Year: 2023

Malware Analysis – ransomware – b40a2374b51d487190fe535bb651aa3a

January 11, 2023

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: b40a2374b51d487190fe535bb651aa3aSHA1: 23213f8f9ee58c3166101af2869783c90dfdff14ANALYSIS DATE: 2023-01-11T04:45:06ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – 8f9be4dad34d877842a70ca602201c1e

January 11, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 8f9be4dad34d877842a70ca602201c1eSHA1: 80b757cd35aff9cb1e9ad2a3d0196e00f4a1c72fANALYSIS DATE: 2023-01-11T05:45:01ZTTPS: T1222, T1012, T1082, T1005,...

Malware Analysis – discovery – 2864e74ddbee0511dc655a73d2b96f2e

January 11, 2023

Score: 9 MALWARE FAMILY: discoveryTAGS:discovery, evasion, ransomwareMD5: 2864e74ddbee0511dc655a73d2b96f2eSHA1: baa9d261dcbaa6a30b639c89e5208d78d0e20975ANALYSIS DATE: 2023-01-11T05:54:02ZTTPS: T1490, T1082, T1012 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – evasion – 2a5d39cc97d1d96989d6dee25f0d64b2

January 11, 2023

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 2a5d39cc97d1d96989d6dee25f0d64b2SHA1: ba2a9973ef498265e2763ab3cadc03535265f773ANALYSIS DATE: 2023-01-11T04:45:32ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – dcrat – c4e73a6963047ced86ad548cb7a572ca

January 11, 2023

Score: 10 MALWARE FAMILY: dcratTAGS:family:dcrat, discovery, evasion, exploit, infostealer, rat, spyware, stealer, vmprotectMD5: c4e73a6963047ced86ad548cb7a572caSHA1: 9a983d43e8790aed5b205c87a05b034fd468a999ANALYSIS DATE: 2023-01-11T05:26:06ZTTPS: T1102, T1031, T1562,...

Cobalt Stike Beacon Detected – 45[.]43[.]36[.]198:443

January 11, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 143[.]110[.]156[.]32:80

January 11, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 23[.]227[.]202[.]66:443

January 11, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 3[.]122[.]103[.]39:4433

January 11, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 209[.]141[.]54[.]116:443

January 11, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 162[.]14[.]110[.]131:443

January 11, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – sodinokibi – fb9d11c5ff87dd9071ab44f4c562ca3e

January 11, 2023

Score: 10 MALWARE FAMILY: sodinokibiTAGS:family:sodinokibi, botnet:5, campaign:367, ransomwareMD5: fb9d11c5ff87dd9071ab44f4c562ca3eSHA1: 1e383b22a38c91373ba446a820d61883f282cb3eANALYSIS DATE: 2023-01-10T21:26:48ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – discovery – f8ad7ea13f1df856f9f35534b6f7ee00

January 11, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: f8ad7ea13f1df856f9f35534b6f7ee00SHA1: ef4321d51ef1bd2b8c233af61e92416605ddd0ddANALYSIS DATE: 2023-01-10T21:23:38ZTTPS: T1012, T1082, T1120, T1060, T1112 ScoreMeaningExample10Known badA malware family...

Malware Analysis – ransomware – d0dc1a6edd8ebd71b57770d1e38ea8e0

January 11, 2023

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: d0dc1a6edd8ebd71b57770d1e38ea8e0SHA1: 0d4f1c6aebeae7542de3964709312752a2ecb0a4ANALYSIS DATE: 2023-01-10T20:44:54ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – 429f28184209bae8fde861606d5ec96f

January 11, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 429f28184209bae8fde861606d5ec96fSHA1: cc0ac6987925c5e19f894e19e0a21afbd7440657ANALYSIS DATE: 2023-01-10T21:03:39ZTTPS: T1012, T1005, T1081, T1222,...

