Month: March 2023

Malware Analysis – djvu – ef2cc8c767116bf59422002e4e54f28b

March 6, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: ef2cc8c767116bf59422002e4e54f28bSHA1: 1fc0a1115912a2fdfbd25761fa7ad4242e8d1ca2ANALYSIS DATE: 2023-03-05T23:00:55ZTTPS: T1222, T1005, T1081, T1012, T1060,...

Malware Analysis – ransomware – b75c02144d45715bf0cab2c2076104db

March 6, 2023

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: b75c02144d45715bf0cab2c2076104dbSHA1: 5dbf8b9d17fc58045fe59a3191fec2a05b5198edANALYSIS DATE: 2023-03-05T23:39:44ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – evasion – f5d73448dbe1ec4f9a8ec187f216d9e5

March 6, 2023

Score: 8 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomwareMD5: f5d73448dbe1ec4f9a8ec187f216d9e5SHA1: 6f76561bd09833c75ae8f0035dcb2bc87709e2e5ANALYSIS DATE: 2023-03-05T22:00:11ZTTPS: T1491, T1112, T1004, T1012, T1120, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – banker – 5b022926422f01bcd2439853b16ec38b

March 6, 2023

Score: 8 MALWARE FAMILY: bankerTAGS:banker, evasion, ransomwareMD5: 5b022926422f01bcd2439853b16ec38bSHA1: 5c90b4cb247bada9c082a03e4265fdf8d5177e32ANALYSIS DATE: 2023-03-05T23:10:19ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Cobalt Stike Beacon Detected – 1[.]13[.]82[.]101:4443

March 6, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 120[.]25[.]236[.]78:80

March 6, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 152[.]89[.]196[.]12:82

March 6, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 8[.]142[.]124[.]166:8443

March 6, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

HackerOne Bug Bounty Disclosure: argo-cd-reconciles-apps-outside-configured-namespaces-when-sharding-is-enabledbyczchen

March 5, 2023

Programme HackerOne Internet Bug Bounty Internet Bug Bounty Submitted by czchen czchen Report Argo CD reconciles apps outside configured namespaces...

Malware Analysis – djvu – dd8d98e1131e47cdb37a6cc78f94e6d1

March 5, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: dd8d98e1131e47cdb37a6cc78f94e6d1SHA1: bde5f558557f59556a00c3c7891564a271be4c49ANALYSIS DATE: 2023-03-05T15:11:43ZTTPS: T1060, T1112, T1222, T1012, T1005,...

Malware Analysis – hive – da13022097518d123a91a3958be326da

March 5, 2023

Score: 10 MALWARE FAMILY: hiveTAGS:family:hive, evasion, ransomware, spyware, stealer, trojan, upxMD5: da13022097518d123a91a3958be326daSHA1: 24a71ab462594d5a159bbf176588af951aba1381ANALYSIS DATE: 2023-03-05T16:36:37ZTTPS: T1005, T1081, T1107, T1490, T1112,...

Malware Analysis – djvu – baa8a14fa8c2b2db1b0b74ff0e4c1af3

March 5, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: baa8a14fa8c2b2db1b0b74ff0e4c1af3SHA1: f1788b075e799ea0c0f5d6a3b56ae157343c4161ANALYSIS DATE: 2023-03-05T17:10:49ZTTPS: T1222, T1005, T1081, T1060, T1112,...

Malware Analysis – djvu – 0a0ebfeb569497ad77dd163776b29422

March 5, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 0a0ebfeb569497ad77dd163776b29422SHA1: 525911955a20e39ae252044c3a1eb99cf97cbda9ANALYSIS DATE: 2023-03-05T17:30:08ZTTPS: T1222, T1082, T1005, T1081, T1012,...

Malware Analysis – evasion – f4dcbd5f5b985250924631a998237d27

March 5, 2023

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, ransomware, upxMD5: f4dcbd5f5b985250924631a998237d27SHA1: 432199480a137cdd63dc90255211cea766bb37d5ANALYSIS DATE: 2023-03-05T17:36:51ZTTPS: T1490, T1082, T1012, T1120, T1031, T1562, T1489 ScoreMeaningExample10Known badA...

Malware Analysis – djvu – 295dbead840d8746dd01b5a7ef6683ca

March 5, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 295dbead840d8746dd01b5a7ef6683caSHA1: 80c626286a6db802e56a8f40dd5078c7a5fc8794ANALYSIS DATE: 2023-03-05T17:26:24ZTTPS: T1060, T1112, T1005, T1081, T1222,...

