]209[.]135[.]73:443

Cobalt Stike Beacon Detected – 195[.]133[.]53[.]186:8080

Cobalt Strike Beacon Detected – 49[.]233[.]32[.]31:9443

Cobalt Strike Beacon Detected – 103[.]171[.]35[.]26:9443

Cobalt Strike Beacon Detected – 45[.]141[.]233[.]66:8080

Cobalt Strike Beacon Detected – 8[.]216[.]80[.]229:9443

Cobalt Strike Beacon Detected – 193[.]112[.]83[.]36:8080

You may have missed