Year: 2023

Malware Analysis – djvu – e12951b5ae49474dbea669e60e41a8d3

January 2, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: e12951b5ae49474dbea669e60e41a8d3SHA1: 12efa9aac0739b08ed6ad59d871c4bba92a4d403ANALYSIS DATE: 2023-01-01T21:21:05ZTTPS: T1060, T1112, T1222, T1005,...

Malware Analysis – djvu – df249ff3cb8fb36e7c6ae05dc7b14250

January 2, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: df249ff3cb8fb36e7c6ae05dc7b14250SHA1: 4f1af06e54b0acce7c18bf341efcd581d86e439dANALYSIS DATE: 2023-01-01T21:44:18ZTTPS: T1012, T1082, T1060, T1112,...

Malware Analysis – banker – b96c2bc5e720dd7120af3b3015732fa7

January 2, 2023

Score: 8 MALWARE FAMILY: bankerTAGS:banker, ransomwareMD5: b96c2bc5e720dd7120af3b3015732fa7SHA1: daf90883b71f4a465a20055ec0b25d623cbb72c0ANALYSIS DATE: 2023-01-01T22:05:15ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Cobalt Stike Beacon Detected – 64[.]227[.]132[.]76:80

January 2, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – amadey – e780c60ae345b6925a4d2da8eafca3b2

January 2, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:vidar, botnet:19, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: e780c60ae345b6925a4d2da8eafca3b2SHA1: c083ed93f070ca7fbf591c29fbb6f35795efd7b9ANALYSIS...

Malware Analysis – amadey – d061fe68df14422113a7069698607dee

January 2, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:dcrat, family:djvu, family:smokeloader, family:vidar, botnet:19, backdoor, collection, discovery, infostealer, persistence, ransomware, rat, spyware, stealer, trojan,...

Malware Analysis – smokeloader – 99a72f7ff695ad0c6a7c697a43ad42f1

January 2, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 99a72f7ff695ad0c6a7c697a43ad42f1SHA1: 81cf997876a1395e4e20ba5c6d2de38e28fa40d8ANALYSIS DATE: 2023-01-01T23:02:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 35b4d8975b7d90a92362c4872da8e000

January 2, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 35b4d8975b7d90a92362c4872da8e000SHA1: 8ec2dedf76f45ea6ba1e089d2e8081d7c8ae0907ANALYSIS DATE: 2023-01-01T22:31:38ZTTPS: T1060, T1112, T1012, T1082,...

Cobalt Stike Beacon Detected – 106[.]55[.]2[.]194:2087

January 2, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 47[.]117[.]127[.]175:60001

January 2, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 20[.]166[.]65[.]7:443

January 2, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 170[.]130[.]55[.]188:1400

January 2, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Digital Binary Code on Dark Red Background. Data Breach

Benchmark – 93,343 breached accounts

January 1, 2023

In November 2019, the Serbian technology news website Benchmark suffered a breach of its forum that exposed 93k customer records....

Malware Analysis – ransomware – 91ad108862744c05daa83bfe37a7c8b1

January 1, 2023

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, upxMD5: 91ad108862744c05daa83bfe37a7c8b1SHA1: b5b3475be40bda4f75d3d24b547d44d60c03c61bANALYSIS DATE: 2023-01-01T08:58:57ZTTPS: T1082, T1012, T1120, T1107, T1490, T1491, T1112 ScoreMeaningExample10Known badA malware...

Malware Analysis – discovery – 5755c57c7d3b7304b42015c5dd34e5be

January 1, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, evasion, persistence, ransomwareMD5: 5755c57c7d3b7304b42015c5dd34e5beSHA1: 923d617a8a76195879a0eebc8a9794e00378450fANALYSIS DATE: 2023-01-01T09:38:40ZTTPS: T1060, T1112, T1012, T1082, T1031, T1053, T1158, T1042,...

Malware Analysis – djvu – 66e2b7371289dd956427b58b8dc7eb14

January 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 66e2b7371289dd956427b58b8dc7eb14SHA1: 9d6fb6efbad6863d21643c7f665c3aa2521aa54dANALYSIS DATE: 2023-01-01T09:34:48ZTTPS: T1082, T1053, T1222, T1012,...

