threatintel

Malware Analysis – djvu – 816added67b8695ce1d08dc8d64224f9

October 19, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 816added67b8695ce1d08dc8d64224f9SHA1: 500c1d0c0dca3eb8e5a090e942136b140850567eANALYSIS DATE: 2022-10-18T22:54:22ZTTPS: T1012, T1082, T1222, T1053,...

Malware Analysis – djvu – adef9b3445ea954ca3ec8a1f61daef01

October 19, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, backdoor, collection, discovery, persistence, ransomware, trojanMD5: adef9b3445ea954ca3ec8a1f61daef01SHA1: e4805b0e226fe27413f14679b04aefa5a701ef6fANALYSIS DATE: 2022-10-18T22:42:17ZTTPS: T1082, T1114, T1060, T1112,...

Cobalt Stike Beacon Detected – 39[.]99[.]147[.]117:8088

October 19, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – ransomware – deba4c78231b0c065ff368ad213a1d4c

October 19, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: deba4c78231b0c065ff368ad213a1d4cSHA1: c56bfd5cc3437c381900bcd6b424130bd4454660ANALYSIS DATE: 2022-10-18T22:41:04ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Cobalt Stike Beacon Detected – 45[.]91[.]67[.]44:443

October 19, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 47[.]97[.]0[.]61:80

October 19, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 43[.]154[.]57[.]146:8001

October 19, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Brute Ratel C4 Detected – 54[.]178[.]240[.]29:80

October 19, 2022

The Information provided at the time of posting was detected as "Brute Ratel C4". Depending on when you are viewing...

Brute Ratel C4 Detected – 13[.]114[.]203[.]227:80

October 19, 2022

The Information provided at the time of posting was detected as "Brute Ratel C4". Depending on when you are viewing...

Cobalt Stike Beacon Detected – 45[.]147[.]229[.]203:443

October 19, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 176[.]113[.]115[.]3:443

October 19, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 81[.]161[.]229[.]92:443

October 19, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 43[.]139[.]78[.]242:8090

October 19, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Software Patch Management Policy Best Practices

October 18, 2022

Explore the top risk-based patch management policy best practices to mitigate the growing threat of vulnerability exploits in your organization....

US-CERT Bulletin (SB22-290):Vulnerability Summary for the Week of October 10, 2022

October 18, 2022

The CISA Vulnerability Bulletin provides a summary of new vulnerabilities that have been recorded by the National Institute of Standards...

Malware Analysis – persistence – f558d2ee7175b0ace3d68b9363a22f94

October 18, 2022

Score: 8 MALWARE FAMILY: persistenceTAGS:persistenceMD5: f558d2ee7175b0ace3d68b9363a22f94SHA1: 6e530c9a3eddabc29c2f8f6aca6c6f786ae052d6ANALYSIS DATE: 2022-10-18T14:10:50ZTTPS: T1012, T1120, T1082, T1060, T1112, T1018 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – evasion – a9692ba095ce225bfac0bb72c8617cab

October 18, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: a9692ba095ce225bfac0bb72c8617cabSHA1: 14731f119cdbeab86a3cdbef53dfadf345b97288ANALYSIS DATE: 2022-10-18T14:00:14ZTTPS: T1491, T1112, T1490, T1088, T1089, T1158, T1018, T1012,...

Malware Analysis – persistence – f5e72bf445387eddec000e0238adf873

October 18, 2022

Score: 8 MALWARE FAMILY: persistenceTAGS:persistenceMD5: f5e72bf445387eddec000e0238adf873SHA1: 895eb3047e7a28ce219fdd7e7ad5ce2a61312d93ANALYSIS DATE: 2022-10-18T14:13:51ZTTPS: T1060, T1112, T1082, T1018, T1012, T1120 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – djvu – bc624005cdc1d074e56c20c61e7cb0c0

October 18, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: bc624005cdc1d074e56c20c61e7cb0c0SHA1: 7eb357cfe07d55f7efdc830fc2e668dde3efcac0ANALYSIS DATE:...

