Month: January 2023

Malware Analysis – djvu – 1584bcd7634fb887f9cfa961bc759828

January 22, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 1584bcd7634fb887f9cfa961bc759828SHA1: 4e6832807c3303cfbde71c9a88f487a7cbe9b76eANALYSIS DATE: 2023-01-22T09:50:00ZTTPS: T1082, T1005, T1081, T1060,...

Malware Analysis – djvu – 651066b4edb5d4aaab16a5083645d9db

January 22, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 651066b4edb5d4aaab16a5083645d9dbSHA1: 43039594af889953321a09b6579a0a26798e157dANALYSIS DATE: 2023-01-22T09:04:59ZTTPS: T1053, T1005, T1081, T1012,...

Malware Analysis – discovery – 5353103470722f4778485e5874392a0a

January 22, 2023

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploit, persistenceMD5: 5353103470722f4778485e5874392a0aSHA1: 596b5989ba88f6a3aa7b4bdd97c8367526291575ANALYSIS DATE: 2023-01-22T09:43:57ZTTPS: T1222, T1060, T1112, T1012, T1120, T1082, T1158 ScoreMeaningExample10Known badA...

Malware Analysis – djvu – 8481d406605697e84dacab3bb8f0644a

January 22, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 8481d406605697e84dacab3bb8f0644aSHA1: ddd50a4c59f2324a8d5f8d890d0c0728e7062ad2ANALYSIS DATE: 2023-01-22T09:53:55ZTTPS: T1012, T1082, T1053, T1005,...

Malware Analysis – djvu – 243940be99aa38e3cc06b7f589064103

January 22, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 243940be99aa38e3cc06b7f589064103SHA1: f4b9ddd11cf143c1e1b21993172914e89a91418bANALYSIS DATE: 2023-01-22T11:42:54ZTTPS: T1060, T1112, T1005, T1081,...

Malware Analysis – djvu – e1e817e5b87307ca93a995eb612892f5

January 22, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: e1e817e5b87307ca93a995eb612892f5SHA1: cddcf161783f0de3b69d41e557c4c1f45cbb01c7ANALYSIS DATE: 2023-01-22T10:43:32ZTTPS: T1082, T1053, T1005, T1081,...

Malware Analysis – discovery – 8a9690b972368f4b037caabc85d2118f

January 22, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: 8a9690b972368f4b037caabc85d2118fSHA1: d209481d5629089db3ba95662110ec3efbfcdf7bANALYSIS DATE: 2023-01-22T10:30:28ZTTPS: T1012, T1082, T1060, T1112, T1130 ScoreMeaningExample10Known badA malware family...

Malware Analysis – discovery – b7cdd21a7d0fabcd1ce4168972768842

January 22, 2023

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomware, spyware, stealerMD5: b7cdd21a7d0fabcd1ce4168972768842SHA1: 93f6c45b6d57c9ba9938e0466bbbb1c6d6d64620ANALYSIS DATE: 2023-01-22T10:41:49ZTTPS: T1082, T1060, T1112, T1012, T1120, T1005, T1081...

Month: January 2023

Malware Analysis – djvu – 1584bcd7634fb887f9cfa961bc759828

Malware Analysis – djvu – 651066b4edb5d4aaab16a5083645d9db

Malware Analysis – discovery – 5353103470722f4778485e5874392a0a

Malware Analysis – djvu – 8481d406605697e84dacab3bb8f0644a

Malware Analysis – djvu – 243940be99aa38e3cc06b7f589064103

Malware Analysis – djvu – e1e817e5b87307ca93a995eb612892f5

Malware Analysis – discovery – 8a9690b972368f4b037caabc85d2118f

Malware Analysis – discovery – b7cdd21a7d0fabcd1ce4168972768842

LockBit 3.0 Ransomware Victim: miguelmechanical[.]com

LockBit 3.0 Ransomware Victim: ibb-business-team[.]de

Daily Vulnerability Trends: Sun Jan 22 2023

Tai-e – An Easy-To-Learn/Use Static Analysis Framework For Java

Cobalt Stike Beacon Detected – 100[.]26[.]163[.]51:443

Cobalt Stike Beacon Detected – 194[.]180[.]49[.]48:80

Cobalt Stike Beacon Detected – 23[.]227[.]202[.]188:443

Cobalt Stike Beacon Detected – 43[.]138[.]215[.]2:8001

Cobalt Stike Beacon Detected – 35[.]75[.]239[.]134:443

Cobalt Stike Beacon Detected – 37[.]72[.]168[.]213:80

Cobalt Stike Beacon Detected – 35[.]88[.]90[.]115:80

Cobalt Stike Beacon Detected – 179[.]43[.]187[.]24:80

Posh C2 Detected – 141[.]145[.]213[.]10:443

Royal Ransomware Victim: Pillar Resource Services

Exploits released for two Samsung Galaxy App Store vulnerabilities

The Week in Ransomware – January 20th 2023 – Targeting Crypto Exchanges

[AKIRA] – Ransomware Victim: Billet Precision (billetprecision[.]ca)

[CACTUS] – Ransomware Victim: ptcky[.]com

Cobalt Strike Beacon Detected – 112[.]124[.]71[.]123:443

Cobalt Strike Beacon Detected – 54[.]238[.]39[.]64:443

Cobalt Strike Beacon Detected – 103[.]30[.]40[.]70:80

You may have missed