Malware Analysis – amadey – 1b43fc5f83167e3ed72de7461fb2eb30

January 1, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:lgoogloader, family:smokeloader, family:vidar, botnet:19, backdoor, collection, discovery, downloader, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5:...

Cobalt Stike Beacon Detected – 1[.]15[.]141[.]252:5555

January 1, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 85[.]209[.]135[.]49:443

January 1, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 110[.]41[.]131[.]105:6666

January 1, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 1[.]15[.]141[.]252:443

January 1, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – smokeloader – 4040afcf9849e20e9305eb95cdd68ccc

January 1, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 4040afcf9849e20e9305eb95cdd68cccSHA1: 79b900321e613d55e919516e6db4e7d8d153ad1cANALYSIS DATE: 2023-01-01T11:12:17ZTTPS: T1012, T1120, T1082, T1112 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – – a0affa0816e523701464051054026e1c

January 1, 2023

Score: 3 MALWARE FAMILY: TAGS:MD5: a0affa0816e523701464051054026e1cSHA1: 470172daf36ce355162213e898616b8a775b846cANALYSIS DATE: 2023-01-01T09:44:16ZTTPS: T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – djvu – 89c3af6bef44ab50d7be35828dc5f1e3

January 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 89c3af6bef44ab50d7be35828dc5f1e3SHA1: b2ba0715cfbe5321bbc3e265fd5ec6998ad90c8cANALYSIS DATE: 2023-01-01T11:35:04ZTTPS: T1060, T1112, T1053, T1005,...

Year: 2023

Malware Analysis – djvu – e12951b5ae49474dbea669e60e41a8d3

Malware Analysis – djvu – df249ff3cb8fb36e7c6ae05dc7b14250

Malware Analysis – banker – b96c2bc5e720dd7120af3b3015732fa7

Cobalt Stike Beacon Detected – 64[.]227[.]132[.]76:80

Malware Analysis – amadey – e780c60ae345b6925a4d2da8eafca3b2

Malware Analysis – amadey – d061fe68df14422113a7069698607dee

Malware Analysis – smokeloader – 99a72f7ff695ad0c6a7c697a43ad42f1

Malware Analysis – djvu – 35b4d8975b7d90a92362c4872da8e000

Cobalt Stike Beacon Detected – 106[.]55[.]2[.]194:2087

Cobalt Stike Beacon Detected – 47[.]117[.]127[.]175:60001

Cobalt Stike Beacon Detected – 20[.]166[.]65[.]7:443

Cobalt Stike Beacon Detected – 170[.]130[.]55[.]188:1400

Benchmark – 93,343 breached accounts

Malware Analysis – ransomware – 91ad108862744c05daa83bfe37a7c8b1

Malware Analysis – discovery – 5755c57c7d3b7304b42015c5dd34e5be

Malware Analysis – djvu – 66e2b7371289dd956427b58b8dc7eb14

Malware Analysis – amadey – 1b43fc5f83167e3ed72de7461fb2eb30

Cobalt Stike Beacon Detected – 1[.]15[.]141[.]252:5555

Cobalt Stike Beacon Detected – 85[.]209[.]135[.]49:443

Cobalt Stike Beacon Detected – 110[.]41[.]131[.]105:6666

Cobalt Stike Beacon Detected – 1[.]15[.]141[.]252:443

Malware Analysis – smokeloader – 4040afcf9849e20e9305eb95cdd68ccc

Malware Analysis – – a0affa0816e523701464051054026e1c

Malware Analysis – djvu – 89c3af6bef44ab50d7be35828dc5f1e3

[LOCKBIT3] – Ransomware Victim: copral[.]com[.]br

[APT73] – Ransomware Victim: www[.]certifiedinfosec[.]com

[BLACKBASTA] – Ransomware Victim: vossko[.]de

[BLACKBASTA] – Ransomware Victim: lornestewartgroup[.]com

[BLACKBASTA] – Ransomware Victim: beko-technologies[.]com

You may have missed