threatintel

Malware Analysis – djvu – 000ba535803f06084c9b4aec05b10c6c

November 1, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 000ba535803f06084c9b4aec05b10c6cSHA1: 501c1308dcbce9000f70143bb31e785f3d389c11ANALYSIS DATE: 2022-11-01T17:50:27ZTTPS: T1222, T1012, T1082, T1005, T1081, T1060,...

CISA: CISA Releases One Industrial Control Systems Advisory

November 1, 2022

CISA Releases One Industrial Control Systems Advisory CISA released one Industrial Control Systems (ICS) advisory on November 1, 2022. This...

CISA: CISA Upgrades to TLP 2.0

November 1, 2022

CISA Upgrades to TLP 2.0 Today, CISA officially upgraded to Traffic Light Protocol (TLP) 2.0, which facilitates greater information sharing...

Experts warn of critical RCE in ConnectWise Server Backup Solution

November 1, 2022

ConnectWise has addressed a critical remote code execution vulnerability impacting Recover and R1Soft Server Backup Manager (SBM). According to the...

Ransomware activity and network access sales in Q3 2022

November 1, 2022

Ransomware activity report: Threat actors are selling access to hundreds of organizations, with a cumulative requested price of around $4M....

Cicd-Goat – A Deliberately Vulnerable CI/CD Environment

November 1, 2022

Deliberately Download & Run There's no need to clone the repository. Linux & Mac curl -o cicd-goat/docker-compose.yaml --create-dirs https://raw.githubusercontent.com/cider-security-research/cicd-goat/main/docker-compose.yamlcd cicd-goat...

Cobalt Stike Beacon Detected – 150[.]158[.]55[.]146:5555

November 1, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 5[.]44[.]42[.]48:443

November 1, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 172[.]245[.]27[.]233:8080

November 1, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – 64614e3663ac2abd4a21ae1e1d46bfc3

November 1, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 64614e3663ac2abd4a21ae1e1d46bfc3SHA1: 2a910047f6f2357425965958ca6bb75d550e9a6dANALYSIS DATE: 2022-11-01T09:56:29ZTTPS: T1060, T1112, T1082, T1012, T1005, T1081,...

Malware Analysis – djvu – 98e8bcb6dc7fa33c0ba1917db3060d3f

November 1, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 98e8bcb6dc7fa33c0ba1917db3060d3fSHA1: d476e4750a0cc4b072751d6d618184e825f269d9ANALYSIS DATE: 2022-11-01T10:20:32ZTTPS: T1060, T1112, T1082, T1005, T1081, T1012,...

Malware Analysis – wannacry – 7f75aa06e06a197d63761176133913ac

November 1, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: 7f75aa06e06a197d63761176133913acSHA1: 9b2085e5c64ed8f13584082b5aceada1c9c072efANALYSIS DATE: 2022-11-01T09:20:22ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Cobalt Stike Beacon Detected – 124[.]70[.]67[.]154:443

November 1, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 43[.]143[.]133[.]46:443

November 1, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 185[.]130[.]45[.]159:80

November 1, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 84[.]32[.]188[.]244:80

November 1, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – bfd9b7bda4437c4b6ca3d10738afb87a

November 1, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, botnet:mario23_10, botnet:slovarik1btc, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojan, upxMD5: bfd9b7bda4437c4b6ca3d10738afb87aSHA1:...

Malware Analysis – djvu – 352e96b903513bea0586e76f677bd7a0

November 1, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 352e96b903513bea0586e76f677bd7a0SHA1: 1bd12034347ce8aedcaa6c4612622ebb5142e83cANALYSIS DATE: 2022-11-01T11:40:30ZTTPS: T1222, T1060, T1112, T1005, T1081, T1012,...

Malware Analysis – smokeloader – 9e775e96fa042f3b834bbc419900ccc7

November 1, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 9e775e96fa042f3b834bbc419900ccc7SHA1: 2979669e92f199a0aaddc71e7133891af20ef6d7ANALYSIS DATE: 2022-11-01T10:51:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – lockbit – 23e2134379d01a6efcfb519df2819bce

November 1, 2022

Score: 10 MALWARE FAMILY: lockbitTAGS:family:lockbit, ransomwareMD5: 23e2134379d01a6efcfb519df2819bceSHA1: 93e1a0c2918ece7a768b9b3fd8d5203e1fa0754cANALYSIS DATE: 2022-11-01T11:19:03ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

threatintel

Malware Analysis – djvu – 000ba535803f06084c9b4aec05b10c6c

CISA: CISA Releases One Industrial Control Systems Advisory

CISA: CISA Upgrades to TLP 2.0

Experts warn of critical RCE in ConnectWise Server Backup Solution

Ransomware activity and network access sales in Q3 2022

Cicd-Goat – A Deliberately Vulnerable CI/CD Environment

Cobalt Stike Beacon Detected – 150[.]158[.]55[.]146:5555

Cobalt Stike Beacon Detected – 5[.]44[.]42[.]48:443

Cobalt Stike Beacon Detected – 172[.]245[.]27[.]233:8080

Malware Analysis – djvu – 64614e3663ac2abd4a21ae1e1d46bfc3

Malware Analysis – djvu – 98e8bcb6dc7fa33c0ba1917db3060d3f

Malware Analysis – wannacry – 7f75aa06e06a197d63761176133913ac

Cobalt Stike Beacon Detected – 124[.]70[.]67[.]154:443

Cobalt Stike Beacon Detected – 43[.]143[.]133[.]46:443

Cobalt Stike Beacon Detected – 185[.]130[.]45[.]159:80

Cobalt Stike Beacon Detected – 84[.]32[.]188[.]244:80

Malware Analysis – djvu – bfd9b7bda4437c4b6ca3d10738afb87a

Malware Analysis – djvu – 352e96b903513bea0586e76f677bd7a0

Malware Analysis – smokeloader – 9e775e96fa042f3b834bbc419900ccc7

Malware Analysis – lockbit – 23e2134379d01a6efcfb519df2819bce

Samsung Galaxy Store flaw could have allowed installing malicious apps on target devices

APT10: Tracking down LODEINFO 2022, part II

APT10: Tracking down LODEINFO 2022, part I

LockBit 3.0 Ransomware Victim: centurion[.]com[.]pl

Cobalt Strike Beacon Detected – 121[.]43[.]37[.]134:4434

Cobalt Strike Beacon Detected – 119[.]29[.]231[.]118:443

Cobalt Strike Beacon Detected – 39[.]101[.]74[.]162:443

Cobalt Strike Beacon Detected – 8[.]218[.]112[.]112:8880

Cobalt Strike Beacon Detected – 47[.]109[.]48[.]57:443

You may have missed