Year: 2023

Malware Analysis – djvu – 58556e2d969b55db9c1731ee540cb31f

March 9, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 58556e2d969b55db9c1731ee540cb31fSHA1: e36eafc1c83133c0b4f322017b1be84e7c11eb9aANALYSIS DATE: 2023-03-09T17:38:47ZTTPS: T1060, T1112, T1012, T1005,...

Malware Analysis – djvu – 6bdc4ff9c91e4846d8924c28d7e909da

March 9, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 6bdc4ff9c91e4846d8924c28d7e909daSHA1: c504e74669f65893874e77d70d78c01526694d54ANALYSIS DATE: 2023-03-09T17:47:29ZTTPS: T1222, T1060, T1112, T1005,...

Malware Analysis – amadey – 7b8fa1719da67f606547a11c93356b2e

March 9, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:laplas, family:pseudomanuscrypt, family:smokeloader, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, botnet:pub1, botnet:sprg, backdoor, clipper, discovery, evasion, loader, persistence, ransomware,...

Malware Analysis – djvu – f65c1bc6f57a0964c1cb68ef89ad44c6

March 9, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: f65c1bc6f57a0964c1cb68ef89ad44c6SHA1: d46497b7e0200fc399e964339b0a7805f2551ab4ANALYSIS DATE: 2023-03-09T17:34:46ZTTPS: T1082, T1005, T1081, T1012,...

Year: 2023

Malware Analysis – djvu – 58556e2d969b55db9c1731ee540cb31f

Malware Analysis – djvu – 6bdc4ff9c91e4846d8924c28d7e909da

Malware Analysis – amadey – 7b8fa1719da67f606547a11c93356b2e

Malware Analysis – djvu – f65c1bc6f57a0964c1cb68ef89ad44c6

Hackers Exploiting Remote Desktop Software Flaws to Deploy PlugX Malware

IceFire Ransomware Exploits IBM Aspera Faspex to Attack Linux-Powered Enterprise Networks

Android March 2023 update fixes two critical code execution flaws

Acer confirms breach after 160GB of data for sale on hacking forum

DuckDuckGo launches AI-powered search query answering tool

New malware variant has “radio silence” mode to evade detection

Pen Testers using Vulnerability Scanners – Closing the Gap

Hospital Clínic de Barcelona severely impacted by ransomware attack

Emotet malware attacks return after three-month break

FBI investigates data breach impacting U.S. House members and staff

Bitwarden flaw can let hackers steal passwords using iframes

Ransomware gang posts video of data stolen from Minneapolis schools

Veeam fixes bug that lets hackers breach backup infrastructure

Fortinet warns of new critical unauthenticated RCE vulnerability

Iranian Hackers Target Women Involved in Human Rights and Middle East Politics

Does Your Help Desk Know Who’s Calling?

Cobalt Stike Beacon Detected – 179[.]43[.]162[.]6:10443

Cobalt Stike Beacon Detected – 39[.]98[.]167[.]247:80

Cobalt Stike Beacon Detected – 119[.]91[.]141[.]173:8001

Cobalt Stike Beacon Detected – 216[.]83[.]38[.]235:80

Cobalt Strike Beacon Detected – 182[.]160[.]14[.]158:7777

Cobalt Strike Beacon Detected – 106[.]75[.]247[.]91:443

Cobalt Strike Beacon Detected – 118[.]25[.]91[.]151:443

Cobalt Strike Beacon Detected – 39[.]98[.]40[.]53:8888

Cobalt Strike Beacon Detected – 156[.]224[.]19[.]17:443

You may have missed