Month: November 2022

abstract malware 990x400 1

Malware Analysis – djvu – 1738d172abefcfdfbb0f711f7d0deaef

November 20, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 1738d172abefcfdfbb0f711f7d0deaefSHA1: 974cae95f98809f53644a80416c80ce3f4a0fa92ANALYSIS DATE: 2022-11-20T11:18:06ZTTPS: T1060, T1112, T1005, T1081,...

abstract malware 990x400 1

Malware Analysis – persistence – 6593ee51226ea22ea668ad36b5c1c4e6

November 20, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 6593ee51226ea22ea668ad36b5c1c4e6SHA1: e6123de7c1c3cf70b22fb6336686db11717f1285ANALYSIS DATE: 2022-11-20T10:55:36ZTTPS: T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

abstract malware 990x400 1

Malware Analysis – evasion – 7942e895f8b745483dd75f02a0824194

November 20, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomwareMD5: 7942e895f8b745483dd75f02a0824194SHA1: ea6049f860b569d597e08f5d38383ac3d3c23a7fANALYSIS DATE: 2022-11-20T10:51:03ZTTPS: T1490, T1082, T1060, T1112 ScoreMeaningExample10Known badA malware family was...

empire

Empire C2 Detected – 45[.]76[.]144[.]44:80

November 20, 2022

The Information provided at the time of posting was detected as "Empire C2". Depending on when you are viewing this...

Cobalt Strike

Cobalt Stike Beacon Detected – 43[.]142[.]190[.]164:7777

November 20, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Strike

Cobalt Stike Beacon Detected – 47[.]92[.]146[.]183:80

November 20, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Strike

Cobalt Stike Beacon Detected – 43[.]143[.]136[.]106:443

November 20, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Strike

Cobalt Stike Beacon Detected – 119[.]8[.]126[.]102:443

November 20, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Strike

Cobalt Stike Beacon Detected – 121[.]41[.]59[.]127:7777

November 20, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Strike

Cobalt Stike Beacon Detected – 77[.]73[.]131[.]173:443

November 20, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Strike

Cobalt Stike Beacon Detected – 101[.]43[.]249[.]51:666

November 20, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Strike

Cobalt Stike Beacon Detected – 167[.]71[.]204[.]199:443

November 20, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

trend 19

Daily Vulnerability Trends: Sun Nov 20 2022

November 20, 2022

Daily Vulnerability Trends (sourced from VulnMon) CVE NAMECVE DescriptionCVE-2022-1388On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to...

abstract malware 990x400 1

Malware Analysis – amadey – 110c6deba0ed4284514f49524ac9d29a

November 20, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:redline, family:smokeloader, family:vidar, botnet:517, botnet:kript, botnet:mario23_10, backdoor, collection, discovery, evasion, infostealer, persistence, ransomware, spyware,...

abstract malware 990x400 1

Malware Analysis – amadey – 7cdccebf9285a347dfb87f5782bc3ee4

November 20, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:redline, family:smokeloader, family:vidar, botnet:517, botnet:kript, botnet:mario23_10, backdoor, collection, discovery, evasion, infostealer, persistence, ransomware, spyware,...

abstract malware 990x400 1

Malware Analysis – djvu – b67cf2b982f4094508f421068df76b94

November 20, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: b67cf2b982f4094508f421068df76b94SHA1: 31dfc5fd9b3b7f9783e1c61ec720b23c4276867bANALYSIS DATE: 2022-11-20T04:53:44ZTTPS: T1082, T1012, T1060, T1112, T1222 ScoreMeaningExample10Known badA malware...

