threatintel

Malware Analysis – djvu – 2fa1010fe73edff2ca5ef80a320e06ed

February 24, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 2fa1010fe73edff2ca5ef80a320e06edSHA1: 4438cd0a0298dee7a0313788c0a1d95cb25d409aANALYSIS DATE: 2023-02-24T10:20:58ZTTPS: T1012, T1060, T1112, T1005, T1081,...

Malware Analysis – djvu – 7e81c990211ee023d354c438b620532d

February 24, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, backdoor, discovery, evasion, persistence, ransomware, stealer, trojan, vmprotectMD5: 7e81c990211ee023d354c438b620532dSHA1: b33e485bea1f17d4d2db7377cc5611173a189c80ANALYSIS DATE: 2023-02-24T10:34:05ZTTPS: T1031,...

Cobalt Stike Beacon Detected – 91[.]223[.]236[.]214:8080

February 24, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 121[.]41[.]77[.]84:443

February 24, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 54[.]236[.]49[.]195:80

February 24, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 43[.]139[.]69[.]115:80

February 24, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – 01ea2147d5a7db863126f0efc9634ec2

February 24, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 01ea2147d5a7db863126f0efc9634ec2SHA1: 83c6293c139511cb3ae31d0de56f31e304b12e05ANALYSIS DATE: 2023-02-24T10:59:55ZTTPS: T1082, T1005, T1081, T1012, T1060,...

Malware Analysis – djvu – 9c5fe8ebcc6e8e5bc83495204cee5a24

February 24, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 9c5fe8ebcc6e8e5bc83495204cee5a24SHA1: d7638d5a09338afe1e4f06e0b192f5ce3ea81b23ANALYSIS DATE: 2023-02-24T11:00:38ZTTPS: T1222, T1005, T1081, T1060, T1112,...

Malware Analysis – evasion – e5a50be83e694ec58a71d669870598a5

February 24, 2023

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistenceMD5: e5a50be83e694ec58a71d669870598a5SHA1: 2d7a8a10f6a959491ea61fb9d7c64f6d785276b8ANALYSIS DATE: 2023-02-24T11:34:15ZTTPS: T1082, T1059, T1004, T1112, T1031, T1562, T1489, T1060, T1158, T1018...

Malware Analysis – djvu – d6f05fb0158ec1635196c5fb5c8bfe22

February 24, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, backdoor, discovery, evasion, persistence, ransomware, stealer, themida, trojan, vmprotectMD5: d6f05fb0158ec1635196c5fb5c8bfe22SHA1: 622826d26b9f1d84d9c140e3465656da03f92502ANALYSIS DATE: 2023-02-24T11:01:21ZTTPS:...

Cobalt Stike Beacon Detected – 77[.]91[.]84[.]1:443

February 24, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 121[.]41[.]77[.]84:80

February 24, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 47[.]92[.]114[.]227:80

February 24, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 91[.]238[.]203[.]2:443

February 24, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – discovery – 80c853a84b0a23132d24480635bc3cfc

February 24, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, evasion, exploit, persistence, spyware, stealer, trojan, upxMD5: 80c853a84b0a23132d24480635bc3cfcSHA1: df9e8575bf6fb4d02e2c99dd011a0ebb821e7655ANALYSIS DATE: 2023-02-24T04:06:16ZTTPS: T1112, T1158, T1088, T1089,...

Malware Analysis – djvu – 4f08b1d6af77c1e46a4a2d6772a54603

February 24, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:pseudomanuscrypt, family:smokeloader, family:vidar, backdoor, discovery, evasion, loader, persistence, ransomware, stealer, trojan, vmprotectMD5: 4f08b1d6af77c1e46a4a2d6772a54603SHA1: 37a5215820bc17d217b393aa525f6e0e3aed7e3bANALYSIS DATE:...

Malware Analysis – djvu – 2d2fb85af1c00117bde29de8cd908078

February 24, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 2d2fb85af1c00117bde29de8cd908078SHA1: 44065d147b0fb780fa30c5401ea3c2db1bf95c2dANALYSIS DATE: 2023-02-24T04:14:08ZTTPS: T1005, T1081, T1012, T1082, T1060,...

