Security

Malware Analysis – djvu – 72b2a065abf168e59664b44decd2ef35

December 19, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 72b2a065abf168e59664b44decd2ef35SHA1: d160b6d3e25af6517a3bf689aabb7b5cbc2a128cANALYSIS DATE: 2022-12-18T23:18:24ZTTPS: T1005, T1081, T1012, T1082, T1053, T1060,...

Malware Analysis – – f7cfde09766f705aa7717231944be39f

December 19, 2022

Score: 8 MALWARE FAMILY: TAGS:MD5: f7cfde09766f705aa7717231944be39fSHA1: 0600a2b770ef58d04d1697f5de02393ce7f9511bANALYSIS DATE: 2022-12-18T22:09:09ZTTPS: T1082, T1012, T1120 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – discovery – 713ffacc6fedcfb758c95ae0a6e8cffc

December 19, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, evasion, persistence, ransomwareMD5: 713ffacc6fedcfb758c95ae0a6e8cffcSHA1: 700cb7f2233537cb59d7dcb9908533a64c9bbdedANALYSIS DATE: 2022-12-18T22:01:28ZTTPS: T1018, T1060, T1112, T1107, T1490, T1070, T1082, T1222,...

Malware Analysis – djvu – e042f4ff059f6cc2d7ff9b7264ab0ac6

December 19, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: e042f4ff059f6cc2d7ff9b7264ab0ac6SHA1: 92c04e46499feea5044ec106befa6860ed69bfdbANALYSIS DATE: 2022-12-18T21:52:17ZTTPS: T1053, T1005, T1081, T1082, T1012, T1060,...

Security Affairs newsletter Round 398 by Pierluigi Paganini

December 18, 2022

A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs free for...

Google announced end-to-end encryption for Gmail web

December 18, 2022

Google introduces end-to-end encryption for Gmail web to its Workspace and education customers to protect emails sent using the web...

laZzzy – Shellcode Loader, Developed Using Different Open-Source Libraries, That Demonstrates Different Execution Techniques

December 18, 2022

laZzzy is a shellcode loader that demonstrates different execution ClickOnce Publishing Python3 and the required modules: python3 -m pip install...

Cobalt Stike Beacon Detected – 198[.]98[.]55[.]58:443

December 18, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 35[.]92[.]32[.]1:8086

December 18, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 195[.]189[.]96[.]208:443

December 18, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 179[.]43[.]142[.]137:80

December 18, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 103[.]234[.]72[.]142:86

December 18, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 116[.]62[.]207[.]46:80

December 18, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 84[.]32[.]191[.]131:443

December 18, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – c10db6b82a25aea13403618169daf2b4

December 18, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: c10db6b82a25aea13403618169daf2b4SHA1: e6079184cec5366be1d581b8b8cfe26e786c2da6ANALYSIS DATE: 2022-12-18T09:11:50ZTTPS: T1012, T1082, T1053, T1005, T1081, T1222,...

Malware Analysis – djvu – 7f1463076388a2f31943ecbf984b82ad

December 18, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 7f1463076388a2f31943ecbf984b82adSHA1: 912091744c8083ace3d8ccc8f941d1ee857af913ANALYSIS DATE: 2022-12-18T09:33:09ZTTPS: T1012, T1222, T1082, T1053, T1005, T1081,...

Malware Analysis – discovery – d02471d0ef2001a21b2d77ac7604cfa1

December 18, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: d02471d0ef2001a21b2d77ac7604cfa1SHA1: 955db6ba1a2c8058be9240ee2c7ad8e83d38a2deANALYSIS DATE: 2022-12-18T10:04:40ZTTPS: T1082, T1112, T1042, T1060, T1012 ScoreMeaningExample10Known badA malware family...

Malware Analysis – djvu – 1f251fecef351df9530bb76b5044e2d3

December 18, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 1f251fecef351df9530bb76b5044e2d3SHA1: 92436cc6ac90ad654da9218a948cd39e639a549eANALYSIS DATE: 2022-12-18T11:33:44ZTTPS: T1012, T1082, T1005, T1081, T1060, T1112,...

