Month: October 2022

abstract malware 990x400 1

Malware Analysis – djvu – 550aa6e971ec74a745e74889f95b231d

October 20, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 550aa6e971ec74a745e74889f95b231dSHA1: 21afe5f1fcb6bd967e2ff2e3dc30bc82c62e0170ANALYSIS DATE: 2022-10-20T04:27:44ZTTPS: T1082, T1005, T1081, T1012,...

abstract malware 990x400 1

Malware Analysis – evasion – 3bb6ba5f313a55bb4bfcae96f0b2174e

October 20, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojan, upxMD5: 3bb6ba5f313a55bb4bfcae96f0b2174eSHA1: 72a3e0fc09e385f0b77fcb067d246331e1636a55ANALYSIS DATE: 2022-10-20T03:39:57ZTTPS: T1088, T1089, T1112, T1491, T1082, T1060, T1004...

abstract malware 990x400 1

Malware Analysis – smokeloader – 46017e962ae3b76d86177c74d6c54257

October 20, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 46017e962ae3b76d86177c74d6c54257SHA1: b413251a1bd5f8d51220eac070b1df4599a24ed6ANALYSIS DATE: 2022-10-20T04:07:24ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

abstract malware 990x400 1

Malware Analysis – djvu – 84064f1d6a3a2f419c75c7ad2241171b

October 20, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 84064f1d6a3a2f419c75c7ad2241171bSHA1: beca83d94d18db23458b32e673ebc02b1468b1f8ANALYSIS DATE: 2022-10-20T04:50:33ZTTPS: T1222, T1005, T1081, T1012,...

abstract malware 990x400 1

Malware Analysis – persistence – 7e37f07e97e27575c5a6a7e61a3edf63

October 20, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 7e37f07e97e27575c5a6a7e61a3edf63SHA1: 5893ed714c341556df4df45c5e84b6a96ff9784bANALYSIS DATE: 2022-10-20T04:40:22ZTTPS: T1091, T1060, T1112, T1005, T1081, T1082, T1107, T1490...

abstract malware 990x400 1

Malware Analysis – chaos – c0d3bd5a91adc22c7af38bffbed28349

October 20, 2022

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, ransomware, spyware, stealerMD5: c0d3bd5a91adc22c7af38bffbed28349SHA1: 9013950420444e6f948338f1c13817d4ea6f571cANALYSIS DATE: 2022-10-20T04:40:06ZTTPS: T1005, T1081, T1082 ScoreMeaningExample10Known badA malware family was...

abstract malware 990x400 1

Malware Analysis – djvu – 04fb5f0440c3365524d03a4e1cce1d18

October 20, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 04fb5f0440c3365524d03a4e1cce1d18SHA1: 6cf5ee7aa79251bfc2adab5ef0b6e9fd5e1b67d5ANALYSIS DATE: 2022-10-20T04:44:16ZTTPS: T1005, T1081, T1060, T1112,...

osint

Text4Shell, a remote code execution bug in Apache Commons Text library

October 20, 2022

Researcher discovered a remote code execution vulnerability in the open-source Apache Commons Text library. GitHub’s threat analyst Alvaro Munoz discovered a remote...

Cobalt Strike

Cobalt Stike Beacon Detected – 20[.]205[.]142[.]50:80

October 20, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Strike

Cobalt Stike Beacon Detected – 47[.]100[.]47[.]35:443

October 20, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Strike

Cobalt Stike Beacon Detected – 139[.]60[.]161[.]164:80

October 20, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Strike

Cobalt Stike Beacon Detected – 185[.]55[.]243[.]110:443

October 20, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Strike

Cobalt Stike Beacon Detected – 139[.]224[.]17[.]133:80

October 20, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Strike

Cobalt Stike Beacon Detected – 139[.]59[.]204[.]196:80

October 20, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Strike

Cobalt Stike Beacon Detected – 45[.]32[.]29[.]117:7777

October 20, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Strike

Cobalt Stike Beacon Detected – 35[.]193[.]101[.]166:443

October 20, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Strike

Cobalt Stike Beacon Detected – 121[.]41[.]59[.]127:8080

October 20, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Strike

Cobalt Stike Beacon Detected – 47[.]93[.]241[.]137:4433

October 20, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Strike

Cobalt Stike Beacon Detected – 91[.]213[.]50[.]3:443

October 20, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Strike

Cobalt Stike Beacon Detected – 120[.]236[.]114[.]195:9030

October 20, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Strike

Cobalt Stike Beacon Detected – 185[.]158[.]94[.]217:443

October 20, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

osint

TeamTNT Returns – or Does It?

October 19, 2022

Our honeypots caught malicious cryptocurrency miner samples targeting the cloud and containers, and its routines are reminiscent of the routines...

abstract malware 990x400 1

Malware Analysis – evasion – 90c2df2630d849e48d89a14d846a11ec

October 19, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 90c2df2630d849e48d89a14d846a11ecSHA1: 9e841b75532d14642b201fe40108240fa94f9c0fANALYSIS DATE: 2022-10-19T13:36:38ZTTPS: T1004, T1112, T1491, T1060, T1490, T1158, T1082, T1012,...

abstract malware 990x400 1

Malware Analysis – evasion – 91ca4d468028506fa4e6df08b0051a4d

October 19, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 91ca4d468028506fa4e6df08b0051a4dSHA1: 08b701b622f931cc76869a2fca533945cb7d121fANALYSIS DATE: 2022-10-19T13:36:40ZTTPS: T1112, T1158, T1490, T1082, T1012, T1120, T1004, T1088,...

[HANDALA] – Ransomware Victim: Silicom

November 24, 2024

[INCRANSOM] – Ransomware Victim: Sa[.]SS Datentechnik

November 24, 2024

[BLACKSUIT] – Ransomware Victim: co[.]cullman[.]al[.]us

November 24, 2024

CVE Alert: CVE-2024-9511

November 24, 2024

CVE Alert: CVE-2024-11446

November 24, 2024