Month: March 2023

Malware Analysis – djvu – eb11a424aa74ef4e9b9b4ee7a35be3c9

March 7, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: eb11a424aa74ef4e9b9b4ee7a35be3c9SHA1: 3fcb04a2c20398565d478df17080071da9be2b58ANALYSIS DATE: 2023-03-07T17:11:07ZTTPS: T1012, T1082, T1005, T1081, T1060,...

SYS01stealer: New Threat Using Facebook Ads to Target Critical Infrastructure Firms

March 7, 2023

Cybersecurity researchers have discovered a new information stealer dubbed SYS01stealer targeting critical government infrastructure employees, manufacturing companies, and other sectors....

Why Healthcare Can’t Afford to Ignore Digital Identity

March 7, 2023

Investing in digital identity can improve security, increase clinical productivity, and boost healthcare's bottom line. — by Gus Malezis, CEO...

Transparent Tribe Hackers Distribute CapraRAT via Trojanized Messaging Apps

March 7, 2023

A suspected Pakistan-aligned advanced persistent threat (APT) group known as Transparent Tribe has been linked to an ongoing cyber espionage...

Why Healthcare Can’t Afford to Ignore Digital Identity

March 7, 2023

Investing in digital identity can improve security, increase clinical productivity, and boost healthcare's bottom line. — by Gus Malezis, CEO...

Cobalt Stike Beacon Detected – 95[.]179[.]134[.]181:443

March 7, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 101[.]200[.]87[.]194:8001

March 7, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 193[.]233[.]175[.]106:443

March 7, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 171[.]22[.]30[.]252:80

March 7, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 88[.]210[.]37[.]215:80

March 7, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 163[.]123[.]142[.]213:80

March 7, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 124[.]220[.]159[.]81:5002

March 7, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 43[.]136[.]114[.]150:8011

March 7, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 101[.]42[.]34[.]190:2222

March 7, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – 538763ee8cd757f8b76910b9462f9839

March 7, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 538763ee8cd757f8b76910b9462f9839SHA1: 48e4827246b94774bace1b71d5a54227342d8349ANALYSIS DATE: 2023-03-07T10:36:03ZTTPS: T1012, T1005, T1081, T1060, T1112,...

Malware Analysis – djvu – b7e1bef5147966a3bf5ef3de4b709a9c

March 7, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: b7e1bef5147966a3bf5ef3de4b709a9cSHA1: c6a308580ab71bdad01e2fa9014fa6f9d503e104ANALYSIS DATE: 2023-03-07T10:31:23ZTTPS: T1005, T1081, T1060, T1112, T1222,...

Malware Analysis – djvu – e7c396ed9b591894062d5d0b76ccc94a

March 7, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: e7c396ed9b591894062d5d0b76ccc94aSHA1: ccbf43b6a8f55d5c38911346e05c3f4cc15d09d9ANALYSIS DATE: 2023-03-07T09:47:43ZTTPS: T1005, T1081, T1012, T1082, T1060,...

Malware Analysis – ransomware – b053584a149ba26ffc432f0ecf6d85c7

March 7, 2023

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: b053584a149ba26ffc432f0ecf6d85c7SHA1: c450f14e210b57f87415472d4889a4632d062d2cANALYSIS DATE: 2023-03-07T10:00:54ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Cobalt Stike Beacon Detected – 101[.]37[.]13[.]26:888

March 7, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 23[.]227[.]196[.]174:80

March 7, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 193[.]233[.]175[.]106:80

March 7, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 104[.]243[.]21[.]60:443

March 7, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Vim buffer overflow | CVE-2023-1170

March 7, 2023

NAME__________Vim buffer overflowPlatforms Affected:Vim Vim 9.0.1375Risk Level:7.3Exploitability:Proof of ConceptConsequences:Gain Access DESCRIPTION__________Vim is vulnerable to a heap-based buffer overflow, caused by...

Kitabisa teler-waf cross-site scripting | CVE-2023-26047

March 7, 2023

NAME__________Kitabisa teler-waf cross-site scriptingPlatforms Affected:Kitabisa teler-wafRisk Level:6.5Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Kitabisa teler-waf is vulnerable to cross-site scripting, caused by improper validation of...

Month: March 2023

Malware Analysis – djvu – eb11a424aa74ef4e9b9b4ee7a35be3c9

SYS01stealer: New Threat Using Facebook Ads to Target Critical Infrastructure Firms

Why Healthcare Can’t Afford to Ignore Digital Identity

Transparent Tribe Hackers Distribute CapraRAT via Trojanized Messaging Apps

Why Healthcare Can’t Afford to Ignore Digital Identity

Cobalt Stike Beacon Detected – 95[.]179[.]134[.]181:443

Cobalt Stike Beacon Detected – 101[.]200[.]87[.]194:8001

Cobalt Stike Beacon Detected – 193[.]233[.]175[.]106:443

Cobalt Stike Beacon Detected – 171[.]22[.]30[.]252:80

Cobalt Stike Beacon Detected – 88[.]210[.]37[.]215:80

Cobalt Stike Beacon Detected – 163[.]123[.]142[.]213:80

Cobalt Stike Beacon Detected – 124[.]220[.]159[.]81:5002

Cobalt Stike Beacon Detected – 43[.]136[.]114[.]150:8011

Cobalt Stike Beacon Detected – 101[.]42[.]34[.]190:2222

Malware Analysis – djvu – 538763ee8cd757f8b76910b9462f9839

Malware Analysis – djvu – b7e1bef5147966a3bf5ef3de4b709a9c

Malware Analysis – djvu – e7c396ed9b591894062d5d0b76ccc94a

Malware Analysis – ransomware – b053584a149ba26ffc432f0ecf6d85c7

Cobalt Stike Beacon Detected – 101[.]37[.]13[.]26:888

Cobalt Stike Beacon Detected – 23[.]227[.]196[.]174:80

Cobalt Stike Beacon Detected – 193[.]233[.]175[.]106:80

Cobalt Stike Beacon Detected – 104[.]243[.]21[.]60:443

Vim buffer overflow | CVE-2023-1170

Kitabisa teler-waf cross-site scripting | CVE-2023-26047

[RAWORLD] – Ransomware Victim: Co****nt

[KILLSEC] – Ransomware Victim: inv[[.][.][.]]nator

[KILLSEC] – Ransomware Victim: Ithbar

[KILLSEC] – Ransomware Victim: RiverRestHome

[KILLSEC] – Ransomware Victim: Dardoc

You may have missed