Year: 2022

Malware Analysis – eternity – b4865c2d9f23b7df972ab8a65e5e94b6

December 26, 2022

Score: 10 MALWARE FAMILY: eternityTAGS:family:eternity, evasion, ransomwareMD5: b4865c2d9f23b7df972ab8a65e5e94b6SHA1: bc3ecb00be5d812b72062be75ce7840bf1a5d9b3ANALYSIS DATE: 2022-12-25T21:32:27ZTTPS: T1082, T1012, T1018, T1053 ScoreMeaningExample10Known badA malware family was...

Cobalt Stike Beacon Detected – 91[.]215[.]85[.]132:443

December 26, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – 6d931e465782a502fbdada661a16eebd

December 26, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 6d931e465782a502fbdada661a16eebdSHA1: 5dbeafc4ddf81321c5da8f32c80f6ad3c62c0247ANALYSIS DATE: 2022-12-25T22:18:59ZTTPS: T1060, T1112, T1222, T1012, T1082, T1005,...

Malware Analysis – djvu – ade885da982e26adc6b611ee6c226af0

December 26, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: ade885da982e26adc6b611ee6c226af0SHA1: bc3772b05a374d5710fccfc819639ecbb1376facANALYSIS DATE: 2022-12-25T21:51:02ZTTPS: T1130, T1112, T1060, T1222, T1082, T1053 ScoreMeaningExample10Known badA...

Malware Analysis – djvu – f882c7d3c006924ed8bf740054023408

December 26, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: f882c7d3c006924ed8bf740054023408SHA1: 58628fadce724d96810028bef9fb530cea4e0d9dANALYSIS DATE: 2022-12-25T22:27:25ZTTPS: T1053, T1130, T1112, T1060, T1222, T1082 ScoreMeaningExample10Known badA...

Malware Analysis – djvu – 6127455acbf104c83d6cc50815fc2316

December 26, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 6127455acbf104c83d6cc50815fc2316SHA1: bca79f179b418b30f77a0c91c86c108213350461ANALYSIS DATE: 2022-12-25T21:37:27ZTTPS: T1222, T1053, T1005, T1081, T1012, T1082,...

Cobalt Stike Beacon Detected – 54[.]154[.]81[.]140:443

December 26, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 124[.]222[.]18[.]35:8080

December 26, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 199[.]195[.]248[.]79:80

December 26, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 54[.]211[.]60[.]243:443

December 26, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – dcrat – eb93bb98b4e0d01353c5706cd04decc7

December 26, 2022

Score: 10 MALWARE FAMILY: dcratTAGS:family:dcrat, discovery, evasion, exploit, infostealer, persistence, rat, trojanMD5: eb93bb98b4e0d01353c5706cd04decc7SHA1: 1ab3a1414e2c2681c32c19f11e837720241d4511ANALYSIS DATE: 2022-12-25T23:14:30ZTTPS: T1053, T1060, T1112, T1004,...

Malware Analysis – amadey – ae6fa6373d4c7b484b67811f50dff0f5

December 26, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, backdoor, discovery, persistence, ransomware, spyware, stealer, trojanMD5: ae6fa6373d4c7b484b67811f50dff0f5SHA1: 882bc23172d9b693a9cf3cc3fa4792df747ce125ANALYSIS DATE: 2022-12-25T23:04:55ZTTPS: T1012, T1082,...

Malware Analysis – djvu – decbd978afb892a6f27b6699f836c4cc

December 26, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: decbd978afb892a6f27b6699f836c4ccSHA1: 884ba14ea35d330117d33fbccdae5facdc13e0eeANALYSIS DATE: 2022-12-25T23:30:58ZTTPS: T1060, T1112, T1222, T1012, T1005, T1081,...

Malware Analysis – amadey – d28df046a6e01beabd8b3e07848b0a43

December 26, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: d28df046a6e01beabd8b3e07848b0a43SHA1: 9db28ba915eb8e28e4714bf87b8b824a88741f1aANALYSIS DATE: 2022-12-25T23:33:59ZTTPS: T1012,...

