Year: 2022

Malware Analysis – djvu – 7e68ce2f41bf0114ed8f4d36bc04775e

November 12, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, family:vidar, botnet:10k, botnet:517, botnet:mario23_10, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5:...

Malware Analysis – ransomware – 421c94f6b69a84b3f869e69e98cb7aba

November 12, 2022

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 421c94f6b69a84b3f869e69e98cb7abaSHA1: b3c69e78f72c7a53778d039c4a7b3f4e56178212ANALYSIS DATE: 2022-11-12T09:40:45ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – a8abd14df130a28c2d766f6e5f1d2bec

November 12, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: a8abd14df130a28c2d766f6e5f1d2becSHA1: d56d47af3b8df18402ddb04e4fd25281847733aeANALYSIS DATE: 2022-11-12T09:51:03ZTTPS: T1222, T1012, T1082, T1060,...

Malware Analysis – djvu – 7b246691d38d8b3b386c6ab8a568ee82

November 12, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 7b246691d38d8b3b386c6ab8a568ee82SHA1: 27bb26f022f0bb08db80bf818bbffeb453ba7518ANALYSIS DATE: 2022-11-12T09:21:34ZTTPS: T1222, T1005, T1081, T1012,...

Cobalt Stike Beacon Detected – 42[.]194[.]213[.]51:80

November 12, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 34[.]126[.]143[.]129:443

November 12, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 192[.]241[.]137[.]49:80

November 12, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 84[.]32[.]190[.]246:443

November 12, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – 2d89df27036759a47dec7cd14f24d2f9

November 12, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, botnet:10k, botnet:mario23_10, backdoor, collection, discovery, infostealer, persistence, ransomware, trojanMD5: 2d89df27036759a47dec7cd14f24d2f9SHA1: 01f5452699d63546bf4f7f29a3bf79f4461d2ab5ANALYSIS DATE: 2022-11-12T10:02:43ZTTPS:...

Malware Analysis – djvu – c6520e4961189f550be153483734c3ad

November 12, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: c6520e4961189f550be153483734c3adSHA1: dc83d6fe27f0047bcf21386d5d3888299356d433ANALYSIS DATE: 2022-11-12T11:49:09ZTTPS: T1222, T1053, T1005, T1081,...

Malware Analysis – discovery – 31b407850c3c20bed39117100dbcc552

November 12, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, evasion, exploit, persistence, trojan, upxMD5: 31b407850c3c20bed39117100dbcc552SHA1: 735a4acaf958402497b9e1b14ab3cb539e58889bANALYSIS DATE: 2022-11-12T10:29:08ZTTPS: T1088, T1089, T1112, T1060, T1031, T1562,...

Malware Analysis – djvu – 66f3b491088476ded1308917739e2274

November 12, 2022

Daily Vulnerability Trends: Sat Nov 12 2022

November 12, 2022

Daily Vulnerability Trends (sourced from VulnMon) CVE NAMECVE DescriptionCVE-2022-40684An authentication bypass using an alternate path or channel in Fortinet FortiOS...

Bug Bounty

BugCrowd Bug Bounty Disclosure: – Panel access at https://news-push-88.op-mobile.opera.com/. – By rahul0x01

November 12, 2022

The below information is fully automated and the information is captured from the BugCrowd Disclosure website. The information was correct...

Malware Analysis – evasion – 419b3dfb0065321a023a7af508ed3b3c

November 12, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 419b3dfb0065321a023a7af508ed3b3cSHA1: 77f4bf098ec4978ecd68a8df69e165d8a635d6f6ANALYSIS DATE: 2022-11-12T03:51:40ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – – fe7e172e604ed0896708273fb4359893

November 12, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: fe7e172e604ed0896708273fb4359893SHA1: e5dbcc1f7e08c17c4dbdb2dfa92ad0dee7ab08f3ANALYSIS DATE: 2022-11-12T03:33:39ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – 39aed80fd34ae8027d60f28192456d4f

November 12, 2022

Malware Analysis – djvu – dd48e3880d41cd5bbf59aa4e4a178196

November 12, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: dd48e3880d41cd5bbf59aa4e4a178196SHA1: 24c9bd4cd34b604351065f9edbf7ba3465b7627eANALYSIS DATE: 2022-11-12T05:34:12ZTTPS: T1222, T1053, T1005, T1081,...

An initial access broker claims to have hacked Deutsche Bank

November 12, 2022

An initial access broker claims to have hacked Deutsche Bank and is offering access to its systems for sale on...

Cobalt Stike Beacon Detected – 51[.]89[.]205[.]14:10000

November 12, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 47[.]100[.]247[.]192:82

November 12, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Bug Bounty

Year: 2022

Malware Analysis – djvu – 7e68ce2f41bf0114ed8f4d36bc04775e

Malware Analysis – ransomware – 421c94f6b69a84b3f869e69e98cb7aba

Malware Analysis – djvu – a8abd14df130a28c2d766f6e5f1d2bec

Malware Analysis – djvu – 7b246691d38d8b3b386c6ab8a568ee82

Cobalt Stike Beacon Detected – 42[.]194[.]213[.]51:80

Cobalt Stike Beacon Detected – 34[.]126[.]143[.]129:443

Cobalt Stike Beacon Detected – 192[.]241[.]137[.]49:80

Cobalt Stike Beacon Detected – 84[.]32[.]190[.]246:443

Malware Analysis – djvu – 2d89df27036759a47dec7cd14f24d2f9

Malware Analysis – djvu – c6520e4961189f550be153483734c3ad

Malware Analysis – discovery – 31b407850c3c20bed39117100dbcc552

Malware Analysis – djvu – 66f3b491088476ded1308917739e2274

Daily Vulnerability Trends: Sat Nov 12 2022

BugCrowd Bug Bounty Disclosure: – Panel access at https://news-push-88.op-mobile.opera.com/. – By rahul0x01

Malware Analysis – evasion – 419b3dfb0065321a023a7af508ed3b3c

Malware Analysis – – fe7e172e604ed0896708273fb4359893

Malware Analysis – djvu – 39aed80fd34ae8027d60f28192456d4f

Malware Analysis – djvu – dd48e3880d41cd5bbf59aa4e4a178196

An initial access broker claims to have hacked Deutsche Bank

Cobalt Stike Beacon Detected – 51[.]89[.]205[.]14:10000

Cobalt Stike Beacon Detected – 47[.]100[.]247[.]192:82

BugCrowd Bug Bounty Disclosure: – Panel access at https://news-push-88.op-mobile.opera.com/. – By rahul0x01

Cobalt Stike Beacon Detected – 124[.]220[.]10[.]78:8443

Cobalt Stike Beacon Detected – 205[.]185[.]114[.]97:443

Otelier – 436,855 breached accounts

CISA: CISA Releases Five Industrial Control Systems Advisories

CISA: CISA Releases Best Practice Guidance for Mobile Communications

CISA: CISA Issues BOD 25-01, Implementing Secure Practices for Cloud Services

CISA: CISA and ONCD Release Playbook for Strengthening Cybersecurity in Federal Grant Programs for Critical Infrastructure

You may have missed