Security

Malware Analysis – djvu – d3d65090cad621234a92329236fb75e6

January 24, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: d3d65090cad621234a92329236fb75e6SHA1: 18d5e6b99a1bb323f2b3ad6c3e8a4c2cb46b650aANALYSIS DATE: 2023-01-24T03:20:48ZTTPS: T1053, T1005, T1081, T1060,...

Malware Analysis – djvu – 9072bbefe62a6289483a541fa22d8d64

January 24, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 9072bbefe62a6289483a541fa22d8d64SHA1: 2ebdf7f18cfcd9827768b6981197832c672e556fANALYSIS DATE: 2023-01-24T05:39:04ZTTPS: T1222, T1060, T1112, T1053,...

Malware Analysis – evasion – 4e775bc9cb9d1e9818208935fbdba509

January 24, 2023

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 4e775bc9cb9d1e9818208935fbdba509SHA1: 7f72d5601ff522fef0dbabebdc01fa4289e5d4bcANALYSIS DATE: 2023-01-24T04:44:45ZTTPS: T1490, T1059, T1107, T1082, T1112, T1053, T1485, T1031,...

Malware Analysis – discovery – 6f19490d77a2076e8779ca5ca82bd454

January 24, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, ransomwareMD5: 6f19490d77a2076e8779ca5ca82bd454SHA1: 9f54708bc313f5863ca8e5cca60f727cb6e29154ANALYSIS DATE: 2023-01-24T04:25:49ZTTPS: T1012, T1130, T1112, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 70fd03a7711ed5316b20dbe3110bd301

January 24, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 70fd03a7711ed5316b20dbe3110bd301SHA1: 60c30f7fc1c491085c0958d51cb7f9cf7ff26fa6ANALYSIS DATE: 2023-01-24T05:40:05ZTTPS: T1060, T1112, T1012, T1082,...

Cobalt Stike Beacon Detected – 216[.]146[.]25[.]20:443

January 24, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 88[.]119[.]175[.]149:9999

January 24, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 167[.]235[.]157[.]186:443

January 24, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 185[.]175[.]156[.]42:443

January 24, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – persistence – 425cbeecc22af1cbd3683702bad47d2b

January 24, 2023

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 425cbeecc22af1cbd3683702bad47d2bSHA1: d9df389bf4f5699414ae265bab820d16c97153f4ANALYSIS DATE: 2023-01-23T21:20:34ZTTPS: T1060, T1130, T1112, T1012, T1082, T1120 ScoreMeaningExample10Known badA malware family...

Malware Analysis – djvu – c93dffef8975b746c23b3dfa89fab68d

January 24, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: c93dffef8975b746c23b3dfa89fab68dSHA1: 526e90755a469488a6fdfc90158d7c23a3f8db94ANALYSIS DATE: 2023-01-23T21:23:26ZTTPS: T1222, T1005, T1081, T1082,...

Malware Analysis – djvu – cc426856236596a24223d23bcb84d8c8

January 24, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: cc426856236596a24223d23bcb84d8c8SHA1: 03c225a58255b94fd7917f304af3a9bc172ee681ANALYSIS DATE: 2023-01-23T21:03:36ZTTPS: T1012, T1082, T1005, T1081,...

Malware Analysis – asyncrat – 8b14bf467df11d832cfbd95c3c2a8ee9

January 24, 2023

Score: 10 MALWARE FAMILY: asyncratTAGS:family:asyncrat, ransomware, ratMD5: 8b14bf467df11d832cfbd95c3c2a8ee9SHA1: 98372efcfe106531e8cd4e3acb5372865f49ee73ANALYSIS DATE: 2023-01-23T23:31:10ZTTPS: T1082, T1012 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – lockbit – 01ccead2e9497ce04ab0c2531320224d

January 24, 2023

Score: 10 MALWARE FAMILY: lockbitTAGS:family:lockbit, discovery, evasion, persistence, ransomware, spyware, stealer, trojanMD5: 01ccead2e9497ce04ab0c2531320224dSHA1: 9b7ebc4d8f97b0e7463a382f3b748a4be48a06a1ANALYSIS DATE: 2023-01-23T21:24:54ZTTPS: T1490, T1059, T1107, T1082,...

