Year: 2022

Malware Analysis – djvu – e5030e9f23f13afb77009eaf92e5b1af

October 11, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, family:vidar, botnet:517, botnet:buildnewdomain, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5: e5030e9f23f13afb77009eaf92e5b1afSHA1:...

Malware Analysis – dharma – c8436825a0549e82d500d7b5751c271f

October 11, 2022

Score: 10 MALWARE FAMILY: dharmaTAGS:family:dharma, persistence, ransomwareMD5: c8436825a0549e82d500d7b5751c271fSHA1: 5eee3cc7bba61c9ecf2bfc4c88a5f7370d378ea0ANALYSIS DATE: 2022-10-11T04:27:03ZTTPS: T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – smokeloader – d92523e6637cea6a19120c764fcf82a6

October 11, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: d92523e6637cea6a19120c764fcf82a6SHA1: 611e3b0191af111c8c79b172373c9f79a8db4794ANALYSIS DATE: 2022-10-11T04:31:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – b9b5214f8aedd0cc1d4fb66d5cb56bc1

October 11, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: b9b5214f8aedd0cc1d4fb66d5cb56bc1SHA1: ec50878f6bf713ddf85d0e55d79234e5548ec97fANALYSIS DATE: 2022-10-11T04:30:14ZTTPS: T1012, T1005, T1081, T1060,...

Malware Analysis – djvu – 1f0aacb506ee16071fd5d0fdee1db2a3

October 11, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 1f0aacb506ee16071fd5d0fdee1db2a3SHA1: a94db3eb4115a70f52049644874cdb78e6030868ANALYSIS DATE: 2022-10-11T04:32:45ZTTPS: T1082, T1053, T1005, T1081,...

Year: 2022

Malware Analysis – djvu – e5030e9f23f13afb77009eaf92e5b1af

Malware Analysis – dharma – c8436825a0549e82d500d7b5751c271f

Malware Analysis – smokeloader – d92523e6637cea6a19120c764fcf82a6

Malware Analysis – djvu – b9b5214f8aedd0cc1d4fb66d5cb56bc1

Malware Analysis – djvu – 1f0aacb506ee16071fd5d0fdee1db2a3

Malware Analysis – djvu – d92523e6637cea6a19120c764fcf82a6

Cobalt Stike Beacon Detected – 16[.]163[.]200[.]4:443

Cobalt Stike Beacon Detected – 149[.]28[.]76[.]119:443

Cobalt Stike Beacon Detected – 2[.]56[.]241[.]111:9999

Cobalt Stike Beacon Detected – 20[.]63[.]59[.]253:80

Cobalt Stike Beacon Detected – 47[.]103[.]30[.]47:8010

Cobalt Stike Beacon Detected – 78[.]128[.]112[.]139:443

Cobalt Stike Beacon Detected – 45[.]61[.]187[.]238:80

Cobalt Stike Beacon Detected – 81[.]69[.]39[.]123:8443

Cobalt Stike Beacon Detected – 47[.]99[.]177[.]59:5555

Cobalt Stike Beacon Detected – 43[.]140[.]244[.]151:8099

Cobalt Stike Beacon Detected – 20[.]63[.]59[.]253:443

Cobalt Stike Beacon Detected – 51[.]13[.]117[.]44:80

Cobalt Stike Beacon Detected – 15[.]235[.]155[.]140:443

Cobalt Stike Beacon Detected – 170[.]187[.]163[.]119:80

Cobalt Stike Beacon Detected – 8[.]142[.]69[.]99:55443

Cobalt Stike Beacon Detected – 43[.]142[.]107[.]110:80

Cobalt Stike Beacon Detected – 139[.]155[.]90[.]81:9999

Cobalt Stike Beacon Detected – 1[.]13[.]176[.]232:443

[AKIRA] – Ransomware Victim: Taking stock of 2024| Part 1

[QILIN] – Ransomware Victim: HEXPOL COMPOUNDING AMERICAS

[FUNKSEC] – Ransomware Victim: scriptkiddies and newbe researchers

[FUNKSEC] – Ransomware Victim: dms-ksa[.]com

CVE Alert: CVE-2025-0143

You may have missed