Security

Malware Analysis – evasion – 9ee884d1d2f17ef13b510a032114bb6a

January 13, 2023

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 9ee884d1d2f17ef13b510a032114bb6aSHA1: 26b0bf7ec28ac885326075aa57ef598c16e47dc9ANALYSIS DATE: 2023-01-12T23:40:50ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – globeimposter – c99e32fb49a2671a6136535c6537c4d7

January 13, 2023

Score: 10 MALWARE FAMILY: globeimposterTAGS:family:globeimposter, persistence, ransomware, spyware, stealerMD5: c99e32fb49a2671a6136535c6537c4d7SHA1: ada9bcb3da63e7b989b279fb6c3bc9fe7ff7b41fANALYSIS DATE: 2023-01-12T23:37:11ZTTPS: T1112, T1107, T1490, T1158, T1060, T1082, T1005,...

Posh C2 Detected – 94[.]130[.]106[.]165:443

January 13, 2023

The Information provided at the time of posting was detected as "Posh C2". Depending on when you are viewing this...

CISA: CISA Releases Twelve Industrial Control Systems Advisories

January 12, 2023

CISA Releases Twelve Industrial Control Systems Advisories CISA released twelve Industrial Control Systems (ICS) advisories on January 12, 2023. These...

CISA: Drupal Releases Security Update to Address Vulnerability in Private Taxonomy Terms

January 12, 2023

Drupal Releases Security Update to Address Vulnerability in Private Taxonomy Terms Drupal has released a security update to address a...

Cobalt Stike Beacon Detected – 101[.]43[.]109[.]197:443

January 12, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 3[.]110[.]152[.]25:443

January 12, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

KRIe – Linux Kernel Runtime Integrity With eBPF

January 12, 2023

KRIe is a research project that aims to detect Linux Kernel exploits with eBPF. KRIe is far from being a...

Cobalt Stike Beacon Detected – 43[.]143[.]45[.]237:81

January 12, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 13[.]211[.]122[.]16:80

January 12, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 119[.]29[.]1[.]212:9088

January 12, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – smokeloader – 7a806996e4de228c9b3e60b9de5c4640

January 12, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 7a806996e4de228c9b3e60b9de5c4640SHA1: 8ba775b47660510c4ba37b45ef7407cec9f9cb46ANALYSIS DATE: 2023-01-12T09:56:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – evasion – 1e288142a45ebe7244ab899798cea643

January 12, 2023

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 1e288142a45ebe7244ab899798cea643SHA1: 078295d1cda8319ed69f64b5443e4d89705d8523ANALYSIS DATE: 2023-01-12T09:04:04ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – evasion – fefd16276a420a89681e28fffefd0b4a

January 12, 2023

Score: 6 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: fefd16276a420a89681e28fffefd0b4aSHA1: 7cb58f1143acd578a4085d36d1462b0465e64f6aANALYSIS DATE: 2023-01-12T09:12:11ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Cobalt Stike Beacon Detected – 3[.]85[.]177[.]52:443

January 12, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – e2f5aa85d03fb41ad591e198090eb8e8

January 12, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: e2f5aa85d03fb41ad591e198090eb8e8SHA1: 58834f285e6e8d58444cb6b766216508757c3e0aANALYSIS DATE: 2023-01-12T09:41:51ZTTPS: T1060, T1112, T1082, T1005,...

Malware Analysis – discovery – f69d9c918a8ad06c71d7f0f26ccfee12

January 12, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: f69d9c918a8ad06c71d7f0f26ccfee12SHA1: b3a7db5d394149862db9ae23682a745b1cdea128ANALYSIS DATE: 2023-01-12T10:19:25ZTTPS: T1012, T1120, T1082, T1060, T1112 ScoreMeaningExample10Known badA malware family...

Malware Analysis – darkcomet – 19c677bb8cda5703f42c143bb4251e6a

January 12, 2023

Score: 10 MALWARE FAMILY: darkcometTAGS:family:darkcomet, family:njrat, family:xmrig, discovery, evasion, miner, persistence, ransomware, rat, spyware, stealer, trojan, upxMD5: 19c677bb8cda5703f42c143bb4251e6aSHA1: ad85336a7304a4e58b2a4f5c40b02f578aa00923ANALYSIS DATE:...

