threatintel

Malware Analysis – djvu – 22672da74740ee00c44dc6613472ad67

February 25, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 22672da74740ee00c44dc6613472ad67SHA1: ca39f159b91efaff766817355c44bc1e17dacd7cANALYSIS DATE: 2023-02-25T05:26:28ZTTPS: T1005, T1081, T1012, T1082, T1222,...

Malware Analysis – asyncrat – 319a1b94c08f795f4f76d8f58f04b999

February 25, 2023

Score: 10 MALWARE FAMILY: asyncratTAGS:family:asyncrat, family:xworm, persistence, ransomware, rat, trojanMD5: 319a1b94c08f795f4f76d8f58f04b999SHA1: 179d0120f76a0c5d0080133187325af54e669605ANALYSIS DATE: 2023-02-24T21:31:52ZTTPS: T1060, T1112, T1012, T1082, T1053, T1491...

Malware Analysis – djvu – 2a769aad476e90904b8c865605eb4deb

February 25, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 2a769aad476e90904b8c865605eb4debSHA1: baca7c106a0bcc47ca8068334fbf987fb358cb53ANALYSIS DATE: 2023-02-24T21:50:50ZTTPS: T1053, T1012, T1082, T1005, T1081,...

Cobalt Stike Beacon Detected – 150[.]158[.]55[.]102:443

February 25, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – eea32f0092b7de5879bea9e43614eb57

February 25, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, backdoor, discovery, evasion, persistence, ransomware, spyware, stealer, themida, trojan, vmprotectMD5: eea32f0092b7de5879bea9e43614eb57SHA1: a0889f72df365adc17f058102f439a7598e22e29ANALYSIS DATE:...

Malware Analysis – ransomware – 636a8b982ad672755dae99ac2cb8410b

February 25, 2023

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 636a8b982ad672755dae99ac2cb8410bSHA1: acad7f4140ea8ec970a8c4c91ef7ac5e61ecc1ccANALYSIS DATE: 2023-02-24T22:05:58ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – 253efb250e4405950a48961913a5ed55

February 25, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 253efb250e4405950a48961913a5ed55SHA1: 2289e888d0ac933f1cd7f5eecce18db00d5a7904ANALYSIS DATE: 2023-02-24T22:11:56ZTTPS: T1060, T1112, T1053, T1012, T1082,...

Malware Analysis – redline – 973978433de985f2e501f5a0484b1fc3

February 25, 2023

Score: 10 MALWARE FAMILY: redlineTAGS:family:redline, discovery, infostealer, persistence, ransomware, spywareMD5: 973978433de985f2e501f5a0484b1fc3SHA1: f93b4408195b0904cc84c9496cc3a54dcfa5a146ANALYSIS DATE: 2023-02-24T21:53:12ZTTPS: T1112, T1042, T1012, T1082, T1005, T1081,...

Cobalt Stike Beacon Detected – 37[.]220[.]87[.]75:443

February 25, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 45[.]76[.]79[.]8:80

February 25, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 45[.]227[.]252[.]252:80

February 25, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 154[.]88[.]14[.]34:8443

February 25, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – – 265024416449b79960ac63a4934a04ab

February 25, 2023

Score: 1 MALWARE FAMILY: TAGS:MD5: 265024416449b79960ac63a4934a04abSHA1: e37184e090f5c8b2d8ca68804c3b3b4161b35b49ANALYSIS DATE: 2023-02-24T22:59:11ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – 917e23d9af8ffc41f59b222d4d0062b6

February 25, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 917e23d9af8ffc41f59b222d4d0062b6SHA1: 40b9dce6353fb98421c7d46f9fb4cdcf0134df94ANALYSIS DATE: 2023-02-24T23:55:39ZTTPS: T1012, T1082, T1005, T1081, T1060,...

Malware Analysis – discovery – 923a5ca3ef3ddec2506d0bffbae51930

February 25, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, evasion, exploit, persistence, spyware, stealer, trojan, upxMD5: 923a5ca3ef3ddec2506d0bffbae51930SHA1: b616b545db7cdef13318fa82a54ba8ad1878ec62ANALYSIS DATE: 2023-02-24T22:33:40ZTTPS: T1112, T1158, T1042, T1012,...

Malware Analysis – djvu – 67d96d0e3bd084531027da3adb28c196

February 25, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 67d96d0e3bd084531027da3adb28c196SHA1: 8790617b397467bfef79a49572e08c6f0a38df61ANALYSIS DATE: 2023-02-24T23:54:28ZTTPS: T1222, T1005, T1081, T1060, T1112,...

threatintel

Malware Analysis – djvu – 22672da74740ee00c44dc6613472ad67

Malware Analysis – asyncrat – 319a1b94c08f795f4f76d8f58f04b999

Malware Analysis – djvu – 2a769aad476e90904b8c865605eb4deb

Cobalt Stike Beacon Detected – 150[.]158[.]55[.]102:443

Malware Analysis – djvu – eea32f0092b7de5879bea9e43614eb57

Malware Analysis – ransomware – 636a8b982ad672755dae99ac2cb8410b

Malware Analysis – djvu – 253efb250e4405950a48961913a5ed55

Malware Analysis – redline – 973978433de985f2e501f5a0484b1fc3

Cobalt Stike Beacon Detected – 37[.]220[.]87[.]75:443

Cobalt Stike Beacon Detected – 45[.]76[.]79[.]8:80

Cobalt Stike Beacon Detected – 45[.]227[.]252[.]252:80

Cobalt Stike Beacon Detected – 154[.]88[.]14[.]34:8443

Malware Analysis – – 265024416449b79960ac63a4934a04ab

Malware Analysis – djvu – 917e23d9af8ffc41f59b222d4d0062b6

Malware Analysis – discovery – 923a5ca3ef3ddec2506d0bffbae51930

Malware Analysis – djvu – 67d96d0e3bd084531027da3adb28c196

Cobalt Stike Beacon Detected – 118[.]194[.]230[.]222:8443

Cobalt Stike Beacon Detected – 47[.]94[.]3[.]175:55443

Cobalt Stike Beacon Detected – 45[.]61[.]186[.]108:4433

Cobalt Stike Beacon Detected – 142[.]11[.]211[.]228:443

NSA shares guidance on how to secure your home network

VMware warns admins of critical Carbon Black App Control flaw

New S1deload Stealer malware hijacks Youtube, Facebook accounts

Google paid $12 million in bug bounties to security researchers

[QILIN] – Ransomware Victim: Hitzinger

[HANDALA] – Ransomware Victim: Saturday Spotlight

[QILIN] – Ransomware Victim: SHRM New Mexico

25 Years Of Meatbags Permanently In Space On The Iss

[QILIN] – Ransomware Victim: Wasserverband Wulkatal

You may have missed