Year: 2023

Malware Analysis – ransomware – d8c43ed3de8a96a1772e4a87f8cc7685

March 6, 2023

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: d8c43ed3de8a96a1772e4a87f8cc7685SHA1: fecc46b4c1d8e3a12a04ab32451ddbe799af2fd7ANALYSIS DATE: 2023-03-06T10:08:07ZTTPS: T1012, T1120, T1082, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ransomware – 166c61424c79b082c52448d66f66156f

March 6, 2023

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 166c61424c79b082c52448d66f66156fSHA1: 0cbd03202b50932f24da07bc91f0aa1e579177f4ANALYSIS DATE: 2023-03-06T10:07:04ZTTPS: T1107, T1490, T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ransomware – ee57cb6c0e2292903b33adf62a2a7810

March 6, 2023

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: ee57cb6c0e2292903b33adf62a2a7810SHA1: 7715b284d29880a7f4e1df067d030410e1213a58ANALYSIS DATE: 2023-03-06T10:06:03ZTTPS: T1012, T1120, T1082, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Cobalt Stike Beacon Detected – 101[.]43[.]215[.]118:9090

March 6, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 81[.]68[.]136[.]116:80

March 6, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 118[.]195[.]172[.]110:8012

March 6, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – 70a8331725cb661616a8082d5b943a35

March 6, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 70a8331725cb661616a8082d5b943a35SHA1: c88a37a811ab884a26ecdf4b29ffce8387a08fd2ANALYSIS DATE: 2023-03-06T10:37:39ZTTPS: T1005, T1081, T1060, T1112, T1222,...

Malware Analysis – djvu – aced83bf00dcddbe5b90f7f43ccd272f

March 6, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: aced83bf00dcddbe5b90f7f43ccd272fSHA1: 39e6dffb435a2c506f14252fc8acdfb0135e2111ANALYSIS DATE: 2023-03-06T10:20:36ZTTPS: T1012, T1082, T1005, T1081, T1060,...

Malware Analysis – djvu – 0b8588379ad0cc771f8d05e0fbf72487

March 6, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 0b8588379ad0cc771f8d05e0fbf72487SHA1: 39975389c5a3020cd51a65af82279466cf679d37ANALYSIS DATE: 2023-03-06T10:43:40ZTTPS: T1012, T1082, T1005, T1081, T1222,...

Malware Analysis – djvu – a3cb7cdc9bfe987e3a9d962a3a704c75

March 6, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: a3cb7cdc9bfe987e3a9d962a3a704c75SHA1: 3aafc32da690dd5b16f920b23fe3d28aa3bb3ea3ANALYSIS DATE: 2023-03-06T10:13:49ZTTPS: T1082, T1012, T1005, T1081, T1060,...

Cobalt Stike Beacon Detected – 20[.]246[.]185[.]142:80

March 6, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 84[.]32[.]34[.]97:80

March 6, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 43[.]142[.]87[.]35:443

March 6, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 179[.]43[.]187[.]185:8080

March 6, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – ransomware – 72d3f7ad0028d359a27ff01d920b3497

March 6, 2023

Score: 5 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 72d3f7ad0028d359a27ff01d920b3497SHA1: 6b07f1fab9d1598d68bc0b726155ba70a6840477ANALYSIS DATE: 2023-03-06T11:49:23ZTTPS: T1491, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – chaos – 84dbf5b66139cf86f87ac1d420c736c9

March 6, 2023

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, ransomware, spyware, stealerMD5: 84dbf5b66139cf86f87ac1d420c736c9SHA1: 4ca604aec1c66194182b25c4cc0fdf17ef9eeb7fANALYSIS DATE: 2023-03-06T11:20:06ZTTPS: T1005, T1081, T1082 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – djvu – 76a1e1bfd28d7125af316d6e6b72ad4a

March 6, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 76a1e1bfd28d7125af316d6e6b72ad4aSHA1: b07d28b37e1ba0c3ff482171550599d4ea6c159dANALYSIS DATE: 2023-03-06T10:45:13ZTTPS: T1012, T1053, T1060, T1112, T1005,...