Malware Analysis – ransomware – e87af2137d80d0bc082fe0f103f47166

January 12, 2023

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: e87af2137d80d0bc082fe0f103f47166SHA1: 101f67e9078e4774bb38da6775f08a3cafd20843ANALYSIS DATE: 2023-01-12T10:09:47ZTTPS: T1012, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – aurora – 997678fdecbe60806da2112650e431ec

January 12, 2023

Score: 10 MALWARE FAMILY: auroraTAGS:family:aurora, family:dcrat, family:djvu, family:purecrypter, family:smokeloader, family:vidar, botnet:19, backdoor, collection, discovery, infostealer, loader, persistence, ransomware, rat, spyware,...

Malware Analysis – djvu – 8c5063d3ef8df921393f4fc163cc5e87

January 12, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 8c5063d3ef8df921393f4fc163cc5e87SHA1: ff5fb168cf01f2734c612ddcc354223780b5a6b6ANALYSIS DATE: 2023-01-12T11:09:11ZTTPS: T1005, T1081, T1060, T1112,...

Malware Analysis – smokeloader – b4be08f67e4b5fed600bf5558b119168

January 12, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: b4be08f67e4b5fed600bf5558b119168SHA1: 1085a0382315e70dcf742419ed281516d5c9bfd5ANALYSIS DATE: 2023-01-12T10:51:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – b4346008df789fb0b428f3088c3290f5

January 12, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: b4346008df789fb0b428f3088c3290f5SHA1: 186b35c2d08c9250b3a0124dcd43c178a44cc3a5ANALYSIS DATE: 2023-01-12T11:11:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – revengerat – ddfdcc11a3e4a5dd265442a5bcea9fcf

January 12, 2023

Score: 10 MALWARE FAMILY: revengeratTAGS:family:revengerat, family:xmrig, discovery, evasion, miner, persistence, ransomware, spyware, stealer, trojanMD5: ddfdcc11a3e4a5dd265442a5bcea9fcfSHA1: a98cf41fb793d5c23bef6baac5c5848233c6ff41ANALYSIS DATE: 2023-01-12T11:05:34ZTTPS: T1031, T1064,...

Security

Malware Analysis – evasion – 9ee884d1d2f17ef13b510a032114bb6a

Malware Analysis – globeimposter – c99e32fb49a2671a6136535c6537c4d7

Posh C2 Detected – 94[.]130[.]106[.]165:443

CISA: CISA Releases Twelve Industrial Control Systems Advisories

CISA: Drupal Releases Security Update to Address Vulnerability in Private Taxonomy Terms

Cobalt Stike Beacon Detected – 101[.]43[.]109[.]197:443

Cobalt Stike Beacon Detected – 3[.]110[.]152[.]25:443

KRIe – Linux Kernel Runtime Integrity With eBPF

Cobalt Stike Beacon Detected – 43[.]143[.]45[.]237:81

Cobalt Stike Beacon Detected – 13[.]211[.]122[.]16:80

Cobalt Stike Beacon Detected – 119[.]29[.]1[.]212:9088

Malware Analysis – smokeloader – 7a806996e4de228c9b3e60b9de5c4640

Malware Analysis – evasion – 1e288142a45ebe7244ab899798cea643

Malware Analysis – evasion – fefd16276a420a89681e28fffefd0b4a

Cobalt Stike Beacon Detected – 3[.]85[.]177[.]52:443

Malware Analysis – djvu – e2f5aa85d03fb41ad591e198090eb8e8

Malware Analysis – discovery – f69d9c918a8ad06c71d7f0f26ccfee12

Malware Analysis – darkcomet – 19c677bb8cda5703f42c143bb4251e6a

Malware Analysis – ransomware – e87af2137d80d0bc082fe0f103f47166

Malware Analysis – aurora – 997678fdecbe60806da2112650e431ec

Malware Analysis – djvu – 8c5063d3ef8df921393f4fc163cc5e87

Malware Analysis – smokeloader – b4be08f67e4b5fed600bf5558b119168

Malware Analysis – smokeloader – b4346008df789fb0b428f3088c3290f5

Malware Analysis – revengerat – ddfdcc11a3e4a5dd265442a5bcea9fcf

CVE Alert: CVE-2025-12161 – burhandodhy – Smart Auto Upload Images – Import External Images

CVE Alert: CVE-2025-11452 – asgaros – Asgaros Forum

China Uses Mars Orbiter To Snap Interstellar Comet 3i/atlas

[DRAGONFORCE] – Ransomware Victim: GB Mail

[AKIRA] – Ransomware Victim: Mold In Graphic Systems

You may have missed