Month: October 2022

Malware Analysis – djvu – 88323df0df755d5d667684caddf84bbb

October 11, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 88323df0df755d5d667684caddf84bbbSHA1: add6505387ca1dd1b6b4a9526bb01e30439d5bf2ANALYSIS DATE: 2022-10-11T11:01:49ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – discovery – f27dbb274fb29ae23bbf99d2f0daba71

October 11, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discoveryMD5: f27dbb274fb29ae23bbf99d2f0daba71SHA1: 5661d95683b0bcc4307e6bc08a71b39e5a0580faANALYSIS DATE: 2022-10-11T10:26:28ZTTPS: T1082, T1012 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Experts analyzed the evolution of the Emotet supply chain

October 11, 2022

Threat actors behind the Emotet bot are continually improving their tactics, techniques, and procedures to avoid detection. VMware researchers have...

Malware Analysis – smokeloader – 4a8cef940dbcaaab17be40229f8f09e9

October 11, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 4a8cef940dbcaaab17be40229f8f09e9SHA1: fbccf3ef94809dae33000b6a15f7780db9bb3925ANALYSIS DATE: 2022-10-11T08:02:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – ad499a24974aff27e4204574bca7b05f

October 11, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: ad499a24974aff27e4204574bca7b05fSHA1: 2b8246aed7668f94d61ef52a52697981db97ad5fANALYSIS DATE: 2022-10-11T08:01:54ZTTPS: T1082, T1012, T1053, T1005,...

Malware Analysis – evasion – 62863fbe54bcc384001f52896f78a2c0

October 11, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomwareMD5: 62863fbe54bcc384001f52896f78a2c0SHA1: ec9bc172a15e6bb7972bda93b854863cecd91f38ANALYSIS DATE: 2022-10-11T06:56:02ZTTPS: T1490, T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – evasion – 74e9208acd17c7d1e074f19a8f64d2e6

October 11, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomwareMD5: 74e9208acd17c7d1e074f19a8f64d2e6SHA1: 64e1007246dc1fa41d448efe2d7ffa7bb873ee8cANALYSIS DATE: 2022-10-11T06:39:26ZTTPS: T1112, T1060, T1158, T1082, T1012, T1120 ScoreMeaningExample10Known badA malware...

Malware Analysis – evasion – d647220db85f6557e262ada99919e9f2

October 11, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, ransomware, trojanMD5: d647220db85f6557e262ada99919e9f2SHA1: 5fceb3f1819a994b22f3f83084ea50e540d9f8e4ANALYSIS DATE: 2022-10-11T08:05:21ZTTPS: T1491, T1112, T1053, T1107, T1490, T1031, T1089, T1082, T1012,...

Malware Analysis – smokeloader – 4a8cef940dbcaaab17be40229f8f09e9

October 11, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 4a8cef940dbcaaab17be40229f8f09e9SHA1: fbccf3ef94809dae33000b6a15f7780db9bb3925ANALYSIS DATE: 2022-10-11T08:03:33ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – evasion – d647220db85f6557e262ada99919e9f2

October 11, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, ransomware, trojanMD5: d647220db85f6557e262ada99919e9f2SHA1: 5fceb3f1819a994b22f3f83084ea50e540d9f8e4ANALYSIS DATE: 2022-10-11T08:06:04ZTTPS: T1112, T1082, T1053, T1107, T1490, T1031, T1491, T1089, T1012,...

Malware Analysis – danabot – 4a8cef940dbcaaab17be40229f8f09e9

October 11, 2022

Score: 10 MALWARE FAMILY: danabotTAGS:family:danabot, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, banker, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 4a8cef940dbcaaab17be40229f8f09e9SHA1: fbccf3ef94809dae33000b6a15f7780db9bb3925ANALYSIS...

Cobalt Stike Beacon Detected – 185[.]143[.]223[.]90:80

October 11, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – d8eaa6a4796ba5b2bb8ecaa2f9ce3999

October 11, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: d8eaa6a4796ba5b2bb8ecaa2f9ce3999SHA1: 0cf6a0cc77e2a73eeef82fc434368e9dbea9836dANALYSIS DATE: 2022-10-11T08:09:45ZTTPS: T1005, T1081, T1060, T1112,...

