Year: 2022

Malware Analysis – ransomware – e0a1dea78f5ef86ec2d274e7e9bcb5c7

October 19, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: e0a1dea78f5ef86ec2d274e7e9bcb5c7SHA1: 5f62d188f5eb3038b36007b1b72b20f6b5d24cafANALYSIS DATE: 2022-10-18T22:40:42ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Cobalt Stike Beacon Detected – 82[.]156[.]14[.]220:8888

October 19, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 5[.]44[.]42[.]15:80

October 19, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 106[.]14[.]216[.]160:80

October 19, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 43[.]138[.]104[.]157:443

October 19, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – 816added67b8695ce1d08dc8d64224f9

October 19, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 816added67b8695ce1d08dc8d64224f9SHA1: 500c1d0c0dca3eb8e5a090e942136b140850567eANALYSIS DATE: 2022-10-18T22:54:22ZTTPS: T1012, T1082, T1222, T1053,...

Malware Analysis – wannacry – 8053c8e9171fa8fa75061b6639531671

October 19, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: 8053c8e9171fa8fa75061b6639531671SHA1: 25975c73b62751e4defcecb23e1df90627c5360eANALYSIS DATE: 2022-10-18T22:41:12ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – ransomware – deba4c78231b0c065ff368ad213a1d4c

October 19, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: deba4c78231b0c065ff368ad213a1d4cSHA1: c56bfd5cc3437c381900bcd6b424130bd4454660ANALYSIS DATE: 2022-10-18T22:41:04ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Cobalt Stike Beacon Detected – 39[.]99[.]147[.]117:8088

October 19, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – adef9b3445ea954ca3ec8a1f61daef01

October 19, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, backdoor, collection, discovery, persistence, ransomware, trojanMD5: adef9b3445ea954ca3ec8a1f61daef01SHA1: e4805b0e226fe27413f14679b04aefa5a701ef6fANALYSIS DATE: 2022-10-18T22:42:17ZTTPS: T1082, T1114, T1060, T1112,...

Cobalt Stike Beacon Detected – 45[.]91[.]67[.]44:443

October 19, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 47[.]97[.]0[.]61:80

October 19, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 43[.]154[.]57[.]146:8001

October 19, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Brute Ratel C4 Detected – 13[.]114[.]203[.]227:80

October 19, 2022

The Information provided at the time of posting was detected as "Brute Ratel C4". Depending on when you are viewing...

Brute Ratel C4 Detected – 54[.]178[.]240[.]29:80

October 19, 2022

The Information provided at the time of posting was detected as "Brute Ratel C4". Depending on when you are viewing...

Cobalt Stike Beacon Detected – 176[.]113[.]115[.]3:443

October 19, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 45[.]147[.]229[.]203:443

October 19, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 43[.]139[.]78[.]242:8090

October 19, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 81[.]161[.]229[.]92:443

October 19, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Software Patch Management Policy Best Practices

October 18, 2022

Explore the top risk-based patch management policy best practices to mitigate the growing threat of vulnerability exploits in your organization....

US-CERT Bulletin (SB22-290):Vulnerability Summary for the Week of October 10, 2022

October 18, 2022

The CISA Vulnerability Bulletin provides a summary of new vulnerabilities that have been recorded by the National Institute of Standards...

Malware Analysis – persistence – f5e72bf445387eddec000e0238adf873

October 18, 2022

Score: 8 MALWARE FAMILY: persistenceTAGS:persistenceMD5: f5e72bf445387eddec000e0238adf873SHA1: 895eb3047e7a28ce219fdd7e7ad5ce2a61312d93ANALYSIS DATE: 2022-10-18T14:13:51ZTTPS: T1060, T1112, T1082, T1018, T1012, T1120 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – evasion – a9692ba095ce225bfac0bb72c8617cab

October 18, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: a9692ba095ce225bfac0bb72c8617cabSHA1: 14731f119cdbeab86a3cdbef53dfadf345b97288ANALYSIS DATE: 2022-10-18T14:00:14ZTTPS: T1491, T1112, T1490, T1088, T1089, T1158, T1018, T1012,...

Malware Analysis – persistence – f558d2ee7175b0ace3d68b9363a22f94

October 18, 2022

Score: 8 MALWARE FAMILY: persistenceTAGS:persistenceMD5: f558d2ee7175b0ace3d68b9363a22f94SHA1: 6e530c9a3eddabc29c2f8f6aca6c6f786ae052d6ANALYSIS DATE: 2022-10-18T14:10:50ZTTPS: T1012, T1120, T1082, T1060, T1112, T1018 ScoreMeaningExample10Known badA malware family was...

Year: 2022

Malware Analysis – ransomware – e0a1dea78f5ef86ec2d274e7e9bcb5c7

Cobalt Stike Beacon Detected – 82[.]156[.]14[.]220:8888

Cobalt Stike Beacon Detected – 5[.]44[.]42[.]15:80

Cobalt Stike Beacon Detected – 106[.]14[.]216[.]160:80

Cobalt Stike Beacon Detected – 43[.]138[.]104[.]157:443

Malware Analysis – djvu – 816added67b8695ce1d08dc8d64224f9

Malware Analysis – wannacry – 8053c8e9171fa8fa75061b6639531671

Malware Analysis – ransomware – deba4c78231b0c065ff368ad213a1d4c

Cobalt Stike Beacon Detected – 39[.]99[.]147[.]117:8088

Malware Analysis – djvu – adef9b3445ea954ca3ec8a1f61daef01

Cobalt Stike Beacon Detected – 45[.]91[.]67[.]44:443

Cobalt Stike Beacon Detected – 47[.]97[.]0[.]61:80

Cobalt Stike Beacon Detected – 43[.]154[.]57[.]146:8001

Brute Ratel C4 Detected – 13[.]114[.]203[.]227:80

Brute Ratel C4 Detected – 54[.]178[.]240[.]29:80

Cobalt Stike Beacon Detected – 176[.]113[.]115[.]3:443

Cobalt Stike Beacon Detected – 45[.]147[.]229[.]203:443

Cobalt Stike Beacon Detected – 43[.]139[.]78[.]242:8090

Cobalt Stike Beacon Detected – 81[.]161[.]229[.]92:443

Software Patch Management Policy Best Practices

US-CERT Bulletin (SB22-290):Vulnerability Summary for the Week of October 10, 2022

Malware Analysis – persistence – f5e72bf445387eddec000e0238adf873

Malware Analysis – evasion – a9692ba095ce225bfac0bb72c8617cab

Malware Analysis – persistence – f558d2ee7175b0ace3d68b9363a22f94

CVE Alert: CVE-2025-23774

CVE Alert: CVE-2025-23781

CVE Alert: CVE-2025-23769

CVE Alert: CVE-2025-23768

CVE Alert: CVE-2025-23770

You may have missed