threatintel

Malware Analysis – djvu – 274168c05bfc3c620cf376b712e80fc5

January 21, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 274168c05bfc3c620cf376b712e80fc5SHA1: 0406d8a5dc4c3006a3f12c8c1e5e80bcf813baeaANALYSIS DATE: 2023-01-20T22:10:48ZTTPS: T1012, T1082, T1060, T1112,...

Malware Analysis – ransomware – e442f142b98aaa8d318d590565ec78af

January 21, 2023

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: e442f142b98aaa8d318d590565ec78afSHA1: 1c419957108e356ab8ad834e1fd5e79f847c4a31ANALYSIS DATE: 2023-01-20T22:36:03ZTTPS: T1005, T1081 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – djvu – 832e24b46741fb33e811fdd3212f364e

January 21, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 832e24b46741fb33e811fdd3212f364eSHA1: b718d24c06c9e91ab49be33b71fd5b82ffaf08e8ANALYSIS DATE: 2023-01-20T23:30:50ZTTPS: T1060, T1112, T1053, T1005,...

CISA: Drupal Releases Security Advisories to Address Multiple Vulnerabilities

January 21, 2023

Drupal Releases Security Advisories to Address Multiple Vulnerabilities Drupal has released security advisories to address vulnerabilities affecting multiple products. An...

Malware Analysis – djvu – 8d2cbb933bfe4cbbea3eed86095c59a4

January 21, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 8d2cbb933bfe4cbbea3eed86095c59a4SHA1: 0381cd29a98baa8bcb12e8b3dbc72cba96363b00ANALYSIS DATE: 2023-01-20T23:51:03ZTTPS: T1060, T1112, T1005, T1081,...

Malware Analysis – evasion – decf384d8c0a2a036abff47331d6ab98

January 21, 2023

Score: 8 MALWARE FAMILY: evasionTAGS:evasion, ransomware, stealth, trojanMD5: decf384d8c0a2a036abff47331d6ab98SHA1: c396327a2332bd6fbc771a97b5e0d4d1a43e8f72ANALYSIS DATE: 2023-01-20T23:48:18ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

CISA: Cisco Releases Security Advisory for Unified CM and Unified CM SME

January 20, 2023

Cisco Releases Security Advisory for Unified CM and Unified CM SME Cisco released a security advisory for a vulnerability affecting...

f99dfb1cc2ee845a855208fbace71f2de16fbd0240cdae24c81ae0be339e84b9

Ghauri – An Advanced Cross-Platform Tool That Automates The Process Of Detecting And Exploiting SQL Injection Security Flaws

January 20, 2023

An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws Requirements Python 3 Python...

Cobalt Stike Beacon Detected – 162[.]14[.]107[.]239:8443

January 20, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 185[.]62[.]58[.]53:443

January 20, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Phishing and ransomware amongst biggest threats to charity sector

January 20, 2023

Phishing and ransomware amongst biggest threats to charity sector A new threat report published today reveals why the charity sector...

Malware Analysis – ransomware – bff3bc6d526bee1844f08894b26c1c92

January 20, 2023

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: bff3bc6d526bee1844f08894b26c1c92SHA1: e703f5d5438d2dc0a06b6110305d21a4db804f9bANALYSIS DATE: 2023-01-20T09:40:04ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – banker – 9023dd6c78bdd6292590523d03c9aac2

January 20, 2023

Score: 8 MALWARE FAMILY: bankerTAGS:banker, evasion, ransomwareMD5: 9023dd6c78bdd6292590523d03c9aac2SHA1: 80dac26829e8ba29d51e37eb9a1ff26a37de949dANALYSIS DATE: 2023-01-20T09:06:27ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – djvu – ae87f11bfca2d4569ba605b0177ceeca

January 20, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: ae87f11bfca2d4569ba605b0177ceecaSHA1: 79f772b8ab8af8771b96fdc72e2409de2064ac03ANALYSIS DATE: 2023-01-20T09:44:54ZTTPS: T1012, T1082, T1005, T1081,...

Cobalt Stike Beacon Detected – 47[.]242[.]63[.]91:443

January 20, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 212[.]113[.]106[.]118:443

January 20, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 3[.]235[.]183[.]165:443

January 20, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 107[.]189[.]13[.]130:80

January 20, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – discovery – 26027b442df7212f436733b85e1a4aa2

January 20, 2023

Score: 9 MALWARE FAMILY: discoveryTAGS:discovery, exploit, persistence, ransomware, upxMD5: 26027b442df7212f436733b85e1a4aa2SHA1: ada45868d8f9f70b7a80f6ea0fcb5b7f347499c9ANALYSIS DATE: 2023-01-20T09:47:08ZTTPS: T1222, T1060, T1082, T1012, T1112, T1491 ScoreMeaningExample10Known...

