Year: 2022

Malware Analysis – persistence – 74161da72b92f3dc29efa72b75dcf86c

November 29, 2022

Score: 8 MALWARE FAMILY: persistenceTAGS:persistence, upxMD5: 74161da72b92f3dc29efa72b75dcf86cSHA1: 8490c1331b1c40ce986306d5dda51670f93fd78cANALYSIS DATE: 2022-11-28T23:44:23ZTTPS: T1082, T1112, T1060 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – amadey – ed825538b098836508f416d290fca2cd

November 29, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, backdoor, ransomware, trojanMD5: ed825538b098836508f416d290fca2cdSHA1: 526de1fc99079b354cc88ae4f0edc7af1d4f3345ANALYSIS DATE: 2022-11-28T23:03:47ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – chaos – e654d76dadfd3cefd9052a116afd0e00

November 29, 2022

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, family:satana, evasion, ransomware, spyware, stealerMD5: e654d76dadfd3cefd9052a116afd0e00SHA1: 0774c3f2cdf2ef9760d1cacaeb9464e6f59cf745ANALYSIS DATE: 2022-11-28T23:49:53ZTTPS: T1059, T1107, T1490, T1005, T1081, T1082,...

Cobalt Stike Beacon Detected – 13[.]212[.]194[.]232:444

November 29, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 43[.]139[.]129[.]211:4433

November 29, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 37[.]72[.]175[.]30:8443

November 29, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 1[.]15[.]223[.]168:80

November 29, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Brute Ratel C4 Detected – 54[.]238[.]217[.]34:80

November 29, 2022

The Information provided at the time of posting was detected as "Brute Ratel C4". Depending on when you are viewing...

Brute Ratel C4 Detected – 54[.]235[.]16[.]137:443

November 29, 2022

The Information provided at the time of posting was detected as "Brute Ratel C4". Depending on when you are viewing...

Posh C2 Detected – 62[.]182[.]159[.]147:443

November 29, 2022

The Information provided at the time of posting was detected as "Posh C2". Depending on when you are viewing this...

How a Unified Security Platform Protects the Cloud

November 28, 2022

Massive growth in cloud use has increased the enterprise attack surface. Addressing the risks with specialized point solutions is unwieldy,...

A flaw in some Acer laptops can be used to bypass security features

November 28, 2022

ESET announced the discovery of a vulnerability impacting Acer laptops that can allow an attacker to deactivate UEFI Secure Boot....

Malware Analysis – evasion – b870cbbdcbb65c7e4876d92054c75bef

November 28, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: b870cbbdcbb65c7e4876d92054c75befSHA1: dd48221df5b6c75725f9815d391061ea5cf45b71ANALYSIS DATE: 2022-11-27T16:28:45ZTTPS: T1082, T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 5444ea5d747585877117b5e173c825d5

November 28, 2022

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 5444ea5d747585877117b5e173c825d5SHA1: 5f82cb2b63c6b2d3339ef95702b407a77e131516ANALYSIS DATE: 2022-11-27T16:40:41ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – evasion – 902813c3b4a4c50398d7357503bda394

November 28, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 902813c3b4a4c50398d7357503bda394SHA1: b716dbfa3d478f75a652696b52c5595f352b46ceANALYSIS DATE: 2022-11-27T16:30:19ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – evasion – 235b62cd40799655d34d4b666eb01c9c

November 28, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 235b62cd40799655d34d4b666eb01c9cSHA1: 97647e03392682c129f1d3328fe1601f39ada449ANALYSIS DATE: 2022-11-27T16:34:54ZTTPS: T1060, T1112, T1107, T1490, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – evasion – ffa41da2d092e76175f9f5e5ab8c5cfc

November 28, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, infostealer, ransomwareMD5: ffa41da2d092e76175f9f5e5ab8c5cfcSHA1: b760e513b3cfa7f258e723374421b7665000dd35ANALYSIS DATE: 2022-11-27T16:56:25ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – ransomware – 8d7b1e050f3b3f9479f3fcd26f7c10b6

