Month: November 2022

Malware Analysis – djvu – f4d6bab1ae5f0408bf7a961ac4e1eec9

November 20, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, family:vidar, botnet:517, botnet:mario23_10, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5: f4d6bab1ae5f0408bf7a961ac4e1eec9SHA1:...

Malware Analysis – ransomware – c80f2a1c373d8ef42229e2919339cadd

November 20, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: c80f2a1c373d8ef42229e2919339caddSHA1: 8ab2a0512004cf6cca30da5b2b0b35e310114166ANALYSIS DATE: 2022-11-20T15:54:03ZTTPS: T1005, T1081 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – djvu – a0696d00fa18ffeef932b2d4c2802aac

November 20, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: a0696d00fa18ffeef932b2d4c2802aacSHA1: 01d13bbb4a41a5e87fd45c289d4b42bfe71aa8d9ANALYSIS DATE: 2022-11-20T17:20:49ZTTPS: T1222, T1012, T1082, T1005,...

Malware Analysis – dcrat – 21efb17d8cdfc5a764f02c17ed54fe79

November 20, 2022

Score: 10 MALWARE FAMILY: dcratTAGS:family:dcrat, family:djvu, family:redline, family:smokeloader, family:vidar, botnet:517, botnet:mario23_10, backdoor, collection, discovery, infostealer, persistence, ransomware, rat, spyware, stealer,...

Malware Analysis – djvu – 1b1a5244b8b950b1f739ad744a6a7f35

November 20, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 1b1a5244b8b950b1f739ad744a6a7f35SHA1: 105af99396ad894cb05b88ad86bf4597251845d2ANALYSIS DATE: 2022-11-20T17:46:47ZTTPS: T1082, T1005, T1081, T1060,...

Malware Analysis – smokeloader – 5bcddde0d6920439f9a1b054452da241

November 20, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 5bcddde0d6920439f9a1b054452da241SHA1: 1e85a796ca36a8d71def9f7876902f47b8707e85ANALYSIS DATE: 2022-11-20T17:21:13ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – persistence – 45aa3af5a677e30f98bcd9f8d4c68560

November 20, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 45aa3af5a677e30f98bcd9f8d4c68560SHA1: 4a8a2c33977ac7841f3b1448b0f48ffe571a81a6ANALYSIS DATE: 2022-11-20T09:30:51ZTTPS: T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – discovery – 32bc0de29c2dc883d3975d64cc173420

November 20, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploitMD5: 32bc0de29c2dc883d3975d64cc173420SHA1: 11ed5a99aba0928280212df3a9e4fceaef3823edANALYSIS DATE: 2022-11-20T09:01:36ZTTPS: T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – djvu – ce409409d45ed291fd548e63f27e9e3c

November 20, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: ce409409d45ed291fd548e63f27e9e3cSHA1: e94fc066fe43ae730ef72b7334481ee72be9c2e2ANALYSIS DATE: 2022-11-20T09:29:37ZTTPS: T1060, T1112, T1222, T1005,...

Bug Bounty

BugCrowd Bug Bounty Disclosure: – Panel access at https://news-push-88.op-mobile.opera.com/. – By rahul0x01

November 20, 2022

The below information is fully automated and the information is captured from the BugCrowd Disclosure website. The information was correct...

Bug Bounty

BugCrowd Bug Bounty Disclosure: – Impersonation via Broken Link Hijacking on https://sv.hellosign.com – By CoffeeAddict_exe

November 20, 2022

The below information is fully automated and the information is captured from the BugCrowd Disclosure website. The information was correct...

Cobalt Stike Beacon Detected – 107[.]175[.]91[.]16:8080

November 20, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 101[.]99[.]93[.]158:9090

November 20, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 43[.]139[.]84[.]166:80

November 20, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 46[.]3[.]199[.]184:4433

November 20, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – evasion – 444d141e21c6b3463c22460fbde9faf0

November 20, 2022

Score: 5 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 444d141e21c6b3463c22460fbde9faf0SHA1: b135ce8cfccf6eede4702630c0f64029235a1f07ANALYSIS DATE: 2022-11-20T10:00:12ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – djvu – c6c893e254a4a398585bc3637420d8eb

November 20, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: c6c893e254a4a398585bc3637420d8ebSHA1: 0cc97cb63c9f9d68aa66100fb9579d00e98a6801ANALYSIS DATE: 2022-11-20T10:20:11ZTTPS: T1005, T1081, T1060, T1112,...

