Month: October 2022

Malware Analysis – djvu – 7b1414db846dddafb2de8405425b57fd

October 22, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 7b1414db846dddafb2de8405425b57fdSHA1: e9220f99b4c33d253221ecf54b58af3a0573054aANALYSIS DATE: 2022-10-22T04:32:48ZTTPS:...

Malware Analysis – – ced879efa3f8ed1c2ff2952c6bc7225e

October 22, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: ced879efa3f8ed1c2ff2952c6bc7225eSHA1: 8286ca8d0c4a54a15aa194ec78fde219bf4c4149ANALYSIS DATE: 2022-10-22T04:45:29ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – – 8ba287e4d5b62c8b3bd9e5d3e04afcee

October 22, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: 8ba287e4d5b62c8b3bd9e5d3e04afceeSHA1: 02781f4b15680c21c59a26959fe858044b0f6135ANALYSIS DATE: 2022-10-22T04:46:36ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – – aab7a497e2166339b9a82a01d2a051c4

October 22, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: aab7a497e2166339b9a82a01d2a051c4SHA1: 10e9aee8464b4094fb6a6a754d8f617b8746119bANALYSIS DATE: 2022-10-22T04:49:18ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – – 6b07adb7eeea289e1908cb5baf5a5d93

October 22, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: 6b07adb7eeea289e1908cb5baf5a5d93SHA1: 47d27128426623be81417c109a12e3838c093eb6ANALYSIS DATE: 2022-10-22T04:50:03ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – – f23f34894961227fa6ddb1d64318e28e

October 22, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: f23f34894961227fa6ddb1d64318e28eSHA1: b9e83c5e9ff682ad0a54694ca75557b3defa9d7aANALYSIS DATE: 2022-10-22T04:48:22ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Month: October 2022

Malware Analysis – djvu – 7b1414db846dddafb2de8405425b57fd

Malware Analysis – – ced879efa3f8ed1c2ff2952c6bc7225e

Malware Analysis – – 8ba287e4d5b62c8b3bd9e5d3e04afcee

Malware Analysis – – aab7a497e2166339b9a82a01d2a051c4

Malware Analysis – – 6b07adb7eeea289e1908cb5baf5a5d93

Malware Analysis – – f23f34894961227fa6ddb1d64318e28e

Cobalt Stike Beacon Detected – 185[.]225[.]17[.]60:443

Cobalt Stike Beacon Detected – 44[.]197[.]246[.]120:53

Cobalt Stike Beacon Detected – 43[.]142[.]138[.]251:8046

Cobalt Stike Beacon Detected – 101[.]42[.]178[.]86:8443

Cobalt Stike Beacon Detected – 143[.]198[.]116[.]67:80

Cobalt Stike Beacon Detected – 216[.]240[.]130[.]72:443

Cobalt Stike Beacon Detected – 128[.]199[.]60[.]130:80

Cobalt Stike Beacon Detected – 206[.]2[.]200[.]132:80

Cobalt Stike Beacon Detected – 101[.]99[.]94[.]218:80

Cobalt Stike Beacon Detected – 199[.]127[.]60[.]67:80

Cobalt Stike Beacon Detected – 137[.]184[.]18[.]113:443

EnergyAustralia Electricity company discloses security breach

Cobalt Stike Beacon Detected – 159[.]65[.]199[.]152:80

Cobalt Stike Beacon Detected – 190[.]123[.]44[.]225:443

Cobalt Stike Beacon Detected – 38[.]6[.]155[.]103:443

Cobalt Stike Beacon Detected – 43[.]139[.]72[.]172:6666

Cobalt Stike Beacon Detected – 84[.]32[.]128[.]99:80

Cobalt Stike Beacon Detected – 137[.]184[.]7[.]253:81

CISA: Fortinet Updates Guidance and Indicators of Compromise following FortiManager Vulnerability Exploitation

CISA: CISA Releases Four Industrial Control Systems Advisories

CISA: JCDC’s Industry-Government Collaboration Speeds Mitigation of CrowdStrike IT Outage

CISA: CISA Releases Three Industrial Control Systems Advisories

CISA: Foreign Threat Actor Conducting Large-Scale Spearphishing Campaign with RDP Attachments

You may have missed