November 28, 2022

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 8d7b1e050f3b3f9479f3fcd26f7c10b6SHA1: e8eaa65e07d27847d33ac246e9cf60e91676678cANALYSIS DATE: 2022-11-27T17:09:44ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – f9b2ebb78236e7778a4b36c0ec5f0779

November 28, 2022

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: f9b2ebb78236e7778a4b36c0ec5f0779SHA1: cc9eea640550c71326b5b2b0cf5b176078e71112ANALYSIS DATE: 2022-11-27T17:09:42ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – 95b26739ec1dfdaf5d8f89d273507b78

November 28, 2022

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 95b26739ec1dfdaf5d8f89d273507b78SHA1: f47d541e0ff196d80dc57b76fe0c0b46ef889c2cANALYSIS DATE: 2022-11-27T17:09:39ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – e9a84209e588a97c574047c6f1561510

November 28, 2022

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: e9a84209e588a97c574047c6f1561510SHA1: 56beb79624d57dd99403a684e26de7e9c9502874ANALYSIS DATE: 2022-11-27T17:09:31ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – f4c4a07dda39ae0de834447df879580d

November 28, 2022

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: f4c4a07dda39ae0de834447df879580dSHA1: 932466864d42a238003721bb44c923ae8f0ae330ANALYSIS DATE: 2022-11-27T17:09:53ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – f31b0b393a3608e469523663c5c0cfd9

November 28, 2022

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: f31b0b393a3608e469523663c5c0cfd9SHA1: a09828567b18c60473fb0e6130b0f9faf2dbb094ANALYSIS DATE: 2022-11-27T17:09:56ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – 6746dc073b6523f032a956d4d1fbc45a

November 28, 2022

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 6746dc073b6523f032a956d4d1fbc45aSHA1: 51ee4f64f3471216238d96a6a5419aa1d6b1ff10ANALYSIS DATE: 2022-11-27T17:09:48ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Year: 2022

Malware Analysis – persistence – 74161da72b92f3dc29efa72b75dcf86c

Malware Analysis – amadey – ed825538b098836508f416d290fca2cd

Malware Analysis – chaos – e654d76dadfd3cefd9052a116afd0e00

Cobalt Stike Beacon Detected – 13[.]212[.]194[.]232:444

Cobalt Stike Beacon Detected – 43[.]139[.]129[.]211:4433

Cobalt Stike Beacon Detected – 37[.]72[.]175[.]30:8443

Cobalt Stike Beacon Detected – 1[.]15[.]223[.]168:80

Brute Ratel C4 Detected – 54[.]238[.]217[.]34:80

Brute Ratel C4 Detected – 54[.]235[.]16[.]137:443

Posh C2 Detected – 62[.]182[.]159[.]147:443

How a Unified Security Platform Protects the Cloud

A flaw in some Acer laptops can be used to bypass security features

Malware Analysis – evasion – b870cbbdcbb65c7e4876d92054c75bef

Malware Analysis – ransomware – 5444ea5d747585877117b5e173c825d5

Malware Analysis – evasion – 902813c3b4a4c50398d7357503bda394

Malware Analysis – evasion – 235b62cd40799655d34d4b666eb01c9c

Malware Analysis – evasion – ffa41da2d092e76175f9f5e5ab8c5cfc

Malware Analysis – ransomware – 8d7b1e050f3b3f9479f3fcd26f7c10b6

Malware Analysis – ransomware – f9b2ebb78236e7778a4b36c0ec5f0779

Malware Analysis – ransomware – 95b26739ec1dfdaf5d8f89d273507b78

Malware Analysis – ransomware – e9a84209e588a97c574047c6f1561510

Malware Analysis – ransomware – f4c4a07dda39ae0de834447df879580d

Malware Analysis – ransomware – f31b0b393a3608e469523663c5c0cfd9

Malware Analysis – ransomware – 6746dc073b6523f032a956d4d1fbc45a

Microsoft Monthly Security Update (January 2025)

Fortinet Products Multiple Vulnerabilities

CVE Alert: CVE-2025-23018

CVE Alert: CVE-2025-21137

CVE Alert: CVE-2025-23019

You may have missed