abstract malware 990x400 1

Malware Analysis – persistence – 51414cafafbb43726a6ba86694384ef0

November 20, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 51414cafafbb43726a6ba86694384ef0SHA1: 91ea9b54db2958c8c0f2be01e59e0cfd9408be22ANALYSIS DATE: 2022-11-20T04:21:38ZTTPS: T1107, T1490, T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

abstract malware 990x400 1

Malware Analysis – xorist – 33755784b9128aabea98a2d4f0bebb86

November 20, 2022

Score: 10 MALWARE FAMILY: xoristTAGS:family:xorist, persistence, ransomware, spyware, stealer, upxMD5: 33755784b9128aabea98a2d4f0bebb86SHA1: 4e327c4deae1ca7199408dd3e33ee7feb692b6b0ANALYSIS DATE: 2022-11-20T04:19:10ZTTPS: T1060, T1112, T1005, T1081 ScoreMeaningExample10Known badA...

abstract malware 990x400 1

Malware Analysis – – 1f872a8d4204ee2b2f45a8c9256c66d5

November 20, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: 1f872a8d4204ee2b2f45a8c9256c66d5SHA1: 055d9baab0463e75672d7de4429f0c7b62d1be41ANALYSIS DATE: 2022-11-20T04:25:36ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

abstract malware 990x400 1

Malware Analysis – adware – 481372eb5aa7bdefca915f76943f9d00

November 20, 2022

Score: 8 MALWARE FAMILY: adwareTAGS:adware, discovery, exploit, persistence, stealer, upxMD5: 481372eb5aa7bdefca915f76943f9d00SHA1: 062719427aa3baab3869212cd05f84b69cea6e6eANALYSIS DATE: 2022-11-20T04:55:28ZTTPS: T1222, T1112, T1176, T1060 ScoreMeaningExample10Known badA...

abstract malware 990x400 1

Malware Analysis – adware – 41fd9ad511080c4aaaed93095d3d3b10

November 20, 2022

Score: 8 MALWARE FAMILY: adwareTAGS:adware, discovery, exploit, persistence, stealer, upxMD5: 41fd9ad511080c4aaaed93095d3d3b10SHA1: 7f4d8dfb8b6c6ef4b9c1802825a7f743961d7606ANALYSIS DATE: 2022-11-20T04:55:26ZTTPS: T1112, T1176, T1060, T1222 ScoreMeaningExample10Known badA...

abstract malware 990x400 1

Malware Analysis – adware – 40bc8153b39b1e4a540e84199f88af70

November 20, 2022

Score: 8 MALWARE FAMILY: adwareTAGS:adware, discovery, exploit, persistence, stealer, upxMD5: 40bc8153b39b1e4a540e84199f88af70SHA1: 03aac859a49f7ab2619d364434ff47fef8575d47ANALYSIS DATE: 2022-11-20T04:55:30ZTTPS: T1222, T1112, T1176, T1060 ScoreMeaningExample10Known badA...

abstract malware 990x400 1

Malware Analysis – adware – 40c0ffad85adcbc386ad53be16241c60

November 20, 2022

Score: 8 MALWARE FAMILY: adwareTAGS:adware, discovery, exploit, persistence, stealer, upxMD5: 40c0ffad85adcbc386ad53be16241c60SHA1: b3c7be235e9e34a7c6c33ff67978e5a0507c4bdaANALYSIS DATE: 2022-11-20T04:55:24ZTTPS: T1060, T1112, T1222, T1176 ScoreMeaningExample10Known badA...

abstract malware 990x400 1

Malware Analysis – discovery – 420e66c94fa92a84d6a6a0693aadd2f0

November 20, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploitMD5: 420e66c94fa92a84d6a6a0693aadd2f0SHA1: 76ab9090301c225949be30ad8d3050d2932686a1ANALYSIS DATE: 2022-11-20T04:59:42ZTTPS: T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

[BLACKSUIT] – Ransomware Victim: SVP Worldwide

November 2, 2024

[QILIN] – Ransomware Victim: Imprimerie Peau

November 2, 2024

[KILLSEC] – Ransomware Victim: Sumitomo

November 2, 2024

Cobalt Strike

Cobalt Strike Beacon Detected – 47[.]108[.]112[.]243:8443

November 2, 2024

Cobalt Strike

Cobalt Strike Beacon Detected – 39[.]100[.]108[.]3:80

November 2, 2024