Month: February 2023

Malware Analysis – djvu – fc50d6268244b5ab8ab7bd8070e6b028

February 25, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: fc50d6268244b5ab8ab7bd8070e6b028SHA1: 8810d6b6e50d87582148779d11784d1aa85a4098ANALYSIS DATE: 2023-02-25T04:41:27ZTTPS: T1222, T1082, T1053, T1005, T1081,...

Malware Analysis – lockbit – 41687e58130c8bdca248e1403e565afb

February 25, 2023

Score: 10 MALWARE FAMILY: lockbitTAGS:family:lockbit, discovery, evasion, persistence, ransomwareMD5: 41687e58130c8bdca248e1403e565afbSHA1: 6eda5da62e5073a67ff89dd89b85328dd2df73d1ANALYSIS DATE: 2023-02-25T04:13:03ZTTPS: T1490, T1046, T1082, T1107, T1018, T1491, T1112,...

Malware Analysis – globeimposter – fe86425cab9eaa734756f4046f904add

February 25, 2023

Score: 10 MALWARE FAMILY: globeimposterTAGS:family:globeimposter, persistence, ransomware, spyware, stealerMD5: fe86425cab9eaa734756f4046f904addSHA1: b962129668cf1dbee5e62aa7c838c10848f092f1ANALYSIS DATE: 2023-02-25T05:08:09ZTTPS: T1060, T1112, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – persistence – 0af2e477464520e3599dc58deaef2741

February 25, 2023

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 0af2e477464520e3599dc58deaef2741SHA1: eff20e476c1f05198297f61df9013cc02aa8016bANALYSIS DATE: 2023-02-25T05:08:04ZTTPS: T1107, T1490, T1158, T1060, T1112, T1005, T1081 ScoreMeaningExample10Known...

Malware Analysis – ransomware – d7ffa478c250331ef391aa6c9627d652

February 25, 2023

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: d7ffa478c250331ef391aa6c9627d652SHA1: a7b12f2ddd36ccbcc6e85f3dfa9703b722969da6ANALYSIS DATE: 2023-02-25T04:52:33ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – globeimposter – 4a6a6b20f1cf998265b089feb5012ac7

February 25, 2023

Score: 10 MALWARE FAMILY: globeimposterTAGS:family:globeimposter, persistence, ransomware, spyware, stealerMD5: 4a6a6b20f1cf998265b089feb5012ac7SHA1: aa88da5ce9890bdf997f221a298ca18647f26288ANALYSIS DATE: 2023-02-25T05:08:03ZTTPS: T1005, T1081, T1082, T1060, T1112 ScoreMeaningExample10Known badA...

Malware Analysis – globeimposter – d3455af45341d4569fac4127ad4490c0

February 25, 2023

Score: 10 MALWARE FAMILY: globeimposterTAGS:family:globeimposter, persistence, ransomware, spyware, stealerMD5: d3455af45341d4569fac4127ad4490c0SHA1: 7fe6c8cb118bc4bd479494be578f55131cba7523ANALYSIS DATE: 2023-02-25T05:09:39ZTTPS: T1005, T1081, T1060, T1112 ScoreMeaningExample10Known badA malware...

Malware Analysis – globeimposter – 5efa19dc204e46e8d8c57482f80e7a40

February 25, 2023

Score: 10 MALWARE FAMILY: globeimposterTAGS:family:globeimposter, persistence, ransomware, spyware, stealerMD5: 5efa19dc204e46e8d8c57482f80e7a40SHA1: 5c83b3ddc8417fe64e0bbd3495445ddcee52e35eANALYSIS DATE: 2023-02-25T05:09:04ZTTPS: T1005, T1081, T1082, T1060, T1112 ScoreMeaningExample10Known badA...

Malware Analysis – djvu – 22672da74740ee00c44dc6613472ad67

February 25, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 22672da74740ee00c44dc6613472ad67SHA1: ca39f159b91efaff766817355c44bc1e17dacd7cANALYSIS DATE: 2023-02-25T05:26:28ZTTPS: T1005, T1081, T1012, T1082, T1222,...

Malware Analysis – – 75d5029fc19ed30017b1dfef4080e6df

February 25, 2023

Score: 1 MALWARE FAMILY: TAGS:MD5: 75d5029fc19ed30017b1dfef4080e6dfSHA1: 545b84f48c7b8cfd39d33e4e659be8365318a1d6ANALYSIS DATE: 2023-02-25T05:34:11ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – 2a769aad476e90904b8c865605eb4deb

February 25, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 2a769aad476e90904b8c865605eb4debSHA1: baca7c106a0bcc47ca8068334fbf987fb358cb53ANALYSIS DATE: 2023-02-24T21:50:50ZTTPS: T1053, T1012, T1082, T1005, T1081,...

Malware Analysis – asyncrat – 319a1b94c08f795f4f76d8f58f04b999

February 25, 2023

Score: 10 MALWARE FAMILY: asyncratTAGS:family:asyncrat, family:xworm, persistence, ransomware, rat, trojanMD5: 319a1b94c08f795f4f76d8f58f04b999SHA1: 179d0120f76a0c5d0080133187325af54e669605ANALYSIS DATE: 2023-02-24T21:31:52ZTTPS: T1060, T1112, T1012, T1082, T1053, T1491...