Malware Analysis – discovery – 4fedcbbb748b46dfcc5bf5cd3b98ee97

November 20, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploitMD5: 4fedcbbb748b46dfcc5bf5cd3b98ee97SHA1: 1eb7e3a122e3aec420d022cf67d3b4c80073a008ANALYSIS DATE: 2022-11-20T10:48:42ZTTPS: T1222, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – discovery – 232c612b145c1bce0199d83106deff36

November 20, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploitMD5: 232c612b145c1bce0199d83106deff36SHA1: 95218e487c297036263c9334c1fb2c07535e4d99ANALYSIS DATE: 2022-11-20T09:35:12ZTTPS: T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Cobalt Stike Beacon Detected – 192[.]241[.]137[.]49:443

November 20, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 1[.]12[.]217[.]122:443

November 20, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 121[.]127[.]233[.]205:6666

November 20, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 8[.]134[.]94[.]89:9999

November 20, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – octo – db4d31e071fb45a9056f2f826c6b7fe2

November 20, 2022

Score: 10 MALWARE FAMILY: octoTAGS:family:octo, banker, evasion, infostealer, ransomware, rat, trojanMD5: db4d31e071fb45a9056f2f826c6b7fe2SHA1: 73f0554253906ce16b368cf2f6c25a4098ccfeb8ANALYSIS DATE: 2022-11-20T11:49:40ZTTPS: ScoreMeaningExample10Known badA malware family was...

Month: November 2022

Malware Analysis – djvu – f4d6bab1ae5f0408bf7a961ac4e1eec9

Malware Analysis – ransomware – c80f2a1c373d8ef42229e2919339cadd

Malware Analysis – djvu – a0696d00fa18ffeef932b2d4c2802aac

Malware Analysis – dcrat – 21efb17d8cdfc5a764f02c17ed54fe79

Malware Analysis – djvu – 1b1a5244b8b950b1f739ad744a6a7f35

Malware Analysis – smokeloader – 5bcddde0d6920439f9a1b054452da241

Malware Analysis – persistence – 45aa3af5a677e30f98bcd9f8d4c68560

Malware Analysis – discovery – 32bc0de29c2dc883d3975d64cc173420

Malware Analysis – djvu – ce409409d45ed291fd548e63f27e9e3c

BugCrowd Bug Bounty Disclosure: – Panel access at https://news-push-88.op-mobile.opera.com/. – By rahul0x01

BugCrowd Bug Bounty Disclosure: – Impersonation via Broken Link Hijacking on https://sv.hellosign.com – By CoffeeAddict_exe

Cobalt Stike Beacon Detected – 107[.]175[.]91[.]16:8080

Cobalt Stike Beacon Detected – 101[.]99[.]93[.]158:9090

Cobalt Stike Beacon Detected – 43[.]139[.]84[.]166:80

Cobalt Stike Beacon Detected – 46[.]3[.]199[.]184:4433

Malware Analysis – evasion – 444d141e21c6b3463c22460fbde9faf0

Malware Analysis – djvu – c6c893e254a4a398585bc3637420d8eb

Malware Analysis – discovery – 4fedcbbb748b46dfcc5bf5cd3b98ee97

Malware Analysis – discovery – 232c612b145c1bce0199d83106deff36

Cobalt Stike Beacon Detected – 192[.]241[.]137[.]49:443

Cobalt Stike Beacon Detected – 1[.]12[.]217[.]122:443

Cobalt Stike Beacon Detected – 121[.]127[.]233[.]205:6666

Cobalt Stike Beacon Detected – 8[.]134[.]94[.]89:9999

Malware Analysis – octo – db4d31e071fb45a9056f2f826c6b7fe2

[BLACKSUIT] – Ransomware Victim: SVP Worldwide

[QILIN] – Ransomware Victim: Imprimerie Peau

[KILLSEC] – Ransomware Victim: Sumitomo

Cobalt Strike Beacon Detected – 47[.]108[.]112[.]243:8443

Cobalt Strike Beacon Detected – 39[.]100[.]108[.]3:80

You may have missed