Malware Analysis – djvu – 2059d89a395fb5589c0b05101da3dce3

February 24, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 2059d89a395fb5589c0b05101da3dce3SHA1: b838e8de99c4c43d313aabe157d7373211583e4bANALYSIS DATE: 2023-02-24T05:35:48ZTTPS: T1012, T1082, T1053, T1005, T1081,...

Malware Analysis – djvu – 3f5e96d48d274e9737d32540b3d7c975

February 24, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 3f5e96d48d274e9737d32540b3d7c975SHA1: 2b8eed58574dac831c67406c366d0038079a43fbANALYSIS DATE: 2023-02-24T05:40:35ZTTPS: T1005, T1081, T1012, T1082, T1053,...

Malware Analysis – djvu – f852f979e8542d2f79065a5f043d9ce5

February 24, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:pseudomanuscrypt, family:smokeloader, family:vidar, backdoor, discovery, evasion, loader, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: f852f979e8542d2f79065a5f043d9ce5SHA1: dd50050d01e5787d200a6a9e171a07c4432005a3ANALYSIS...

Malware Analysis – djvu – f6b0f2801ec290bc14684e2e22a68ba3

February 24, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: f6b0f2801ec290bc14684e2e22a68ba3SHA1: e0d6afd3d8c71482ca14ae2bb7c51f9501353208ANALYSIS DATE: 2023-02-24T04:25:01ZTTPS: T1053, T1005, T1081, T1012, T1082,...

threatintel

Malware Analysis – djvu – 2fa1010fe73edff2ca5ef80a320e06ed

Malware Analysis – djvu – 7e81c990211ee023d354c438b620532d

Cobalt Stike Beacon Detected – 91[.]223[.]236[.]214:8080

Cobalt Stike Beacon Detected – 121[.]41[.]77[.]84:443

Cobalt Stike Beacon Detected – 54[.]236[.]49[.]195:80

Cobalt Stike Beacon Detected – 43[.]139[.]69[.]115:80

Malware Analysis – djvu – 01ea2147d5a7db863126f0efc9634ec2

Malware Analysis – djvu – 9c5fe8ebcc6e8e5bc83495204cee5a24

Malware Analysis – evasion – e5a50be83e694ec58a71d669870598a5

Malware Analysis – djvu – d6f05fb0158ec1635196c5fb5c8bfe22

Cobalt Stike Beacon Detected – 77[.]91[.]84[.]1:443

Cobalt Stike Beacon Detected – 121[.]41[.]77[.]84:80

Cobalt Stike Beacon Detected – 47[.]92[.]114[.]227:80

Cobalt Stike Beacon Detected – 91[.]238[.]203[.]2:443

Malware Analysis – discovery – 80c853a84b0a23132d24480635bc3cfc

Malware Analysis – djvu – 4f08b1d6af77c1e46a4a2d6772a54603

Malware Analysis – djvu – 2d2fb85af1c00117bde29de8cd908078

Malware Analysis – djvu – 2059d89a395fb5589c0b05101da3dce3

Malware Analysis – djvu – 3f5e96d48d274e9737d32540b3d7c975

Malware Analysis – djvu – f852f979e8542d2f79065a5f043d9ce5

Malware Analysis – djvu – f6b0f2801ec290bc14684e2e22a68ba3

Posh C2 Detected – 79[.]51[.]197[.]75:443

Cobalt Stike Beacon Detected – 154[.]92[.]19[.]225:80

Cobalt Stike Beacon Detected – 49[.]0[.]250[.]177:6789

HackerOne Bug Bounty Disclosure: stack-buffer-overflow-in-curl-cookie-parsing-leads-to-rce-batuhanilgarr

BugCrowd Bug Bounty Disclosure: P3 – Publicly Editable Google Docs Linked from NASA SnowEx PPT –

BugCrowd Bug Bounty Disclosure: P3 – Details of the collaboration between NASA and Inmarsat Government and the type of contract –

Apple Products Multiple Vulnerabilities

Miljödata – 870,108 breached accounts

You may have missed