Cobalt Stike Beacon Detected – 150[.]158[.]55[.]102:443

February 25, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – 253efb250e4405950a48961913a5ed55

February 25, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 253efb250e4405950a48961913a5ed55SHA1: 2289e888d0ac933f1cd7f5eecce18db00d5a7904ANALYSIS DATE: 2023-02-24T22:11:56ZTTPS: T1060, T1112, T1053, T1012, T1082,...

Malware Analysis – ransomware – 636a8b982ad672755dae99ac2cb8410b

February 25, 2023

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 636a8b982ad672755dae99ac2cb8410bSHA1: acad7f4140ea8ec970a8c4c91ef7ac5e61ecc1ccANALYSIS DATE: 2023-02-24T22:05:58ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – eea32f0092b7de5879bea9e43614eb57

February 25, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, backdoor, discovery, evasion, persistence, ransomware, spyware, stealer, themida, trojan, vmprotectMD5: eea32f0092b7de5879bea9e43614eb57SHA1: a0889f72df365adc17f058102f439a7598e22e29ANALYSIS DATE:...

Malware Analysis – redline – 973978433de985f2e501f5a0484b1fc3

February 25, 2023

Score: 10 MALWARE FAMILY: redlineTAGS:family:redline, discovery, infostealer, persistence, ransomware, spywareMD5: 973978433de985f2e501f5a0484b1fc3SHA1: f93b4408195b0904cc84c9496cc3a54dcfa5a146ANALYSIS DATE: 2023-02-24T21:53:12ZTTPS: T1112, T1042, T1012, T1082, T1005, T1081,...

Cobalt Stike Beacon Detected – 45[.]76[.]79[.]8:80

February 25, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 37[.]220[.]87[.]75:443

February 25, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 154[.]88[.]14[.]34:8443

February 25, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 45[.]227[.]252[.]252:80

February 25, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – – 265024416449b79960ac63a4934a04ab

February 25, 2023

Score: 1 MALWARE FAMILY: TAGS:MD5: 265024416449b79960ac63a4934a04abSHA1: e37184e090f5c8b2d8ca68804c3b3b4161b35b49ANALYSIS DATE: 2023-02-24T22:59:11ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – 67d96d0e3bd084531027da3adb28c196

February 25, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 67d96d0e3bd084531027da3adb28c196SHA1: 8790617b397467bfef79a49572e08c6f0a38df61ANALYSIS DATE: 2023-02-24T23:54:28ZTTPS: T1222, T1005, T1081, T1060, T1112,...

Malware Analysis – discovery – 923a5ca3ef3ddec2506d0bffbae51930

February 25, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, evasion, exploit, persistence, spyware, stealer, trojan, upxMD5: 923a5ca3ef3ddec2506d0bffbae51930SHA1: b616b545db7cdef13318fa82a54ba8ad1878ec62ANALYSIS DATE: 2023-02-24T22:33:40ZTTPS: T1112, T1158, T1042, T1012,...

Month: February 2023

Malware Analysis – djvu – fc50d6268244b5ab8ab7bd8070e6b028

Malware Analysis – lockbit – 41687e58130c8bdca248e1403e565afb

Malware Analysis – globeimposter – fe86425cab9eaa734756f4046f904add

Malware Analysis – persistence – 0af2e477464520e3599dc58deaef2741

Malware Analysis – ransomware – d7ffa478c250331ef391aa6c9627d652

Malware Analysis – globeimposter – 4a6a6b20f1cf998265b089feb5012ac7

Malware Analysis – globeimposter – d3455af45341d4569fac4127ad4490c0

Malware Analysis – globeimposter – 5efa19dc204e46e8d8c57482f80e7a40

Malware Analysis – djvu – 22672da74740ee00c44dc6613472ad67

Malware Analysis – – 75d5029fc19ed30017b1dfef4080e6df

Malware Analysis – djvu – 2a769aad476e90904b8c865605eb4deb

Malware Analysis – asyncrat – 319a1b94c08f795f4f76d8f58f04b999

Cobalt Stike Beacon Detected – 150[.]158[.]55[.]102:443

Malware Analysis – djvu – 253efb250e4405950a48961913a5ed55

Malware Analysis – ransomware – 636a8b982ad672755dae99ac2cb8410b

Malware Analysis – djvu – eea32f0092b7de5879bea9e43614eb57

Malware Analysis – redline – 973978433de985f2e501f5a0484b1fc3

Cobalt Stike Beacon Detected – 45[.]76[.]79[.]8:80

Cobalt Stike Beacon Detected – 37[.]220[.]87[.]75:443

Cobalt Stike Beacon Detected – 154[.]88[.]14[.]34:8443

Cobalt Stike Beacon Detected – 45[.]227[.]252[.]252:80

Malware Analysis – – 265024416449b79960ac63a4934a04ab

Malware Analysis – djvu – 67d96d0e3bd084531027da3adb28c196

Malware Analysis – discovery – 923a5ca3ef3ddec2506d0bffbae51930

CISA: ASD’s ACSC, CISA, and US and International Partners Release Guidance on Choosing Secure and Verifiable Technologies

CISA: CISA Releases New Public Version of CDM Data Model Document

CISA: Cisco Releases Security Updates for NX-OS Software

CISA: Microsoft Releases December 2024 Security Updates

CISA: CISA Releases Two Industrial Control Systems Advisories

You may have missed