Malware Analysis – djvu – 9fdb32ec78c101f060098ad1546e65d1

March 5, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 9fdb32ec78c101f060098ad1546e65d1SHA1: 0033639ce67337a8fa8aff778e0f40e6dbdabd71ANALYSIS DATE: 2023-03-05T17:50:08ZTTPS: T1005, T1081, T1222, T1082, T1012,...

Malware Analysis – djvu – da63a1ee5554cf0f1d3cab63ce093beb

March 5, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: da63a1ee5554cf0f1d3cab63ce093bebSHA1: d43dde52af0609602d839f101236fcae17169077ANALYSIS DATE: 2023-03-05T09:16:09ZTTPS: T1053, T1005, T1081, T1012, T1060,...

Malware Analysis – djvu – 2f16d4f7dd1bc6215c04993cecb0ac98

March 5, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 2f16d4f7dd1bc6215c04993cecb0ac98SHA1: 8405146f2ad4878cce5a39208d62b9669df9f53fANALYSIS DATE: 2023-03-05T09:32:09ZTTPS: T1012, T1082, T1005, T1081, T1060,...

Cobalt Stike Beacon Detected – 43[.]156[.]59[.]131:81

March 5, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 121[.]43[.]189[.]59:7777

March 5, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 139[.]196[.]47[.]225:8045

March 5, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 86[.]106[.]87[.]157:443

March 5, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – bootkit – 04c323daafc58fd9d2732528af94c893

March 5, 2023

Score: 10 MALWARE FAMILY: bootkitTAGS:bootkit, discovery, evasion, persistence, ransomware, trojanMD5: 04c323daafc58fd9d2732528af94c893SHA1: f62f470668806219024b4e8df6395b527ce77bd5ANALYSIS DATE: 2023-03-05T10:31:21ZTTPS: T1012, T1120, T1082, T1060, T1130, T1112,...

Malware Analysis – djvu – cf417c069d0d706bed68b75ef58d5258

March 5, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: cf417c069d0d706bed68b75ef58d5258SHA1: 170ce38f4aa735bc188b85e116a8708aeb54a3afANALYSIS DATE: 2023-03-05T09:35:47ZTTPS: T1012, T1082, T1005, T1081, T1060,...

Month: March 2023

Malware Analysis – djvu – ef2cc8c767116bf59422002e4e54f28b

Malware Analysis – ransomware – b75c02144d45715bf0cab2c2076104db

Malware Analysis – evasion – f5d73448dbe1ec4f9a8ec187f216d9e5

Malware Analysis – banker – 5b022926422f01bcd2439853b16ec38b

Cobalt Stike Beacon Detected – 1[.]13[.]82[.]101:4443

Cobalt Stike Beacon Detected – 120[.]25[.]236[.]78:80

Cobalt Stike Beacon Detected – 152[.]89[.]196[.]12:82

Cobalt Stike Beacon Detected – 8[.]142[.]124[.]166:8443

HackerOne Bug Bounty Disclosure: argo-cd-reconciles-apps-outside-configured-namespaces-when-sharding-is-enabledbyczchen

Malware Analysis – djvu – dd8d98e1131e47cdb37a6cc78f94e6d1

Malware Analysis – hive – da13022097518d123a91a3958be326da

Malware Analysis – djvu – baa8a14fa8c2b2db1b0b74ff0e4c1af3

Malware Analysis – djvu – 0a0ebfeb569497ad77dd163776b29422

Malware Analysis – evasion – f4dcbd5f5b985250924631a998237d27

Malware Analysis – djvu – 295dbead840d8746dd01b5a7ef6683ca

Malware Analysis – djvu – 9fdb32ec78c101f060098ad1546e65d1

Malware Analysis – djvu – da63a1ee5554cf0f1d3cab63ce093beb

Malware Analysis – djvu – 2f16d4f7dd1bc6215c04993cecb0ac98

Cobalt Stike Beacon Detected – 43[.]156[.]59[.]131:81

Cobalt Stike Beacon Detected – 121[.]43[.]189[.]59:7777

Cobalt Stike Beacon Detected – 139[.]196[.]47[.]225:8045

Cobalt Stike Beacon Detected – 86[.]106[.]87[.]157:443

Malware Analysis – bootkit – 04c323daafc58fd9d2732528af94c893

Malware Analysis – djvu – cf417c069d0d706bed68b75ef58d5258

[HUNTERS] – Ransomware Victim: Ace Laboratories Limited

CISA: JCDC’s Industry-Government Collaboration Speeds Mitigation of CrowdStrike IT Outage

CISA: CISA Releases Four Industrial Control Systems Advisories

CISA: Fortinet Updates Guidance and Indicators of Compromise following FortiManager Vulnerability Exploitation

CISA: CISA Releases Three Industrial Control Systems Advisories

You may have missed