Month: November 2022

Malware Analysis – djvu – 87b7c8de029618c4a1e08792a1f36f03

November 25, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 87b7c8de029618c4a1e08792a1f36f03SHA1: cb852f97675ebb210ed82b3153f897990035a093ANALYSIS DATE: 2022-11-25T11:22:28ZTTPS: T1082, T1053, T1005, T1081,...

Malware Analysis – ransomware – ff88397d0fdd02e072a80f38358c4253

November 25, 2022

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: ff88397d0fdd02e072a80f38358c4253SHA1: 83333da8fc0f1dfb716dfa82ee7470702356ad76ANALYSIS DATE: 2022-11-25T10:57:55ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – 4e8b949ac446e0ac8f2caa7878a3134e

November 25, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 4e8b949ac446e0ac8f2caa7878a3134eSHA1: 3d07ab9ad186bd2f95803e8565334f83232b4c29ANALYSIS DATE: 2022-11-25T11:37:45ZTTPS: T1060, T1112, T1222, T1053,...

Month: November 2022

Malware Analysis – djvu – 87b7c8de029618c4a1e08792a1f36f03

Malware Analysis – ransomware – ff88397d0fdd02e072a80f38358c4253

Malware Analysis – djvu – 4e8b949ac446e0ac8f2caa7878a3134e

Cobalt Stike Beacon Detected – 159[.]75[.]231[.]11:443

Cobalt Stike Beacon Detected – 107[.]189[.]6[.]139:443

Cobalt Stike Beacon Detected – 114[.]116[.]65[.]127:443

Cobalt Stike Beacon Detected – 82[.]156[.]187[.]92:443

An international police operation dismantled the spoofing service iSpoof

XWiki security bypass | CVE-2022-41937

XWiki code execution | CVE-2022-41928

ChurchInfo CartView.php file upload | CVE-2021-43258

XWiki code execution | CVE-2022-41931

XWiki code execution | CVE-2022-41934

XWiki cross-site request forgery | CVE-2022-41927

Daily Vulnerability Trends: Fri Nov 25 2022

Karakurt Ransomware Victim: Methodist McKinney Hospital

Karakurt Ransomware Victim: William A[.] Kibbe & Associates

Karakurt Ransomware Victim: National Stores Inc[.]

Karakurt Ransomware Victim: Infinitum

Karakurt Ransomware Victim: Energy Transfer Durafin Tubes

Karakurt Ransomware Victim: Hiersun Jewelry Co Ltd

Karakurt Ransomware Victim: KINSHOFER GmbH

Karakurt Ransomware Victim: Latitude 37

Karakurt Ransomware Victim: South Jersey Glass & Doors

Cobalt Strike Beacon Detected – 156[.]244[.]13[.]163:8443

Cobalt Strike Beacon Detected – 158[.]247[.]242[.]115:80

Cobalt Strike Beacon Detected – 94[.]247[.]42[.]128:444

Cobalt Strike Beacon Detected – 193[.]42[.]25[.]65:8085

Cobalt Strike Beacon Detected – 8[.]154[.]18[.]17:8090

You may have missed