Malware Analysis – octo – 759aada69cde33ef7f7e4495128ef9c1

October 18, 2022

Score: 10 MALWARE FAMILY: octoTAGS:family:octo, banker, evasion, infostealer, ransomware, rat, trojanMD5: 759aada69cde33ef7f7e4495128ef9c1SHA1: bc83eee2010bf0fda628f65c5517c3399ea3637aANALYSIS DATE: 2022-10-18T14:31:21ZTTPS: ScoreMeaningExample10Known badA malware family was...

Malware Analysis – djvu – f1a5ae71672127933daeb504d047a740

October 18, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: f1a5ae71672127933daeb504d047a740SHA1: 961ff8987db7a695e9cf270ddf94e97252c0f21dANALYSIS DATE: 2022-10-18T14:34:43ZTTPS: T1005, T1081, T1222, T1082,...

Malware Analysis – persistence – 6a1836250717296a9b354ceae2de027d

October 18, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 6a1836250717296a9b354ceae2de027dSHA1: a122153c35e32e8572fb3f3716a4991061b444baANALYSIS DATE: 2022-10-18T14:20:22ZTTPS: T1107, T1490, T1091, T1060, T1112, T1005, T1081, T1082...

Malware Analysis – ransomware – 0af83913c32ea2e3686ed97782aad007

October 18, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 0af83913c32ea2e3686ed97782aad007SHA1: 62fc4d8ef31e4a58a80911b513c124b535bd5cbcANALYSIS DATE: 2022-10-18T14:40:17ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 83add3a38b3aa8f30866cb31457324a8

October 18, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 83add3a38b3aa8f30866cb31457324a8SHA1: ca2466ece9c6ae6dc51e7130ba4c4252aec7b586ANALYSIS DATE: 2022-10-18T14:40:25ZTTPS: T1107, T1490, T1091, T1005, T1081, T1082 ScoreMeaningExample10Known badA malware...

threatintel

Malware Analysis – djvu – 816added67b8695ce1d08dc8d64224f9

Malware Analysis – djvu – adef9b3445ea954ca3ec8a1f61daef01

Cobalt Stike Beacon Detected – 39[.]99[.]147[.]117:8088

Malware Analysis – ransomware – deba4c78231b0c065ff368ad213a1d4c

Cobalt Stike Beacon Detected – 45[.]91[.]67[.]44:443

Cobalt Stike Beacon Detected – 47[.]97[.]0[.]61:80

Cobalt Stike Beacon Detected – 43[.]154[.]57[.]146:8001

Brute Ratel C4 Detected – 54[.]178[.]240[.]29:80

Brute Ratel C4 Detected – 13[.]114[.]203[.]227:80

Cobalt Stike Beacon Detected – 45[.]147[.]229[.]203:443

Cobalt Stike Beacon Detected – 176[.]113[.]115[.]3:443

Cobalt Stike Beacon Detected – 81[.]161[.]229[.]92:443

Cobalt Stike Beacon Detected – 43[.]139[.]78[.]242:8090

Software Patch Management Policy Best Practices

US-CERT Bulletin (SB22-290):Vulnerability Summary for the Week of October 10, 2022

Malware Analysis – persistence – f558d2ee7175b0ace3d68b9363a22f94

Malware Analysis – evasion – a9692ba095ce225bfac0bb72c8617cab

Malware Analysis – persistence – f5e72bf445387eddec000e0238adf873

Malware Analysis – djvu – bc624005cdc1d074e56c20c61e7cb0c0

Malware Analysis – octo – 759aada69cde33ef7f7e4495128ef9c1

Malware Analysis – djvu – f1a5ae71672127933daeb504d047a740

Malware Analysis – persistence – 6a1836250717296a9b354ceae2de027d

Malware Analysis – ransomware – 0af83913c32ea2e3686ed97782aad007

Malware Analysis – ransomware – 83add3a38b3aa8f30866cb31457324a8

[NOVA] – Ransomware Victim: Castilla

CVE Alert: CVE-2025-12595 – Tenda – AC23

CVE Alert: CVE-2025-12596 – Tenda – AC23

[QILIN] – Ransomware Victim: Deco Dental

Vodafonethree To Offshore Uk Network Jobs To India

You may have missed