Month: January 2023

Malware Analysis – djvu – 2da6d4339db80838dc502db0b617cb73

January 16, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 2da6d4339db80838dc502db0b617cb73SHA1: 8ddff06b81d2730a5c0936b58fb09a152e2d344cANALYSIS DATE: 2023-01-16T03:36:47ZTTPS: T1012, T1222, T1005, T1081,...

Malware Analysis – – de74fa2f38bcb8edff5987ea42007138

January 16, 2023

Score: 1 MALWARE FAMILY: TAGS:MD5: de74fa2f38bcb8edff5987ea42007138SHA1: 7b2eec524a7e4392876ebfec6db31595e3f992f9ANALYSIS DATE: 2023-01-16T02:34:55ZTTPS: T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – djvu – cbba9b2bd76c338b6862ba9f060db179

January 16, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: cbba9b2bd76c338b6862ba9f060db179SHA1: 0cce881e4b8ac94139f6905309657e96c60e1416ANALYSIS DATE: 2023-01-16T05:57:27ZTTPS: T1082, T1053, T1222, T1012,...

TikTok slapped with $5.4 million fine over cookie opt-out feature

January 16, 2023

France's data protection authority (CNIL) has fined TikTok UK and TikTok Ireland €5,000,000 for making it difficult for users of...

Cobalt Stike Beacon Detected – 45[.]195[.]8[.]162:4443

January 16, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 179[.]43[.]156[.]148:4433

January 16, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – dcrat – 2a08f537ca29735e25fc479034f46e43

January 16, 2023

Score: 10 MALWARE FAMILY: dcratTAGS:family:dcrat, adware, discovery, evasion, infostealer, persistence, ransomware, rat, spyware, stealer, trojanMD5: 2a08f537ca29735e25fc479034f46e43SHA1: 003fbfa6c1b854ee5832bb11546a1996dfe863acANALYSIS DATE: 2023-01-15T21:06:25ZTTPS: T1057,...

Malware Analysis – djvu – b75e4e75719c900be054b224a5221c07

January 16, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: b75e4e75719c900be054b224a5221c07SHA1: b594226373158a43cfee05bddfdc857c8f48cc2dANALYSIS DATE: 2023-01-15T21:10:34ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – gcleaner – fccdc206eb894b1dbcb6ad660a40ee95

January 16, 2023

Score: 10 MALWARE FAMILY: gcleanerTAGS:family:gcleaner, family:raccoon, family:redline, family:rhadamanthys, botnet:eb3a206cd939601b2a6d00ea009a6d7e, discovery, infostealer, loader, persistence, ransomware, spyware, stealer, upxMD5: fccdc206eb894b1dbcb6ad660a40ee95SHA1: ecc4470565cefa1e69a2405e53e6264905f5ae7eANALYSIS DATE:...

Malware Analysis – djvu – f197b19f2be5cb041a172f0d857d77da

January 16, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: f197b19f2be5cb041a172f0d857d77daSHA1: ec2475a61ae50baf7ded46e61624af270a1b58b9ANALYSIS DATE: 2023-01-15T21:46:44ZTTPS: T1222, T1082, T1053, T1012,...

Malware Analysis – banker – 90e2dc06ef7bad6290395185f376ce4f

January 16, 2023

Score: 8 MALWARE FAMILY: bankerTAGS:banker, ransomwareMD5: 90e2dc06ef7bad6290395185f376ce4fSHA1: 43cd9b028dc8e3e85b114b509c59f8fe9a16db54ANALYSIS DATE: 2023-01-15T22:32:49ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – djvu – b030f2d7b0d433544f85b28eef0fcc05

January 16, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: b030f2d7b0d433544f85b28eef0fcc05SHA1: de8c121a6eaba0cbbb44d8c1349093f462018570ANALYSIS DATE: 2023-01-15T23:30:44ZTTPS: T1012, T1053, T1060, T1112,...

Malware Analysis – djvu – 51e46b98e4c12a45cb16ee094737e22a

January 15, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 51e46b98e4c12a45cb16ee094737e22aSHA1: 340165063ae514b0e369b07054b53393b12da48dANALYSIS DATE: 2023-01-15T16:58:39ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – – 86986763bf7e37e43958ce829f8d28bb

January 15, 2023

Score: 1 MALWARE FAMILY: TAGS:MD5: 86986763bf7e37e43958ce829f8d28bbSHA1: cb8b579fb7f4cc1ec1c0ae4332393c02713afa76ANALYSIS DATE: 2023-01-15T17:40:54ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – 9e1cb6d53dac023bc1d00b41dd40b129

January 15, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 9e1cb6d53dac023bc1d00b41dd40b129SHA1: 61e6f7f37c454872b746cde3d5db3af9ef118c1eANALYSIS DATE: 2023-01-15T17:18:00ZTTPS: T1012, T1082, T1005, T1081,...

Malware Analysis – discovery – 8fc76676f1dc8184f7f20a1aef6baa66

January 15, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: 8fc76676f1dc8184f7f20a1aef6baa66SHA1: 5d8671bf023982bb25fb1cc1e4b77f0cf3ef6019ANALYSIS DATE: 2023-01-15T16:43:44ZTTPS: T1112, T1042, T1060, T1012, T1082 ScoreMeaningExample10Known badA malware family...

Month: January 2023

Malware Analysis – djvu – 2da6d4339db80838dc502db0b617cb73

Malware Analysis – – de74fa2f38bcb8edff5987ea42007138

Malware Analysis – djvu – cbba9b2bd76c338b6862ba9f060db179

TikTok slapped with $5.4 million fine over cookie opt-out feature

Cobalt Stike Beacon Detected – 45[.]195[.]8[.]162:4443

Cobalt Stike Beacon Detected – 179[.]43[.]156[.]148:4433

Malware Analysis – dcrat – 2a08f537ca29735e25fc479034f46e43

Malware Analysis – djvu – b75e4e75719c900be054b224a5221c07

Malware Analysis – gcleaner – fccdc206eb894b1dbcb6ad660a40ee95

Malware Analysis – djvu – f197b19f2be5cb041a172f0d857d77da

Malware Analysis – banker – 90e2dc06ef7bad6290395185f376ce4f

Malware Analysis – djvu – b030f2d7b0d433544f85b28eef0fcc05

Malware Analysis – djvu – 51e46b98e4c12a45cb16ee094737e22a

Malware Analysis – – 86986763bf7e37e43958ce829f8d28bb

Malware Analysis – djvu – 9e1cb6d53dac023bc1d00b41dd40b129

Malware Analysis – discovery – 8fc76676f1dc8184f7f20a1aef6baa66

AVIator – Antivirus Evasion Project

Cobalt Stike Beacon Detected – 199[.]253[.]29[.]85:443

Cobalt Stike Beacon Detected – 23[.]224[.]39[.]41:8081

Cisco Small Business RV016, RV042, RV042G, and RV082 Routers security bypass | CVE-2023-20025

Daily Vulnerability Trends: Sun Jan 15 2023

Brave browser’s new Snowflake feature help bypass Tor blocks

Canada’s largest alcohol retailer’s site hacked to steal credit cards

CircleCI’s hack caused by malware stealing engineer’s 2FA-backed session

[APT73] – Ransomware Victim: gureco[.]pl

[APT73] – Ransomware Victim: lgpunjab[.]gov[.]in

[INCRANSOM] – Ransomware Victim: IPE Engwicht

[HUNTERS] – Ransomware Victim: Aeris Energy

[HUNTERS] – Ransomware Victim: Jones & Mayer

You may have missed