Cobalt Stike Beacon Detected – 121[.]196[.]165[.]107:6666

December 26, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 43[.]249[.]9[.]15:7788

December 26, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 43[.]143[.]19[.]165:443

December 26, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 121[.]41[.]96[.]3:443

December 26, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

HackerOne Bug Bounty Disclosure: talk-android-broadcast-receiver-is-not-protected-by-broadcastpermission-allowing-malicious-apps-to-communicatebyandyscherzinger

December 25, 2022

Programme HackerOne Nextcloud Nextcloud Submitted by andyscherzinger andyscherzinger Report Talk Android broadcast receiver is not protected by broadcastPermission allowing malicious...

HackerOne Bug Bounty Disclosure: developer-mistakebycoyemerald

December 25, 2022

Programme HackerOne MTN Group MTN Group Submitted by coyemerald coyemerald Report Developer Mistake Full Report A considerable amount of time...

HackerOne Bug Bounty Disclosure: exposure-of-admin-username-&-passwordbycoyemerald

December 25, 2022

Programme HackerOne MTN Group MTN Group Submitted by coyemerald coyemerald Report Exposure Of Admin Username & Password Full Report A...

HackerOne Bug Bounty Disclosure: nextcloudcmd-incorrectly-trusts-bad-tls-certificatesbytobiaskaminsky

December 25, 2022

Programme HackerOne Nextcloud Nextcloud Submitted by tobiaskaminsky tobiaskaminsky Report nextcloudcmd incorrectly trusts bad TLS certificates Full Report A considerable amount...

Royal Ransomware Victim: Atlatec SA de CV

December 25, 2022

RoyalRansomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the...

Malware Analysis – djvu – 6b363376a842d4622aab168749b56e06

December 25, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: 6b363376a842d4622aab168749b56e06SHA1: c060a576e0aa41d8854846438c9d4d15b2ebd201ANALYSIS DATE: 2022-12-25T15:05:51ZTTPS: T1082, T1053, T1130, T1112, T1060, T1222 ScoreMeaningExample10Known badA...

Year: 2022

Malware Analysis – eternity – b4865c2d9f23b7df972ab8a65e5e94b6

Cobalt Stike Beacon Detected – 91[.]215[.]85[.]132:443

Malware Analysis – djvu – 6d931e465782a502fbdada661a16eebd

Malware Analysis – djvu – ade885da982e26adc6b611ee6c226af0

Malware Analysis – djvu – f882c7d3c006924ed8bf740054023408

Malware Analysis – djvu – 6127455acbf104c83d6cc50815fc2316

Cobalt Stike Beacon Detected – 54[.]154[.]81[.]140:443

Cobalt Stike Beacon Detected – 124[.]222[.]18[.]35:8080

Cobalt Stike Beacon Detected – 199[.]195[.]248[.]79:80

Cobalt Stike Beacon Detected – 54[.]211[.]60[.]243:443

Malware Analysis – dcrat – eb93bb98b4e0d01353c5706cd04decc7

Malware Analysis – amadey – ae6fa6373d4c7b484b67811f50dff0f5

Malware Analysis – djvu – decbd978afb892a6f27b6699f836c4cc

Malware Analysis – amadey – d28df046a6e01beabd8b3e07848b0a43

Cobalt Stike Beacon Detected – 121[.]196[.]165[.]107:6666

Cobalt Stike Beacon Detected – 43[.]249[.]9[.]15:7788

Cobalt Stike Beacon Detected – 43[.]143[.]19[.]165:443

Cobalt Stike Beacon Detected – 121[.]41[.]96[.]3:443

HackerOne Bug Bounty Disclosure: talk-android-broadcast-receiver-is-not-protected-by-broadcastpermission-allowing-malicious-apps-to-communicatebyandyscherzinger

HackerOne Bug Bounty Disclosure: developer-mistakebycoyemerald

HackerOne Bug Bounty Disclosure: exposure-of-admin-username-&-passwordbycoyemerald

HackerOne Bug Bounty Disclosure: nextcloudcmd-incorrectly-trusts-bad-tls-certificatesbytobiaskaminsky

Royal Ransomware Victim: Atlatec SA de CV

Malware Analysis – djvu – 6b363376a842d4622aab168749b56e06

CISA: ASD’s ACSC, CISA, and US and International Partners Release Guidance on Choosing Secure and Verifiable Technologies

CISA: CISA Releases New Public Version of CDM Data Model Document

CISA: Cisco Releases Security Updates for NX-OS Software

CISA: Microsoft Releases December 2024 Security Updates

CISA: CISA Releases Two Industrial Control Systems Advisories

You may have missed