Month: March 2023

Malware Analysis – – fe36158ca607e9aa15c18db622da2205

March 2, 2023

Score: 1 MALWARE FAMILY: TAGS:MD5: fe36158ca607e9aa15c18db622da2205SHA1: 3ad0c9e4f9b3da8b4ef081122706f5b1cc2fa736ANALYSIS DATE: 2023-03-02T09:45:09ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Cobalt Stike Beacon Detected – 106[.]13[.]1[.]223:8443

March 2, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 49[.]233[.]60[.]12:8080

March 2, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 107[.]182[.]18[.]105:443

March 2, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 45[.]88[.]170[.]91:444

March 2, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – ransomware – 2442d98f0b640d84868070686643c98f

March 2, 2023

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 2442d98f0b640d84868070686643c98fSHA1: afa3648074e1e3122457ca188316f5cdfa8db3d5ANALYSIS DATE: 2023-03-02T09:47:32ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – 92642c82cbcddaccd919e26283db00dd

March 2, 2023

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 92642c82cbcddaccd919e26283db00ddSHA1: b5da30677a203a55d00bc82472c1809f69c92af6ANALYSIS DATE: 2023-03-02T09:47:38ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – – 9b7fb8b2a3c19a37916304a41a299dc9

March 2, 2023

Score: 1 MALWARE FAMILY: TAGS:MD5: 9b7fb8b2a3c19a37916304a41a299dc9SHA1: eda4e89b108d75d64fdc932f59dae73f6a9b7122ANALYSIS DATE: 2023-03-02T09:45:10ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – – 1a1f978153c0fa0f1a64aa0eeb123fc7

March 2, 2023

Score: 1 MALWARE FAMILY: TAGS:MD5: 1a1f978153c0fa0f1a64aa0eeb123fc7SHA1: 111a254b8aa47a14bf1876e8746bae62a45540ecANALYSIS DATE: 2023-03-02T09:47:36ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Cobalt Stike Beacon Detected – 194[.]135[.]104[.]48:443

March 2, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 150[.]158[.]152[.]94:80

March 2, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 87[.]118[.]67[.]253:80

March 2, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 45[.]88[.]170[.]91:88

March 2, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – ransomware – a426291ab2a5b27e6537bf7bb9e4071b

March 2, 2023

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: a426291ab2a5b27e6537bf7bb9e4071bSHA1: ad62298e332879809d108d82bf218e453c9a6863ANALYSIS DATE: 2023-03-02T09:47:51ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – smokeloader – 6734fa8c61596e7943f5f21a7826ea50

March 2, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 6734fa8c61596e7943f5f21a7826ea50SHA1: f01d350779e9a8259bb0d615002307fcbfe618e1ANALYSIS DATE: 2023-03-02T10:36:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 9fbab18177592bf84a90c4cd0ebf8e22

March 2, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 9fbab18177592bf84a90c4cd0ebf8e22SHA1: 84095313167082a098dfa391e5ff5c30029b8df4ANALYSIS DATE: 2023-03-02T10:14:43ZTTPS: T1005, T1081, T1060, T1112, T1082,...

Malware Analysis – djvu – 6f54cf5ddedded46d96c176833372478

March 2, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 6f54cf5ddedded46d96c176833372478SHA1: 1301b09f354899bade707faafd4b3724e16f8220ANALYSIS DATE: 2023-03-02T10:03:26ZTTPS: T1012, T1082, T1005, T1081, T1060,...

Cobalt Stike Beacon Detected – 1[.]13[.]165[.]208:2083

March 2, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 116[.]62[.]127[.]33:3333

March 2, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 173[.]82[.]209[.]248:6666

March 2, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 13[.]230[.]229[.]15:443

March 2, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – 0ef58a88d61923cb849928dacba896fd

March 2, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 0ef58a88d61923cb849928dacba896fdSHA1: 0ec26137cb58c38270ab84322e981b5c28918f54ANALYSIS DATE: 2023-03-02T10:45:34ZTTPS: T1222, T1005, T1081, T1012, T1060,...

Malware Analysis – djvu – 5b9f667cb4ff77aea6c54982aa6caf28

March 2, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, backdoor, discovery, persistence, ransomware, stealer, trojanMD5: 5b9f667cb4ff77aea6c54982aa6caf28SHA1: 03e40c798ef1960543697fb49b93cb5e128f4e00ANALYSIS DATE: 2023-03-02T11:25:22ZTTPS: T1012, T1120, T1082,...

Malware Analysis – djvu – c977c86357445262618d0b6a86852ec8

March 2, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, backdoor, discovery, persistence, ransomware, spyware, stealer, trojanMD5: c977c86357445262618d0b6a86852ec8SHA1: da83fcb9d8954b4360b07cbcd175cc4000794711ANALYSIS DATE: 2023-03-02T10:41:03ZTTPS: T1012, T1082,...

Month: March 2023

Malware Analysis – – fe36158ca607e9aa15c18db622da2205

Cobalt Stike Beacon Detected – 106[.]13[.]1[.]223:8443

Cobalt Stike Beacon Detected – 49[.]233[.]60[.]12:8080

Cobalt Stike Beacon Detected – 107[.]182[.]18[.]105:443

Cobalt Stike Beacon Detected – 45[.]88[.]170[.]91:444

Malware Analysis – ransomware – 2442d98f0b640d84868070686643c98f

Malware Analysis – ransomware – 92642c82cbcddaccd919e26283db00dd

Malware Analysis – – 9b7fb8b2a3c19a37916304a41a299dc9

Malware Analysis – – 1a1f978153c0fa0f1a64aa0eeb123fc7

Cobalt Stike Beacon Detected – 194[.]135[.]104[.]48:443

Cobalt Stike Beacon Detected – 150[.]158[.]152[.]94:80

Cobalt Stike Beacon Detected – 87[.]118[.]67[.]253:80

Cobalt Stike Beacon Detected – 45[.]88[.]170[.]91:88

Malware Analysis – ransomware – a426291ab2a5b27e6537bf7bb9e4071b

Malware Analysis – smokeloader – 6734fa8c61596e7943f5f21a7826ea50

Malware Analysis – djvu – 9fbab18177592bf84a90c4cd0ebf8e22

Malware Analysis – djvu – 6f54cf5ddedded46d96c176833372478

Cobalt Stike Beacon Detected – 1[.]13[.]165[.]208:2083

Cobalt Stike Beacon Detected – 116[.]62[.]127[.]33:3333

Cobalt Stike Beacon Detected – 173[.]82[.]209[.]248:6666

Cobalt Stike Beacon Detected – 13[.]230[.]229[.]15:443

Malware Analysis – djvu – 0ef58a88d61923cb849928dacba896fd

Malware Analysis – djvu – 5b9f667cb4ff77aea6c54982aa6caf28

Malware Analysis – djvu – c977c86357445262618d0b6a86852ec8

[EVEREST] – Ransomware Victim: Concord Orthopaedics

[EVEREST] – Ransomware Victim: STIIIZY

[INCRANSOM] – Ransomware Victim: Pastor Real Estate

CVE Alert: CVE-2024-11387

CVE Alert: CVE-2024-10873

You may have missed