Malware Analysis – wannacry – 7bf2b57f2a205768755c07f238fb32cc

January 20, 2023

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, ransomware, wormMD5: 7bf2b57f2a205768755c07f238fb32ccSHA1: 45356a9dd616ed7161a3b9192e2f318d0ab5ad10ANALYSIS DATE: 2023-01-20T10:19:02ZTTPS: T1491, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – – 4e68cfad3f3cbef5406c90fd9e9d7931

January 20, 2023

Score: 1 MALWARE FAMILY: TAGS:MD5: 4e68cfad3f3cbef5406c90fd9e9d7931SHA1: 504d53957bbed8e1a612c791eec7abdd17bd15bcANALYSIS DATE: 2023-01-20T10:18:21ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – – 27768c1bd67420c2bda7cd2b3c6b6133

January 20, 2023

Score: 3 MALWARE FAMILY: TAGS:MD5: 27768c1bd67420c2bda7cd2b3c6b6133SHA1: 8a3b0445fdc854c742985ee65976c1b9b4790a1eANALYSIS DATE: 2023-01-20T10:30:07ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – ed4fdb6a9120b4374f34ddb3585a8a7f

January 20, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: ed4fdb6a9120b4374f34ddb3585a8a7fSHA1: a6bb894ef720e4bb28def834cb03f503e7dd86abANALYSIS DATE: 2023-01-20T10:35:29ZTTPS: T1005, T1081, T1060, T1112,...

Malware Analysis – evasion – 831ae99e59ffcf50e5278171903694de

January 20, 2023

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 831ae99e59ffcf50e5278171903694deSHA1: 96ab52cf5c0b40aa10357d644c8eb26b778a0739ANALYSIS DATE: 2023-01-20T11:36:06ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

threatintel

Malware Analysis – djvu – 274168c05bfc3c620cf376b712e80fc5

Malware Analysis – ransomware – e442f142b98aaa8d318d590565ec78af

Malware Analysis – djvu – 832e24b46741fb33e811fdd3212f364e

CISA: Drupal Releases Security Advisories to Address Multiple Vulnerabilities

Malware Analysis – djvu – 8d2cbb933bfe4cbbea3eed86095c59a4

Malware Analysis – evasion – decf384d8c0a2a036abff47331d6ab98

CISA: Cisco Releases Security Advisory for Unified CM and Unified CM SME

Ghauri – An Advanced Cross-Platform Tool That Automates The Process Of Detecting And Exploiting SQL Injection Security Flaws

Cobalt Stike Beacon Detected – 162[.]14[.]107[.]239:8443

Cobalt Stike Beacon Detected – 185[.]62[.]58[.]53:443

Phishing and ransomware amongst biggest threats to charity sector

Malware Analysis – ransomware – bff3bc6d526bee1844f08894b26c1c92

Malware Analysis – banker – 9023dd6c78bdd6292590523d03c9aac2

Malware Analysis – djvu – ae87f11bfca2d4569ba605b0177ceeca

Cobalt Stike Beacon Detected – 47[.]242[.]63[.]91:443

Cobalt Stike Beacon Detected – 212[.]113[.]106[.]118:443

Cobalt Stike Beacon Detected – 3[.]235[.]183[.]165:443

Cobalt Stike Beacon Detected – 107[.]189[.]13[.]130:80

Malware Analysis – discovery – 26027b442df7212f436733b85e1a4aa2

Malware Analysis – wannacry – 7bf2b57f2a205768755c07f238fb32cc

Malware Analysis – – 4e68cfad3f3cbef5406c90fd9e9d7931

Malware Analysis – – 27768c1bd67420c2bda7cd2b3c6b6133

Malware Analysis – djvu – ed4fdb6a9120b4374f34ddb3585a8a7f

Malware Analysis – evasion – 831ae99e59ffcf50e5278171903694de

[KAWA4096] – Ransomware Victim: tokiomarine-nichido[.]co[.]jp

[KAWA4096] – Ransomware Victim: www[.]ogr-jp[.]com

[QILIN] – Ransomware Victim: exhibits-intl[.]com

CVE Alert: CVE-2024-12915

CVE Alert: CVE-2025-2895

You may have missed