Malware Analysis – ransomware – 4647bb53eb893013f8c752f2b550ae81

October 11, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 4647bb53eb893013f8c752f2b550ae81SHA1: 5779a312940e1b8dcc587fdf22f94ec220c1db4bANALYSIS DATE: 2022-10-11T08:11:06ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 4647bb53eb893013f8c752f2b550ae81

October 11, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 4647bb53eb893013f8c752f2b550ae81SHA1: 5779a312940e1b8dcc587fdf22f94ec220c1db4bANALYSIS DATE: 2022-10-11T08:10:59ZTTPS: T1107, T1490, T1091, T1005, T1081, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – wannacry – 14baa82b3b48237395b7f0b43927229f

October 11, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: 14baa82b3b48237395b7f0b43927229fSHA1: 99b382b9b239db3a3a0cc34ade673d6071b773d8ANALYSIS DATE: 2022-10-11T08:11:18ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Cobalt Stike Beacon Detected – 150[.]158[.]180[.]97:443

October 11, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 210[.]212[.]152[.]202:80

October 11, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 106[.]12[.]200[.]207:80

October 11, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 106[.]55[.]227[.]87:8800

October 11, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – persistence – b49b434dbfee3b934e8d1fdca785b18b

October 11, 2022

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: b49b434dbfee3b934e8d1fdca785b18bSHA1: 16d250980885f9f7d92cd23df590bac5be29e7bdANALYSIS DATE: 2022-10-11T08:16:07ZTTPS: T1060, T1082, T1491, T1112, T1042 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – wannacry – 14baa82b3b48237395b7f0b43927229f

October 11, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: 14baa82b3b48237395b7f0b43927229fSHA1: 99b382b9b239db3a3a0cc34ade673d6071b773d8ANALYSIS DATE: 2022-10-11T08:12:05ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – evasion – 719089f79446e8f6d7e2ba960a2ed96c

October 11, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 719089f79446e8f6d7e2ba960a2ed96cSHA1: 5047fdd972be0de532409dee8ea72ae2dda2ede8ANALYSIS DATE: 2022-10-11T08:17:02ZTTPS: T1031, T1112, T1107, T1490, T1082 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – evasion – 719089f79446e8f6d7e2ba960a2ed96c

October 11, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 719089f79446e8f6d7e2ba960a2ed96cSHA1: 5047fdd972be0de532409dee8ea72ae2dda2ede8ANALYSIS DATE: 2022-10-11T08:16:32ZTTPS: T1107, T1490, T1082, T1031, T1112 ScoreMeaningExample10Known badA malware family was...

Month: October 2022

Malware Analysis – djvu – 88323df0df755d5d667684caddf84bbb

Malware Analysis – discovery – f27dbb274fb29ae23bbf99d2f0daba71

Experts analyzed the evolution of the Emotet supply chain

Malware Analysis – smokeloader – 4a8cef940dbcaaab17be40229f8f09e9

Malware Analysis – djvu – ad499a24974aff27e4204574bca7b05f

Malware Analysis – evasion – 62863fbe54bcc384001f52896f78a2c0

Malware Analysis – evasion – 74e9208acd17c7d1e074f19a8f64d2e6

Malware Analysis – evasion – d647220db85f6557e262ada99919e9f2

Malware Analysis – smokeloader – 4a8cef940dbcaaab17be40229f8f09e9

Malware Analysis – evasion – d647220db85f6557e262ada99919e9f2

Malware Analysis – danabot – 4a8cef940dbcaaab17be40229f8f09e9

Cobalt Stike Beacon Detected – 185[.]143[.]223[.]90:80

Malware Analysis – djvu – d8eaa6a4796ba5b2bb8ecaa2f9ce3999

Malware Analysis – ransomware – 4647bb53eb893013f8c752f2b550ae81

Malware Analysis – ransomware – 4647bb53eb893013f8c752f2b550ae81

Malware Analysis – wannacry – 14baa82b3b48237395b7f0b43927229f

Cobalt Stike Beacon Detected – 150[.]158[.]180[.]97:443

Cobalt Stike Beacon Detected – 210[.]212[.]152[.]202:80

Cobalt Stike Beacon Detected – 106[.]12[.]200[.]207:80

Cobalt Stike Beacon Detected – 106[.]55[.]227[.]87:8800

Malware Analysis – persistence – b49b434dbfee3b934e8d1fdca785b18b

Malware Analysis – wannacry – 14baa82b3b48237395b7f0b43927229f

Malware Analysis – evasion – 719089f79446e8f6d7e2ba960a2ed96c

Malware Analysis – evasion – 719089f79446e8f6d7e2ba960a2ed96c

HackerOne Bug Bounty Disclosure: unsubscribe-anyone-from-all-emails-abfe

HackerOne Bug Bounty Disclosure: information-exposure-due-to-enabled-debug-mode-thpless

HackerOne Bug Bounty Disclosure: reflected-html-injection-via-contact-faq-search-parameter-on-the-white-evil

HackerOne Bug Bounty Disclosure: reflected-html-injection-via-contact-faq-search-parameter-on-the-white-evil

CISA: CISA Adds One Known Exploited Vulnerability to Catalog

You may have missed