Malware Analysis – chaos – dd6b2c4c8aa41639409f24413a3c5879

December 18, 2022

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, evasion, ransomware, spyware, stealerMD5: dd6b2c4c8aa41639409f24413a3c5879SHA1: 4ae29959377d36544a7207c5a140bfff56c7fb82ANALYSIS DATE: 2022-12-18T11:58:03ZTTPS: T1490, T1059, T1107, T1082, T1491, T1112, T1005,...

Fire and rescue service in Victoria, Australia, confirms cyber attack

December 18, 2022

The fire and rescue service in the state of Victoria, Australia, has shut down its network and turned to operating...

Cobalt Stike Beacon Detected – 104[.]131[.]4[.]250:443

December 18, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 58[.]64[.]193[.]172:4443

December 18, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – b5b10439e00ff5bba11ffa1f9ca79cfa

December 18, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: b5b10439e00ff5bba11ffa1f9ca79cfaSHA1: 296aaee3553e4a4f25ec7a91979477c4a1df0981ANALYSIS DATE: 2022-12-17T21:47:40ZTTPS: T1060, T1112, T1222, T1082, T1005, T1081,...

Malware Analysis – djvu – ae433782ad5f0d406ed1e834b619db49

December 18, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: ae433782ad5f0d406ed1e834b619db49SHA1: 6a68cd89d719203eafa3abb3c1aa5cadde20a23bANALYSIS DATE: 2022-12-17T22:03:41ZTTPS: T1053, T1005, T1081, T1012, T1082, T1222,...

Security

Malware Analysis – djvu – 72b2a065abf168e59664b44decd2ef35

Malware Analysis – – f7cfde09766f705aa7717231944be39f

Malware Analysis – discovery – 713ffacc6fedcfb758c95ae0a6e8cffc

Malware Analysis – djvu – e042f4ff059f6cc2d7ff9b7264ab0ac6

Security Affairs newsletter Round 398 by Pierluigi Paganini

Google announced end-to-end encryption for Gmail web

laZzzy – Shellcode Loader, Developed Using Different Open-Source Libraries, That Demonstrates Different Execution Techniques

Cobalt Stike Beacon Detected – 198[.]98[.]55[.]58:443

Cobalt Stike Beacon Detected – 35[.]92[.]32[.]1:8086

Cobalt Stike Beacon Detected – 195[.]189[.]96[.]208:443

Cobalt Stike Beacon Detected – 179[.]43[.]142[.]137:80

Cobalt Stike Beacon Detected – 103[.]234[.]72[.]142:86

Cobalt Stike Beacon Detected – 116[.]62[.]207[.]46:80

Cobalt Stike Beacon Detected – 84[.]32[.]191[.]131:443

Malware Analysis – djvu – c10db6b82a25aea13403618169daf2b4

Malware Analysis – djvu – 7f1463076388a2f31943ecbf984b82ad

Malware Analysis – discovery – d02471d0ef2001a21b2d77ac7604cfa1

Malware Analysis – djvu – 1f251fecef351df9530bb76b5044e2d3

Malware Analysis – chaos – dd6b2c4c8aa41639409f24413a3c5879

Fire and rescue service in Victoria, Australia, confirms cyber attack

Cobalt Stike Beacon Detected – 104[.]131[.]4[.]250:443

Cobalt Stike Beacon Detected – 58[.]64[.]193[.]172:4443

Malware Analysis – djvu – b5b10439e00ff5bba11ffa1f9ca79cfa

Malware Analysis – djvu – ae433782ad5f0d406ed1e834b619db49

CVE Alert: CVE-2025-12399 – alexreservations – Alex Reservations: Smart Restaurant Booking

CVE Alert: CVE-2025-12099 – academylms – Academy LMS – WordPress LMS Plugin for Complete eLearning Solution

CVE Alert: CVE-2025-9334 – codesolz – Better Find and Replace – AI-Powered Suggestions

CVE Alert: CVE-2025-11967 – getwpfunnels – Mail Mint – Newsletters, Email Marketing, Automation, WooCommerce Emails, Post Notification, and more

[DRAGONFORCE] – Ransomware Victim: DCS TECHNOLOGIES INC[.]

You may have missed