threatintel

Malware Analysis – discovery – 8fc76676f1dc8184f7f20a1aef6baa66

January 15, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: 8fc76676f1dc8184f7f20a1aef6baa66SHA1: 5d8671bf023982bb25fb1cc1e4b77f0cf3ef6019ANALYSIS DATE: 2023-01-15T16:43:44ZTTPS: T1112, T1042, T1060, T1012, T1082 ScoreMeaningExample10Known badA malware family...

Malware Analysis – djvu – 9e1cb6d53dac023bc1d00b41dd40b129

January 15, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 9e1cb6d53dac023bc1d00b41dd40b129SHA1: 61e6f7f37c454872b746cde3d5db3af9ef118c1eANALYSIS DATE: 2023-01-15T17:18:00ZTTPS: T1012, T1082, T1005, T1081,...

Malware Analysis – – 86986763bf7e37e43958ce829f8d28bb

January 15, 2023

Score: 1 MALWARE FAMILY: TAGS:MD5: 86986763bf7e37e43958ce829f8d28bbSHA1: cb8b579fb7f4cc1ec1c0ae4332393c02713afa76ANALYSIS DATE: 2023-01-15T17:40:54ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – 51e46b98e4c12a45cb16ee094737e22a

January 15, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 51e46b98e4c12a45cb16ee094737e22aSHA1: 340165063ae514b0e369b07054b53393b12da48dANALYSIS DATE: 2023-01-15T16:58:39ZTTPS: T1005, T1081, T1012, T1082,...

37c050d7447d6edf46fd8adff99ef7275acb57961cb1b5136cf0715f17090d95

AVIator – Antivirus Evasion Project

January 15, 2023

AviAtor Ported to NETCore 5 with an updated UI AV|Ator About://name AV: AntiVirus Ator: Is a swordsman, alchemist, scientist, magician,...

Cobalt Stike Beacon Detected – 23[.]224[.]39[.]41:8081

January 15, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 199[.]253[.]29[.]85:443

January 15, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

CircleCI’s hack caused by malware stealing engineer’s 2FA-backed session

January 15, 2023

Hackers breached CircleCi in December after an engineer became infected with information-stealing malware that their 2FA-backed SSO session cookie, allowing access...

Canada’s largest alcohol retailer’s site hacked to steal credit cards

January 15, 2023

The Liquor Control Board of Ontario (LCBO), a Canadian government enterprise and the country's largest beverage alcohol retailer, revealed that...

Brave browser’s new Snowflake feature help bypass Tor blocks

January 15, 2023

Brave Browser version 1.47 was released yesterday, adding the Snowflake extension in the software's settings, enabling users to turn their...

Malware Analysis – joker – 1e288142a45ebe7244ab899798cea643

January 15, 2023

Score: 10 MALWARE FAMILY: jokerTAGS:family:joker, evasion, infostealer, ransomware, trojanMD5: 1e288142a45ebe7244ab899798cea643SHA1: 078295d1cda8319ed69f64b5443e4d89705d8523ANALYSIS DATE: 2023-01-15T04:36:48ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – evasion – 80bc920446cda4a8827ada74b0081852

January 15, 2023

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, themida, trojanMD5: 80bc920446cda4a8827ada74b0081852SHA1: 33f93d6744910002ce0d4ba18e035537475c8bbeANALYSIS DATE: 2023-01-15T03:04:53ZTTPS: T1490, T1485, T1082, T1060, T1112, T1012, T1120,...

Malware Analysis – ransomware – b14c45c1792038fd69b5c75e604242a3

January 15, 2023

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealer, upxMD5: b14c45c1792038fd69b5c75e604242a3SHA1: 54ab323053f1138e5ccaa8f8afaa38cabca9491fANALYSIS DATE: 2023-01-15T05:23:14ZTTPS: T1491, T1112, T1005, T1081, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – djvu – cc754c02596df7905eca8894d0202e13

January 15, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: cc754c02596df7905eca8894d0202e13SHA1: 4bb01386cf0fe3f6e5a09d6c070e923663072081ANALYSIS DATE: 2023-01-15T04:47:12ZTTPS: T1012, T1005, T1081, T1082,...

Malware Analysis – djvu – 7b8426b03fdcbe7a132490d08531a789

January 15, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 7b8426b03fdcbe7a132490d08531a789SHA1: fd2adf34c3b2cc9fa8cbb179064a4648a4a1c210ANALYSIS DATE: 2023-01-15T05:55:18ZTTPS: T1060, T1112, T1053, T1012,...

Malware Analysis – wannacry – afbe6bba36be6ad384e6feccab258960

January 15, 2023

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, bootkit, discovery, persistence, ransomware, spyware, stealer, wormMD5: afbe6bba36be6ad384e6feccab258960SHA1: 45c076d83c648f195444799aa2eacaf7dde7392aANALYSIS DATE: 2023-01-15T05:51:47ZTTPS: T1158, T1222, T1012, T1082,...

threatintel

Malware Analysis – discovery – 8fc76676f1dc8184f7f20a1aef6baa66

Malware Analysis – djvu – 9e1cb6d53dac023bc1d00b41dd40b129

Malware Analysis – – 86986763bf7e37e43958ce829f8d28bb

Malware Analysis – djvu – 51e46b98e4c12a45cb16ee094737e22a

AVIator – Antivirus Evasion Project

Cobalt Stike Beacon Detected – 23[.]224[.]39[.]41:8081

Cobalt Stike Beacon Detected – 199[.]253[.]29[.]85:443

CircleCI’s hack caused by malware stealing engineer’s 2FA-backed session

Canada’s largest alcohol retailer’s site hacked to steal credit cards

Brave browser’s new Snowflake feature help bypass Tor blocks

Malware Analysis – joker – 1e288142a45ebe7244ab899798cea643

Malware Analysis – evasion – 80bc920446cda4a8827ada74b0081852

Malware Analysis – ransomware – b14c45c1792038fd69b5c75e604242a3

Malware Analysis – djvu – cc754c02596df7905eca8894d0202e13

Malware Analysis – djvu – 7b8426b03fdcbe7a132490d08531a789

Malware Analysis – wannacry – afbe6bba36be6ad384e6feccab258960

Vice Society Ransomware Victim: TIMco

Vice Society Ransomware Victim: Central Texas College

Cobalt Stike Beacon Detected – 47[.]98[.]158[.]167:80

Cobalt Stike Beacon Detected – 89[.]208[.]103[.]122:443

Cobalt Stike Beacon Detected – 118[.]31[.]76[.]240:7999

Cobalt Stike Beacon Detected – 194[.]55[.]186[.]206:80

Cobalt Stike Beacon Detected – 62[.]204[.]41[.]237:443

Cobalt Stike Beacon Detected – 162[.]19[.]155[.]49:443

Security Awareness Training that Works for Changing Employee Behavior

Security Awareness Training that Works for Changing Employee Behavior

FreeOnes – 960,213 breached accounts

Cobalt Strike Beacon Detected – 47[.]120[.]32[.]72:8081

Cobalt Strike Beacon Detected – 8[.]147[.]128[.]54:443

Cobalt Strike Beacon Detected – 43[.]100[.]27[.]141:8443

You may have missed

Security Awareness Training that Works for Changing Employee Behavior