Security

Malware Analysis – djvu – ea2bdaaa07f55f051854169dd7935030

December 13, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: ea2bdaaa07f55f051854169dd7935030SHA1: e3394bb238bdeaada0e336599252e32845a2c24cANALYSIS DATE: 2022-12-13T16:55:24ZTTPS: T1222, T1082, T1012, T1005, T1081, T1060,...

Malware Analysis – smokeloader – 26bf0c1ccea1c8d9ee1c58a38ff11043

December 13, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 26bf0c1ccea1c8d9ee1c58a38ff11043SHA1: 1b17db6ed46ac1070ff83ab97249a8653f99b2d7ANALYSIS DATE: 2022-12-13T17:00:26ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – amadey – 40a81f8f9222d7a3ecee4f41dd5af21e

December 13, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:raccoon, family:redline, family:smokeloader, botnet:amddriveer1.2.3, botnet:ec7a54fb6492ff3a52d09504b8ecf082, botnet:sila, backdoor, bootkit, collection, discovery, infostealer, persistence, ransomware, spyware,...

Malware Analysis – smokeloader – 136bcc886a63253f4436f314c6c34fd1

December 13, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 136bcc886a63253f4436f314c6c34fd1SHA1: 4f549c93d6ca139e3210f8f2895303f4bf7e41d4ANALYSIS DATE: 2022-12-13T17:47:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – persistence – bfa097160d430d91d7d0cdd4497a215b

December 13, 2022

Score: 8 MALWARE FAMILY: persistenceTAGS:persistenceMD5: bfa097160d430d91d7d0cdd4497a215bSHA1: 6f30e19647a3043af7fc34dc68a46d62060c0388ANALYSIS DATE: 2022-12-13T17:58:03ZTTPS: T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

CISA: Citrix Releases Security Updates for Citrix ADC, Citrix Gateway

December 13, 2022

Citrix Releases Security Updates for Citrix ADC, Citrix Gateway Citrix has released security updates to address a critical vulnerability (CVE-2022-27518)...

Experts detailed a previously undetected VMware ESXi backdoor

December 13, 2022

A new Python backdoor is targeting VMware ESXi servers, allowing attackers to take over compromised systems. Juniper Networks researchers spotted...

Codecepticon – .NET Application That Allows You To Obfuscate C#, VBA/VB6 (Macros), And PowerShell Source Code

December 13, 2022

Codecepticon is a .NET application that allows you to obfuscate C#, VBA/VB6 (macros), and The command generator's output format can...

Cobalt Stike Beacon Detected – 120[.]232[.]254[.]134:7788

December 13, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 114[.]116[.]99[.]27:6666

December 13, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 84[.]32[.]190[.]139:80

December 13, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 82[.]157[.]125[.]21:443

December 13, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 121[.]5[.]220[.]7:8866

December 13, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 124[.]223[.]45[.]180:443

December 13, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 193[.]149[.]185[.]101:443

December 13, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 81[.]70[.]163[.]127:7788

December 13, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 103[.]140[.]239[.]38:443

December 13, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 47[.]102[.]120[.]55:8082

December 13, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – dcrat – 59efe0bd2c50024139178837a97d6dab

December 13, 2022

Score: 10 MALWARE FAMILY: dcratTAGS:family:dcrat, family:djvu, family:smokeloader, family:vidar, botnet:1808, backdoor, bootkit, collection, discovery, infostealer, persistence, ransomware, rat, spyware, stealer, trojanMD5:...

Malware Analysis – djvu – a49cee7ee21dbdf1852986bc5720eab6

December 13, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: a49cee7ee21dbdf1852986bc5720eab6SHA1: 10d81ff7a74e9749d553bdf703fa01de5f5096ceANALYSIS DATE: 2022-12-13T09:50:19ZTTPS: T1053, T1005, T1081, T1060, T1112, T1222,...

Malware Analysis – discovery – e0a3af0fd104fb0a011732de579a4b1b

December 13, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, ransomwareMD5: e0a3af0fd104fb0a011732de579a4b1bSHA1: 92f192961a3051301484dc594966f9dc6ecfa463ANALYSIS DATE: 2022-12-13T09:57:06ZTTPS: T1082, T1057, T1012 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – ransomware – 61dcb0666f0080d742a6dad292e0ced0

December 13, 2022

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 61dcb0666f0080d742a6dad292e0ced0SHA1: b3e4bb446cedb71dddffdc9f226f24dc436460c3ANALYSIS DATE: 2022-12-13T09:36:47ZTTPS: T1005, T1081 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Cobalt Stike Beacon Detected – 193[.]106[.]191[.]208:443

December 13, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 159[.]223[.]84[.]28:443

December 13, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Security

Malware Analysis – djvu – ea2bdaaa07f55f051854169dd7935030

Malware Analysis – smokeloader – 26bf0c1ccea1c8d9ee1c58a38ff11043

Malware Analysis – amadey – 40a81f8f9222d7a3ecee4f41dd5af21e

Malware Analysis – smokeloader – 136bcc886a63253f4436f314c6c34fd1

Malware Analysis – persistence – bfa097160d430d91d7d0cdd4497a215b

CISA: Citrix Releases Security Updates for Citrix ADC, Citrix Gateway

Experts detailed a previously undetected VMware ESXi backdoor

Codecepticon – .NET Application That Allows You To Obfuscate C#, VBA/VB6 (Macros), And PowerShell Source Code

Cobalt Stike Beacon Detected – 120[.]232[.]254[.]134:7788

Cobalt Stike Beacon Detected – 114[.]116[.]99[.]27:6666

Cobalt Stike Beacon Detected – 84[.]32[.]190[.]139:80

Cobalt Stike Beacon Detected – 82[.]157[.]125[.]21:443

Cobalt Stike Beacon Detected – 121[.]5[.]220[.]7:8866

Cobalt Stike Beacon Detected – 124[.]223[.]45[.]180:443

Cobalt Stike Beacon Detected – 193[.]149[.]185[.]101:443

Cobalt Stike Beacon Detected – 81[.]70[.]163[.]127:7788

Cobalt Stike Beacon Detected – 103[.]140[.]239[.]38:443

Cobalt Stike Beacon Detected – 47[.]102[.]120[.]55:8082

Malware Analysis – dcrat – 59efe0bd2c50024139178837a97d6dab

Malware Analysis – djvu – a49cee7ee21dbdf1852986bc5720eab6

Malware Analysis – discovery – e0a3af0fd104fb0a011732de579a4b1b

Malware Analysis – ransomware – 61dcb0666f0080d742a6dad292e0ced0

Cobalt Stike Beacon Detected – 193[.]106[.]191[.]208:443

Cobalt Stike Beacon Detected – 159[.]223[.]84[.]28:443

[QILIN] – Ransomware Victim: Ritenour School District

[CICADA3301] – Ransomware Victim: B&M – Expertise – Audit

[AKIRA] – Ransomware Victim: LeasePLUS

[AKIRA] – Ransomware Victim: Polykar

CVE Alert: CVE-2025-23270

You may have missed