Malware Analysis – djvu – 1b2d5ea242f2354691c62b680893df7a

January 24, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 1b2d5ea242f2354691c62b680893df7aSHA1: 77684b9079f760e75bbe3aa31d264150847e5de0ANALYSIS DATE: 2023-01-23T23:00:30ZTTPS: T1012, T1082, T1005, T1081,...

Malware Analysis – ransomware – ddbb68a048aa1dc2d70def4ed51d7f72

January 24, 2023

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: ddbb68a048aa1dc2d70def4ed51d7f72SHA1: 9ecd8e12cf00616b05cdb8103eb44af9bec6ffe2ANALYSIS DATE: 2023-01-23T23:30:19ZTTPS: T1491, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Cobalt Stike Beacon Detected – 45[.]61[.]186[.]9:80

January 23, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 162[.]19[.]155[.]49:80

January 23, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 49[.]232[.]21[.]201:9091

January 23, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 91[.]215[.]85[.]196:80

January 23, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 43[.]159[.]43[.]58:80

January 23, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

743c9339845a954b9f2734d02076d2e92543a9c782acc2552e2f32d8eb3d5264

SQLiDetector – Helps You To Detect SQL Injection “Error Based” By Sending Multiple Requests With 14 Payloads And Checking For 152 Regex Patterns For Different Databases

January 23, 2023

Simple python script supported with BurpBouty profile that helps you to detect SQL injection "Error based" by sending multiple requests...

Cobalt Stike Beacon Detected – 103[.]146[.]158[.]251:443

January 23, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 119[.]29[.]82[.]40:8053

January 23, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Security

Malware Analysis – djvu – d3d65090cad621234a92329236fb75e6

Malware Analysis – djvu – 9072bbefe62a6289483a541fa22d8d64

Malware Analysis – evasion – 4e775bc9cb9d1e9818208935fbdba509

Malware Analysis – discovery – 6f19490d77a2076e8779ca5ca82bd454

Malware Analysis – djvu – 70fd03a7711ed5316b20dbe3110bd301

Cobalt Stike Beacon Detected – 216[.]146[.]25[.]20:443

Cobalt Stike Beacon Detected – 88[.]119[.]175[.]149:9999

Cobalt Stike Beacon Detected – 167[.]235[.]157[.]186:443

Cobalt Stike Beacon Detected – 185[.]175[.]156[.]42:443

Malware Analysis – persistence – 425cbeecc22af1cbd3683702bad47d2b

Malware Analysis – djvu – c93dffef8975b746c23b3dfa89fab68d

Malware Analysis – djvu – cc426856236596a24223d23bcb84d8c8

Malware Analysis – asyncrat – 8b14bf467df11d832cfbd95c3c2a8ee9

Malware Analysis – lockbit – 01ccead2e9497ce04ab0c2531320224d

Malware Analysis – djvu – 1b2d5ea242f2354691c62b680893df7a

Malware Analysis – ransomware – ddbb68a048aa1dc2d70def4ed51d7f72

Cobalt Stike Beacon Detected – 45[.]61[.]186[.]9:80

Cobalt Stike Beacon Detected – 162[.]19[.]155[.]49:80

Cobalt Stike Beacon Detected – 49[.]232[.]21[.]201:9091

Cobalt Stike Beacon Detected – 91[.]215[.]85[.]196:80

Cobalt Stike Beacon Detected – 43[.]159[.]43[.]58:80

SQLiDetector – Helps You To Detect SQL Injection “Error Based” By Sending Multiple Requests With 14 Payloads And Checking For 152 Regex Patterns For Different Databases

Cobalt Stike Beacon Detected – 103[.]146[.]158[.]251:443

Cobalt Stike Beacon Detected – 119[.]29[.]82[.]40:8053

[QILIN] – Ransomware Victim: Village of New Lenox

[QILIN] – Ransomware Victim: Klae Construction

[MEDUSA] – Ransomware Victim: Oscars Group

[QILIN] – Ransomware Victim: Marine Turbine Technologies

[QILIN] – Ransomware Victim: Shollenberger Januzzi & Wolfe

You may have missed