Month: January 2023

Cobalt Stike Beacon Detected – 18[.]205[.]189[.]67:443

January 9, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – 04a8fd3346eabeb3fefa118206f9aa1b

January 9, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 04a8fd3346eabeb3fefa118206f9aa1bSHA1: 92d3b89a5a9e53867c028a9a4569af7bd884663bANALYSIS DATE: 2023-01-08T22:42:47ZTTPS: T1222, T1012, T1082, T1005,...

Malware Analysis – dcrat – 4b63df4f727bc68412c39ae8cecd54fe

January 9, 2023

Score: 10 MALWARE FAMILY: dcratTAGS:family:dcrat, family:djvu, family:smokeloader, family:vidar, botnet:19, backdoor, collection, discovery, infostealer, persistence, ransomware, rat, spyware, stealer, trojanMD5: 4b63df4f727bc68412c39ae8cecd54feSHA1:...

Malware Analysis – djvu – 1de29ef9bed38c0a81a30a09369d8f7f

January 9, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 1de29ef9bed38c0a81a30a09369d8f7fSHA1: 52f41573d0ce0e4ea96380b0f23c1c5dea872c76ANALYSIS DATE: 2023-01-08T21:54:46ZTTPS: T1005, T1081, T1012, T1082,...

Month: January 2023

Cobalt Stike Beacon Detected – 18[.]205[.]189[.]67:443

Malware Analysis – djvu – 04a8fd3346eabeb3fefa118206f9aa1b

Malware Analysis – dcrat – 4b63df4f727bc68412c39ae8cecd54fe

Malware Analysis – djvu – 1de29ef9bed38c0a81a30a09369d8f7f

LockBit 3.0 Ransomware Victim: asianrecorp[.]com

HackerOne Bug Bounty Disclosure: race-condition-in-joining-ctf-groupbyzeyu2001

LockBit 3.0 Ransomware Victim: millennia[.]pro

BreachForums Database Leak Alert: EDAboard

Cobalt Stike Beacon Detected – 82[.]157[.]8[.]217:5555

Cobalt Stike Beacon Detected – 185[.]174[.]172[.]221:80

Cobalt Stike Beacon Detected – 101[.]42[.]27[.]149:80

AceLdr – Cobalt Strike UDRL For Memory Scanner Evasion

Cobalt Stike Beacon Detected – 206[.]119[.]81[.]220:8443

Cobalt Stike Beacon Detected – 175[.]178[.]193[.]194:443

Cobalt Stike Beacon Detected – 20[.]222[.]65[.]114:8000

Cobalt Stike Beacon Detected – 124[.]70[.]130[.]70:2222

BlackCat/ALPHV Ransomware Victim: Dental One

Cobalt Stike Beacon Detected – 8[.]141[.]166[.]112:443

Cobalt Stike Beacon Detected – 167[.]235[.]67[.]210:80

Cobalt Stike Beacon Detected – 194[.]135[.]24[.]253:443

Cobalt Stike Beacon Detected – 119[.]3[.]73[.]208:443

BlackCat/ALPHV Ransomware Victim: Pendulum Associates public website of data leak

BlackCat/ALPHV Ransomware Victim: Fruttagel

BlackCat/ALPHV Ransomware Victim: Grupo Estrategas EMM

[CACTUS] – Ransomware Victim: adveo[.]com

CVE Alert: CVE-2024-12891

CVE Alert: CVE-2024-12890

CVE Alert: CVE-2024-11852

CVE Alert: CVE-2024-12895

You may have missed