Year: 2023

Malware Analysis – persistence – 23ed5b08fd2575622addefa1b07adc1e

March 6, 2023

Score: 6 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 23ed5b08fd2575622addefa1b07adc1eSHA1: efee24317ff461103fa7f72b5f8b986f3c6eff50ANALYSIS DATE: 2023-03-05T21:03:20ZTTPS: T1491, T1112, T1060 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – djvu – bd584c26eb1bde0cf75b0ccf64f4b64a

March 6, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: bd584c26eb1bde0cf75b0ccf64f4b64aSHA1: ce6ca89cf1ed0be301ccdceab75968fc2a6582a6ANALYSIS DATE: 2023-03-05T21:40:47ZTTPS: T1222, T1012, T1082, T1005, T1081,...

Malware Analysis – djvu – e5a6fdb93a403d174e1f51d52baaf410

March 6, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: e5a6fdb93a403d174e1f51d52baaf410SHA1: 9862d7fd9b8fb94651dc1792c985886997f57f5bANALYSIS DATE: 2023-03-05T21:36:24ZTTPS: T1005, T1081, T1222, T1082, T1012,...

Malware Analysis – djvu – df2e55e02bed6ff498732664504ca465

March 6, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: df2e55e02bed6ff498732664504ca465SHA1: 0cf21403bef8c801b84d934b738fb1f30cd1df94ANALYSIS DATE: 2023-03-05T21:35:07ZTTPS: T1060, T1112, T1082, T1005, T1081,...

Malware Analysis – djvu – 7dbba7788d5ab9706aa1a3ac1cde5b79

March 6, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 7dbba7788d5ab9706aa1a3ac1cde5b79SHA1: bc4d6ced2ec3137206cd4379e172632360be6f39ANALYSIS DATE: 2023-03-05T21:48:58ZTTPS: T1053, T1005, T1081, T1222, T1082,...

Malware Analysis – djvu – ef2cc8c767116bf59422002e4e54f28b

March 6, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: ef2cc8c767116bf59422002e4e54f28bSHA1: 1fc0a1115912a2fdfbd25761fa7ad4242e8d1ca2ANALYSIS DATE: 2023-03-05T23:00:55ZTTPS: T1222, T1005, T1081, T1012, T1060,...

Malware Analysis – ransomware – b75c02144d45715bf0cab2c2076104db

March 6, 2023

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: b75c02144d45715bf0cab2c2076104dbSHA1: 5dbf8b9d17fc58045fe59a3191fec2a05b5198edANALYSIS DATE: 2023-03-05T23:39:44ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – evasion – f5d73448dbe1ec4f9a8ec187f216d9e5

March 6, 2023

Score: 8 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomwareMD5: f5d73448dbe1ec4f9a8ec187f216d9e5SHA1: 6f76561bd09833c75ae8f0035dcb2bc87709e2e5ANALYSIS DATE: 2023-03-05T22:00:11ZTTPS: T1491, T1112, T1004, T1012, T1120, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – banker – 5b022926422f01bcd2439853b16ec38b

March 6, 2023

Score: 8 MALWARE FAMILY: bankerTAGS:banker, evasion, ransomwareMD5: 5b022926422f01bcd2439853b16ec38bSHA1: 5c90b4cb247bada9c082a03e4265fdf8d5177e32ANALYSIS DATE: 2023-03-05T23:10:19ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Cobalt Stike Beacon Detected – 1[.]13[.]82[.]101:4443

March 6, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 120[.]25[.]236[.]78:80

March 6, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 152[.]89[.]196[.]12:82

March 6, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 8[.]142[.]124[.]166:8443

March 6, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

HackerOne Bug Bounty Disclosure: argo-cd-reconciles-apps-outside-configured-namespaces-when-sharding-is-enabledbyczchen

March 5, 2023

Programme HackerOne Internet Bug Bounty Internet Bug Bounty Submitted by czchen czchen Report Argo CD reconciles apps outside configured namespaces...

Malware Analysis – djvu – dd8d98e1131e47cdb37a6cc78f94e6d1

March 5, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: dd8d98e1131e47cdb37a6cc78f94e6d1SHA1: bde5f558557f59556a00c3c7891564a271be4c49ANALYSIS DATE: 2023-03-05T15:11:43ZTTPS: T1060, T1112, T1222, T1012, T1005,...

Malware Analysis – hive – da13022097518d123a91a3958be326da

March 5, 2023

Score: 10 MALWARE FAMILY: hiveTAGS:family:hive, evasion, ransomware, spyware, stealer, trojan, upxMD5: da13022097518d123a91a3958be326daSHA1: 24a71ab462594d5a159bbf176588af951aba1381ANALYSIS DATE: 2023-03-05T16:36:37ZTTPS: T1005, T1081, T1107, T1490, T1112,...

Malware Analysis – djvu – baa8a14fa8c2b2db1b0b74ff0e4c1af3

March 5, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: baa8a14fa8c2b2db1b0b74ff0e4c1af3SHA1: f1788b075e799ea0c0f5d6a3b56ae157343c4161ANALYSIS DATE: 2023-03-05T17:10:49ZTTPS: T1222, T1005, T1081, T1060, T1112,...