Malware Analysis – lockbit – 290ee6b6f6b2a5f0899a6f35073f8eb4

March 6, 2023

Score: 10 MALWARE FAMILY: lockbitTAGS:family:lockbit, ransomwareMD5: 290ee6b6f6b2a5f0899a6f35073f8eb4SHA1: 4fe51b2fd9b481f74f5b56ecb2ab97b3268ba6d0ANALYSIS DATE: 2023-03-06T11:49:07ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Cobalt Stike Beacon Detected – 79[.]137[.]198[.]115:443

March 6, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 77[.]91[.]78[.]185:443

March 6, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 1[.]15[.]141[.]252:8080

March 6, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 57[.]128[.]195[.]112:8443

March 6, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

JTEKT ELECTRONICS Kostac PLC Programming Software code execution | CVE-2023-22424

March 6, 2023

NAME__________JTEKT ELECTRONICS Kostac PLC Programming Software code executionPlatforms Affected:JTEKT ELECTRONICS Kostac PLC Programming Software 1.6.9.0Risk Level:7.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________JTEKT ELECTRONICS Kostac...

finixbit elf-parser denial of service | CVE-2023-1157

March 6, 2023

NAME__________finixbit elf-parser denial of servicePlatforms Affected:finixbit elf-parserRisk Level:2.8Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________finixbit elf-parser is vulnerable to a denial of service, caused...

Year: 2023

Malware Analysis – ransomware – d8c43ed3de8a96a1772e4a87f8cc7685

Malware Analysis – ransomware – 166c61424c79b082c52448d66f66156f

Malware Analysis – ransomware – ee57cb6c0e2292903b33adf62a2a7810

Cobalt Stike Beacon Detected – 101[.]43[.]215[.]118:9090

Cobalt Stike Beacon Detected – 81[.]68[.]136[.]116:80

Cobalt Stike Beacon Detected – 118[.]195[.]172[.]110:8012

Malware Analysis – djvu – 70a8331725cb661616a8082d5b943a35

Malware Analysis – djvu – aced83bf00dcddbe5b90f7f43ccd272f

Malware Analysis – djvu – 0b8588379ad0cc771f8d05e0fbf72487

Malware Analysis – djvu – a3cb7cdc9bfe987e3a9d962a3a704c75

Cobalt Stike Beacon Detected – 20[.]246[.]185[.]142:80

Cobalt Stike Beacon Detected – 84[.]32[.]34[.]97:80

Cobalt Stike Beacon Detected – 43[.]142[.]87[.]35:443

Cobalt Stike Beacon Detected – 179[.]43[.]187[.]185:8080

Malware Analysis – ransomware – 72d3f7ad0028d359a27ff01d920b3497

Malware Analysis – chaos – 84dbf5b66139cf86f87ac1d420c736c9

Malware Analysis – djvu – 76a1e1bfd28d7125af316d6e6b72ad4a

Malware Analysis – lockbit – 290ee6b6f6b2a5f0899a6f35073f8eb4

Cobalt Stike Beacon Detected – 79[.]137[.]198[.]115:443

Cobalt Stike Beacon Detected – 77[.]91[.]78[.]185:443

Cobalt Stike Beacon Detected – 1[.]15[.]141[.]252:8080

Cobalt Stike Beacon Detected – 57[.]128[.]195[.]112:8443

JTEKT ELECTRONICS Kostac PLC Programming Software code execution | CVE-2023-22424

finixbit elf-parser denial of service | CVE-2023-1157

Otelier – 436,855 breached accounts

CISA: CISA Releases Five Industrial Control Systems Advisories

CISA: CISA Releases Best Practice Guidance for Mobile Communications

CISA: CISA Issues BOD 25-01, Implementing Secure Practices for Cloud Services

CISA: CISA and ONCD Release Playbook for Strengthening Cybersecurity in Federal Grant Programs for Critical Infrastructure

You may have missed