threatintel

Malware Analysis – djvu – 531a9b4bfeac99f1a720d28d3af67a07

March 3, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 531a9b4bfeac99f1a720d28d3af67a07SHA1: 3fe02b5bf80e47ca2c180388b0ad5b7efe4952b9ANALYSIS DATE: 2023-03-03T16:30:10ZTTPS: T1012, T1082, T1222, T1005, T1081,...

Malware Analysis – smokeloader – 564957e1c71842e8b0086a521253a9ff

March 3, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 564957e1c71842e8b0086a521253a9ffSHA1: 567c5410c0bc6298eb8e81f39a2d08ef6e18fbcfANALYSIS DATE: 2023-03-03T17:31:06ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 60ace299323eed3a7ac088224e8f0b25

March 3, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 60ace299323eed3a7ac088224e8f0b25SHA1: d38f59c4f01188276303d70f1fc63cef85cbf8d2ANALYSIS DATE: 2023-03-03T17:06:07ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 1f1616df76db10c5a1013abf9641cc58

March 3, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 1f1616df76db10c5a1013abf9641cc58SHA1: 45cb0a4c643dd5f1361577140a0a47daed3c3bd1ANALYSIS DATE: 2023-03-03T16:54:57ZTTPS: T1053, T1012, T1082, T1005, T1081,...

Malware Analysis – djvu – 0faa9e85ea04f86c43e65bb95c4e7879

March 3, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 0faa9e85ea04f86c43e65bb95c4e7879SHA1: a844870ea724f699e8401e2d31641bae3e1c6214ANALYSIS DATE: 2023-03-03T17:10:33ZTTPS: T1082, T1005, T1081, T1012, T1222,...

Chinese Hackers Targeting European Entities with New MQsTTang Backdoor

March 3, 2023

The China-aligned Mustang Panda actor has been observed using a hitherto unseen custom backdoor called MQsTTang as part of an...

New Flaws in TPM 2.0 Library Pose Threat to Billions of IoT and Enterprise Devices

March 3, 2023

A pair of serious security defects has been disclosed in the Trusted Platform Module (TPM) 2.0 reference library specification that...

Cobalt Stike Beacon Detected – 45[.]76[.]175[.]177:80

March 3, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 91[.]215[.]85[.]196:443

March 3, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 124[.]222[.]15[.]3:80

March 3, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 45[.]88[.]170[.]91:5555

March 3, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 185[.]143[.]223[.]120:444

March 3, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 45[.]61[.]186[.]18:443

March 3, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 43[.]142[.]60[.]207:6667

March 3, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 27[.]50[.]54[.]41:80

March 3, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – 478015b7fdf4f18d6b6ecb272e6f4ad9

March 3, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 478015b7fdf4f18d6b6ecb272e6f4ad9SHA1: 4e2ee1c868ac93a4d58a7f3ae9b3cf6f163fd5ebANALYSIS DATE: 2023-03-03T09:51:03ZTTPS: T1012, T1082, T1053, T1005, T1081,...

Malware Analysis – djvu – 9691efea065f013a3c8fbbd087137738

March 3, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, backdoor, discovery, evasion, persistence, ransomware, spyware, stealer, trojanMD5: 9691efea065f013a3c8fbbd087137738SHA1: 88bd29dd09dd17f4e68787b671f911d37a151724ANALYSIS DATE: 2023-03-03T10:10:37ZTTPS: T1012,...

Malware Analysis – djvu – a2722202bf73fcb71dd0a8b986cc6112

March 3, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: a2722202bf73fcb71dd0a8b986cc6112SHA1: 7ab035d081aea8b5ee8947aa1a0fd4ee039c0722ANALYSIS DATE: 2023-03-03T09:37:45ZTTPS: T1053, T1222, T1082, T1005, T1081,...

Cobalt Stike Beacon Detected – 1[.]13[.]165[.]208:2087

March 3, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 64[.]227[.]190[.]71:443

March 3, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 116[.]62[.]138[.]140:801

March 3, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 20[.]212[.]22[.]151:53

March 3, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – 975e10c1763042c45b9778af90d982f0

March 3, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, backdoor, discovery, persistence, ransomware, stealer, trojanMD5: 975e10c1763042c45b9778af90d982f0SHA1: 884493d24b7a814107496b296110bff7e76fa26bANALYSIS DATE: 2023-03-03T11:25:19ZTTPS: T1012, T1120, T1082,...

Malware Analysis – djvu – cc8fd902ee4904d7c29e96ceac1384b1

March 3, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: cc8fd902ee4904d7c29e96ceac1384b1SHA1: 6ba45d26e61a336dec373d1de4a64f89f4fdc2c6ANALYSIS DATE: 2023-03-03T11:03:36ZTTPS: T1082, T1053, T1005, T1081, T1222,...

threatintel

Malware Analysis – djvu – 531a9b4bfeac99f1a720d28d3af67a07

Malware Analysis – smokeloader – 564957e1c71842e8b0086a521253a9ff

Malware Analysis – smokeloader – 60ace299323eed3a7ac088224e8f0b25

Malware Analysis – djvu – 1f1616df76db10c5a1013abf9641cc58

Malware Analysis – djvu – 0faa9e85ea04f86c43e65bb95c4e7879

Chinese Hackers Targeting European Entities with New MQsTTang Backdoor

New Flaws in TPM 2.0 Library Pose Threat to Billions of IoT and Enterprise Devices

Cobalt Stike Beacon Detected – 45[.]76[.]175[.]177:80

Cobalt Stike Beacon Detected – 91[.]215[.]85[.]196:443

Cobalt Stike Beacon Detected – 124[.]222[.]15[.]3:80

Cobalt Stike Beacon Detected – 45[.]88[.]170[.]91:5555

Cobalt Stike Beacon Detected – 185[.]143[.]223[.]120:444

Cobalt Stike Beacon Detected – 45[.]61[.]186[.]18:443

Cobalt Stike Beacon Detected – 43[.]142[.]60[.]207:6667

Cobalt Stike Beacon Detected – 27[.]50[.]54[.]41:80

Malware Analysis – djvu – 478015b7fdf4f18d6b6ecb272e6f4ad9

Malware Analysis – djvu – 9691efea065f013a3c8fbbd087137738

Malware Analysis – djvu – a2722202bf73fcb71dd0a8b986cc6112

Cobalt Stike Beacon Detected – 1[.]13[.]165[.]208:2087

Cobalt Stike Beacon Detected – 64[.]227[.]190[.]71:443

Cobalt Stike Beacon Detected – 116[.]62[.]138[.]140:801

Cobalt Stike Beacon Detected – 20[.]212[.]22[.]151:53

Malware Analysis – djvu – 975e10c1763042c45b9778af90d982f0

Malware Analysis – djvu – cc8fd902ee4904d7c29e96ceac1384b1

BugCrowd Bug Bounty Disclosure: P3 – Publicly Editable Google Docs Linked from NASA SnowEx PPT –

BugCrowd Bug Bounty Disclosure: P3 – Details of the collaboration between NASA and Inmarsat Government and the type of contract –

Apple Products Multiple Vulnerabilities

Miljödata – 870,108 breached accounts

Cobalt Strike Beacon Detected – 119[.]91[.]203[.]199:88

You may have missed