Cobalt Stike Beacon Detected – 185[.]48[.]86[.]75:9000

January 11, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 185[.]48[.]86[.]75:22222

January 11, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 185[.]48[.]86[.]75:3301

January 11, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 185[.]48[.]86[.]75:3002

January 11, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – sodinokibi – 61c19e7ce627da9b5004371f867a47d3

January 11, 2023

Score: 10 MALWARE FAMILY: sodinokibiTAGS:family:sodinokibi, botnet:5, campaign:367, ransomwareMD5: 61c19e7ce627da9b5004371f867a47d3SHA1: 4f3b4329871ec269043068a98e9cc929f603268dANALYSIS DATE: 2023-01-10T21:37:31ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – djvu – 10175425e3f29ba4e7637074ed2c8e26

January 11, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 10175425e3f29ba4e7637074ed2c8e26SHA1: abbaaf366d8dc619bccb1228a3829101767518cfANALYSIS DATE: 2023-01-10T21:31:59ZTTPS: T1060, T1112, T1082, T1005,...

Malware Analysis – aurora – 65d7785d36337dccd3f85dbe8c0358e5

January 11, 2023

Score: 10 MALWARE FAMILY: auroraTAGS:family:aurora, family:dcrat, family:djvu, family:icedid, family:smokeloader, family:vidar, botnet:19, campaign:3131022508, backdoor, banker, collection, discovery, infostealer, loader, persistence, ransomware,...

Malware Analysis – evasion – e43320002eb47ce45a5092c9fdb9c7d2

January 11, 2023

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: e43320002eb47ce45a5092c9fdb9c7d2SHA1: faede3fe537f629eb592d4ec7793fff2e2ee37abANALYSIS DATE: 2023-01-10T21:45:37ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Cobalt Stike Beacon Detected – 43[.]154[.]182[.]95:8443

January 11, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Year: 2023

Malware Analysis – ransomware – b40a2374b51d487190fe535bb651aa3a

Malware Analysis – djvu – 8f9be4dad34d877842a70ca602201c1e

Malware Analysis – discovery – 2864e74ddbee0511dc655a73d2b96f2e

Malware Analysis – evasion – 2a5d39cc97d1d96989d6dee25f0d64b2

Malware Analysis – dcrat – c4e73a6963047ced86ad548cb7a572ca

Cobalt Stike Beacon Detected – 45[.]43[.]36[.]198:443

Cobalt Stike Beacon Detected – 143[.]110[.]156[.]32:80

Cobalt Stike Beacon Detected – 23[.]227[.]202[.]66:443

Cobalt Stike Beacon Detected – 3[.]122[.]103[.]39:4433

Cobalt Stike Beacon Detected – 209[.]141[.]54[.]116:443

Cobalt Stike Beacon Detected – 162[.]14[.]110[.]131:443

Malware Analysis – sodinokibi – fb9d11c5ff87dd9071ab44f4c562ca3e

Malware Analysis – discovery – f8ad7ea13f1df856f9f35534b6f7ee00

Malware Analysis – ransomware – d0dc1a6edd8ebd71b57770d1e38ea8e0

Malware Analysis – djvu – 429f28184209bae8fde861606d5ec96f

Cobalt Stike Beacon Detected – 185[.]48[.]86[.]75:9000

Cobalt Stike Beacon Detected – 185[.]48[.]86[.]75:22222

Cobalt Stike Beacon Detected – 185[.]48[.]86[.]75:3301

Cobalt Stike Beacon Detected – 185[.]48[.]86[.]75:3002

Malware Analysis – sodinokibi – 61c19e7ce627da9b5004371f867a47d3

Malware Analysis – djvu – 10175425e3f29ba4e7637074ed2c8e26

Malware Analysis – aurora – 65d7785d36337dccd3f85dbe8c0358e5

Malware Analysis – evasion – e43320002eb47ce45a5092c9fdb9c7d2

Cobalt Stike Beacon Detected – 43[.]154[.]182[.]95:8443

CISA: CISA Releases the Cybersecurity Performance Goals Adoption Report

CISA: CISA Releases Four Industrial Control Systems Advisories

[AKIRA] – Ransomware Victim: Metalmatrix Clamps

[AKIRA] – Ransomware Victim: Capesesp

CVE Alert: CVE-2025-22822

You may have missed