Malware Analysis – djvu – 0a0ebfeb569497ad77dd163776b29422

March 5, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 0a0ebfeb569497ad77dd163776b29422SHA1: 525911955a20e39ae252044c3a1eb99cf97cbda9ANALYSIS DATE: 2023-03-05T17:30:08ZTTPS: T1222, T1082, T1005, T1081, T1012,...

Malware Analysis – evasion – f4dcbd5f5b985250924631a998237d27

March 5, 2023

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, ransomware, upxMD5: f4dcbd5f5b985250924631a998237d27SHA1: 432199480a137cdd63dc90255211cea766bb37d5ANALYSIS DATE: 2023-03-05T17:36:51ZTTPS: T1490, T1082, T1012, T1120, T1031, T1562, T1489 ScoreMeaningExample10Known badA...

Malware Analysis – djvu – 295dbead840d8746dd01b5a7ef6683ca

March 5, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 295dbead840d8746dd01b5a7ef6683caSHA1: 80c626286a6db802e56a8f40dd5078c7a5fc8794ANALYSIS DATE: 2023-03-05T17:26:24ZTTPS: T1060, T1112, T1005, T1081, T1222,...

Malware Analysis – djvu – 9fdb32ec78c101f060098ad1546e65d1

March 5, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 9fdb32ec78c101f060098ad1546e65d1SHA1: 0033639ce67337a8fa8aff778e0f40e6dbdabd71ANALYSIS DATE: 2023-03-05T17:50:08ZTTPS: T1005, T1081, T1222, T1082, T1012,...

Malware Analysis – djvu – da63a1ee5554cf0f1d3cab63ce093beb

March 5, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: da63a1ee5554cf0f1d3cab63ce093bebSHA1: d43dde52af0609602d839f101236fcae17169077ANALYSIS DATE: 2023-03-05T09:16:09ZTTPS: T1053, T1005, T1081, T1012, T1060,...

Malware Analysis – djvu – 2f16d4f7dd1bc6215c04993cecb0ac98

March 5, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 2f16d4f7dd1bc6215c04993cecb0ac98SHA1: 8405146f2ad4878cce5a39208d62b9669df9f53fANALYSIS DATE: 2023-03-05T09:32:09ZTTPS: T1012, T1082, T1005, T1081, T1060,...

Cobalt Stike Beacon Detected – 43[.]156[.]59[.]131:81

March 5, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Year: 2023

Malware Analysis – persistence – 23ed5b08fd2575622addefa1b07adc1e

Malware Analysis – djvu – bd584c26eb1bde0cf75b0ccf64f4b64a

Malware Analysis – djvu – e5a6fdb93a403d174e1f51d52baaf410

Malware Analysis – djvu – df2e55e02bed6ff498732664504ca465

Malware Analysis – djvu – 7dbba7788d5ab9706aa1a3ac1cde5b79

Malware Analysis – djvu – ef2cc8c767116bf59422002e4e54f28b

Malware Analysis – ransomware – b75c02144d45715bf0cab2c2076104db

Malware Analysis – evasion – f5d73448dbe1ec4f9a8ec187f216d9e5

Malware Analysis – banker – 5b022926422f01bcd2439853b16ec38b

Cobalt Stike Beacon Detected – 1[.]13[.]82[.]101:4443

Cobalt Stike Beacon Detected – 120[.]25[.]236[.]78:80

Cobalt Stike Beacon Detected – 152[.]89[.]196[.]12:82

Cobalt Stike Beacon Detected – 8[.]142[.]124[.]166:8443

HackerOne Bug Bounty Disclosure: argo-cd-reconciles-apps-outside-configured-namespaces-when-sharding-is-enabledbyczchen

Malware Analysis – djvu – dd8d98e1131e47cdb37a6cc78f94e6d1

Malware Analysis – hive – da13022097518d123a91a3958be326da

Malware Analysis – djvu – baa8a14fa8c2b2db1b0b74ff0e4c1af3

Malware Analysis – djvu – 0a0ebfeb569497ad77dd163776b29422

Malware Analysis – evasion – f4dcbd5f5b985250924631a998237d27

Malware Analysis – djvu – 295dbead840d8746dd01b5a7ef6683ca

Malware Analysis – djvu – 9fdb32ec78c101f060098ad1546e65d1

Malware Analysis – djvu – da63a1ee5554cf0f1d3cab63ce093beb

Malware Analysis – djvu – 2f16d4f7dd1bc6215c04993cecb0ac98

Cobalt Stike Beacon Detected – 43[.]156[.]59[.]131:81

CISA: CISA Releases Five Industrial Control Systems Advisories

CISA: CISA Releases Best Practice Guidance for Mobile Communications

CISA: CISA Issues BOD 25-01, Implementing Secure Practices for Cloud Services

CISA: CISA and ONCD Release Playbook for Strengthening Cybersecurity in Federal Grant Programs for Critical Infrastructure

CISA: CISA Adds Four Known Exploited Vulnerabilities to Catalog

You may have missed