Month: January 2023

Malware Analysis – amadey – 875a57a33e01873ee9c566882252f2f9

January 1, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:dcrat, family:djvu, family:lgoogloader, family:smokeloader, family:vidar, botnet:19, backdoor, collection, discovery, downloader, infostealer, persistence, ransomware, rat, spyware,...

Malware Analysis – djvu – c32f1f18730491571309a796b9f38f46

January 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: c32f1f18730491571309a796b9f38f46SHA1: 2594f24d355cf087d0a69ed603293c202403acf2ANALYSIS DATE: 2022-12-31T21:01:23ZTTPS: T1005, T1081, T1060, T1112,...

Malware Analysis – discovery – 30cbb7176e5eff6db09b9ac58e2d0087

January 1, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, ransomwareMD5: 30cbb7176e5eff6db09b9ac58e2d0087SHA1: 383b8b1f5517c856df40eee799ab19689e7bbbbdANALYSIS DATE: 2022-12-31T22:42:09ZTTPS: T1130, T1112, T1012, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – cdc85b918fbbb00351af10de34cc606a

January 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: cdc85b918fbbb00351af10de34cc606aSHA1: e11c47a9601aa3deef7baaceded201e90b90f2afANALYSIS DATE: 2022-12-31T22:21:19ZTTPS: T1005, T1081, T1082, T1053,...

Malware Analysis – amadey – e9de3e39d8e212cd00a606f8e5b0f986

January 1, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:lgoogloader, family:smokeloader, family:vidar, botnet:19, backdoor, discovery, downloader, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: e9de3e39d8e212cd00a606f8e5b0f986SHA1:...

Malware Analysis – djvu – 49cbd9d2518f657fff793edb6e69aa34

January 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 49cbd9d2518f657fff793edb6e69aa34SHA1: 5811fa647ad74bc7162eec0de91cbb989bd30abfANALYSIS DATE: 2022-12-31T22:32:05ZTTPS: T1012, T1082, T1222, T1005,...

Cobalt Stike Beacon Detected – 121[.]127[.]233[.]205:443

January 1, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 120[.]40[.]7[.]23:8999

January 1, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 49[.]4[.]88[.]243:82

January 1, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – amadey – 01c5089df96b9c8da162b9a83c5056a8

January 1, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:lgoogloader, family:smokeloader, family:vidar, botnet:19, backdoor, collection, discovery, downloader, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5:...

Malware Analysis – amadey – 43fec7a0e3948a78bedf6cf27e9bf538

January 1, 2023

Malware Analysis – discovery – 3a02deed11f7ff4dbc1188d201ad164a

January 1, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: 3a02deed11f7ff4dbc1188d201ad164aSHA1: 5c935f5c25c2975ef384878bb094567fb19519c9ANALYSIS DATE: 2022-12-31T23:29:57ZTTPS: T1060, T1012, T1082, T1120, T1112 ScoreMeaningExample10Known badA malware family...

Malware Analysis – evasion – 7237bb5c2bcc4b19e8f574b3d9525df7

January 1, 2023

Score: 6 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 7237bb5c2bcc4b19e8f574b3d9525df7SHA1: 80e73da87d2c5f19a2c6c7ba0140520bb345acc3ANALYSIS DATE: 2022-12-31T22:47:53ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Posh C2 Detected – 52[.]62[.]27[.]203:4443

January 1, 2023

The Information provided at the time of posting was detected as "Posh C2". Depending on when you are viewing this...

Month: January 2023

Malware Analysis – amadey – 875a57a33e01873ee9c566882252f2f9

Malware Analysis – djvu – c32f1f18730491571309a796b9f38f46

Malware Analysis – discovery – 30cbb7176e5eff6db09b9ac58e2d0087

Malware Analysis – djvu – cdc85b918fbbb00351af10de34cc606a

Malware Analysis – amadey – e9de3e39d8e212cd00a606f8e5b0f986

Malware Analysis – djvu – 49cbd9d2518f657fff793edb6e69aa34

Cobalt Stike Beacon Detected – 121[.]127[.]233[.]205:443

Cobalt Stike Beacon Detected – 120[.]40[.]7[.]23:8999

Cobalt Stike Beacon Detected – 49[.]4[.]88[.]243:82

Malware Analysis – amadey – 01c5089df96b9c8da162b9a83c5056a8

Malware Analysis – amadey – 43fec7a0e3948a78bedf6cf27e9bf538

Malware Analysis – discovery – 3a02deed11f7ff4dbc1188d201ad164a

Malware Analysis – evasion – 7237bb5c2bcc4b19e8f574b3d9525df7

Posh C2 Detected – 52[.]62[.]27[.]203:4443

HackerOne Bug Bounty Disclosure: dom-based-cookie-bomb-in-acronis-com-via-x-clickref-get-parameter-mr-medi

HackerOne Bug Bounty Disclosure: external-storage-global-credentials-returned-to-the-client-side-in-plaintext-tuyenee

CISA: CISA Releases Seven Industrial Control Systems Advisories

CISA: CISA Releases Insights from Red Team Assessment of a U.S. Critical Infrastructure Sector Organization

[RANSOMHUB] – Ransomware Victim: www[.]damcapital[.]in

You may have missed