Year: 2023

Malware Analysis – ransomware – 636a8b982ad672755dae99ac2cb8410b

February 25, 2023

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 636a8b982ad672755dae99ac2cb8410bSHA1: acad7f4140ea8ec970a8c4c91ef7ac5e61ecc1ccANALYSIS DATE: 2023-02-24T22:05:58ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – eea32f0092b7de5879bea9e43614eb57

February 25, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, backdoor, discovery, evasion, persistence, ransomware, spyware, stealer, themida, trojan, vmprotectMD5: eea32f0092b7de5879bea9e43614eb57SHA1: a0889f72df365adc17f058102f439a7598e22e29ANALYSIS DATE:...

Malware Analysis – redline – 973978433de985f2e501f5a0484b1fc3

February 25, 2023

Score: 10 MALWARE FAMILY: redlineTAGS:family:redline, discovery, infostealer, persistence, ransomware, spywareMD5: 973978433de985f2e501f5a0484b1fc3SHA1: f93b4408195b0904cc84c9496cc3a54dcfa5a146ANALYSIS DATE: 2023-02-24T21:53:12ZTTPS: T1112, T1042, T1012, T1082, T1005, T1081,...

Cobalt Stike Beacon Detected – 45[.]76[.]79[.]8:80

February 25, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 37[.]220[.]87[.]75:443

February 25, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 154[.]88[.]14[.]34:8443

February 25, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 45[.]227[.]252[.]252:80

February 25, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – – 265024416449b79960ac63a4934a04ab

February 25, 2023

Score: 1 MALWARE FAMILY: TAGS:MD5: 265024416449b79960ac63a4934a04abSHA1: e37184e090f5c8b2d8ca68804c3b3b4161b35b49ANALYSIS DATE: 2023-02-24T22:59:11ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – 67d96d0e3bd084531027da3adb28c196

February 25, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 67d96d0e3bd084531027da3adb28c196SHA1: 8790617b397467bfef79a49572e08c6f0a38df61ANALYSIS DATE: 2023-02-24T23:54:28ZTTPS: T1222, T1005, T1081, T1060, T1112,...

Malware Analysis – discovery – 923a5ca3ef3ddec2506d0bffbae51930

February 25, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, evasion, exploit, persistence, spyware, stealer, trojan, upxMD5: 923a5ca3ef3ddec2506d0bffbae51930SHA1: b616b545db7cdef13318fa82a54ba8ad1878ec62ANALYSIS DATE: 2023-02-24T22:33:40ZTTPS: T1112, T1158, T1042, T1012,...

Malware Analysis – djvu – 917e23d9af8ffc41f59b222d4d0062b6

February 25, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 917e23d9af8ffc41f59b222d4d0062b6SHA1: 40b9dce6353fb98421c7d46f9fb4cdcf0134df94ANALYSIS DATE: 2023-02-24T23:55:39ZTTPS: T1012, T1082, T1005, T1081, T1060,...

Cobalt Stike Beacon Detected – 142[.]11[.]211[.]228:443

February 25, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 45[.]61[.]186[.]108:4433

February 25, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 47[.]94[.]3[.]175:55443

February 25, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 118[.]194[.]230[.]222:8443

February 25, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Hackers now exploit critical Fortinet bug to backdoor servers

February 24, 2023

Threat actors are targeting Internet-exposed Fortinet appliances with exploits targeting CVE-2022-39952, an unauthenticated file path manipulation vulnerability in the FortiNAC...

Google paid $12 million in bug bounties to security researchers

February 24, 2023

Google last year paid its highest bug bounty ever through the Vulnerability Reward Program for a critical exploit chain report...

New S1deload Stealer malware hijacks Youtube, Facebook accounts

February 24, 2023

An ongoing malware campaign targets YouTube and Facebook users, infecting their computers with a new information stealer that will hijack...

VMware warns admins of critical Carbon Black App Control flaw

February 24, 2023

VMware has released a critical security upgrade to address a critical injection vulnerability that impacts several versions of Carbon Black...

NSA shares guidance on how to secure your home network

February 24, 2023

The U.S. National Security Agency (NSA) has issued guidance to help remote workers secure their home networks and defend their...

Clasiopa hackers use new Atharvan malware in targeted attacks

February 24, 2023

Security researchers have observed a hacking group targeting companies in the materials research sector with a unique toolset that includes a...

Russian malware dev behind NLBrute hacking tool extradited to US

February 24, 2023

A Russian malware developer accused of creating and selling the NLBrute password-cracking tool was extradited to the United States after...

Hackers use fake ChatGPT apps to push Windows, Android malware

February 24, 2023

Threat actors are exploiting the popularity of OpenAI's ChatGPT chatbot to distribute malware for Windows and Android, or direct unsuspecting...

Fruit giant Dole suffers ransomware attack impacting operations

February 24, 2023

Dole Food Company, one of the world’s largest producers and distributors of fresh fruit and vegetables, has announced that it is...

Year: 2023

Malware Analysis – ransomware – 636a8b982ad672755dae99ac2cb8410b

Malware Analysis – djvu – eea32f0092b7de5879bea9e43614eb57

Malware Analysis – redline – 973978433de985f2e501f5a0484b1fc3

Cobalt Stike Beacon Detected – 45[.]76[.]79[.]8:80

Cobalt Stike Beacon Detected – 37[.]220[.]87[.]75:443

Cobalt Stike Beacon Detected – 154[.]88[.]14[.]34:8443

Cobalt Stike Beacon Detected – 45[.]227[.]252[.]252:80

Malware Analysis – – 265024416449b79960ac63a4934a04ab

Malware Analysis – djvu – 67d96d0e3bd084531027da3adb28c196

Malware Analysis – discovery – 923a5ca3ef3ddec2506d0bffbae51930

Malware Analysis – djvu – 917e23d9af8ffc41f59b222d4d0062b6

Cobalt Stike Beacon Detected – 142[.]11[.]211[.]228:443

Cobalt Stike Beacon Detected – 45[.]61[.]186[.]108:4433

Cobalt Stike Beacon Detected – 47[.]94[.]3[.]175:55443

Cobalt Stike Beacon Detected – 118[.]194[.]230[.]222:8443

Hackers now exploit critical Fortinet bug to backdoor servers

Google paid $12 million in bug bounties to security researchers

New S1deload Stealer malware hijacks Youtube, Facebook accounts

VMware warns admins of critical Carbon Black App Control flaw

NSA shares guidance on how to secure your home network

Clasiopa hackers use new Atharvan malware in targeted attacks

Russian malware dev behind NLBrute hacking tool extradited to US

Hackers use fake ChatGPT apps to push Windows, Android malware

Fruit giant Dole suffers ransomware attack impacting operations

[EVEREST] – Ransomware Victim: Solaris Pharma proof

CISA: CISA and Partners Release Call to Action to Close the National Software Understanding Gap

[EVEREST] – Ransomware Victim: Woodlake

[EVEREST] – Ransomware Victim: The Hoff Brand SL

[EVEREST] – Ransomware Victim: Volt Infrastructure

You may have missed