Year: 2023

Malware Analysis – djvu – 4a3282a67a824741e1d348ee66503787

March 5, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 4a3282a67a824741e1d348ee66503787SHA1: 5b1bfed820496cfbe8be51c9780e5328eea3e3b0ANALYSIS DATE: 2023-03-04T21:38:32ZTTPS: T1053, T1005, T1081, T1012, T1082,...

Malware Analysis – asyncrat – 27f8ef3eb1c6fdbe295174f4fa4ea19c

March 5, 2023

Score: 10 MALWARE FAMILY: asyncratTAGS:family:asyncrat, family:bitrat, family:neshta, family:njrat, family:redline, family:remcos, family:warzonerat, botnet:default, botnet:hacked, botnet:hackpack, botnet:nyan cat, botnet:remotehost, discovery, evasion, infostealer,...

Malware Analysis – djvu – 37a0cfb5bde13c19c06363e90c2d98ad

March 5, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 37a0cfb5bde13c19c06363e90c2d98adSHA1: 74a2edca446c6929ac68ebead896c1025acb4dbbANALYSIS DATE: 2023-03-04T21:46:49ZTTPS: T1082, T1053, T1012, T1005, T1081,...

Malware Analysis – redline – 481ca5811352fa9ef53a2f39a83bd1cf

March 5, 2023

Score: 10 MALWARE FAMILY: redlineTAGS:family:redline, discovery, infostealer, persistence, ransomware, spywareMD5: 481ca5811352fa9ef53a2f39a83bd1cfSHA1: af239d190a3c2bdc8531a8c34a7bcedc086ec88cANALYSIS DATE: 2023-03-04T23:11:17ZTTPS: T1082, T1060, T1012, T1005, T1081, T1112,...

Malware Analysis – djvu – 6c18dae7be8f90441b86851a7cc1d62a

March 5, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 6c18dae7be8f90441b86851a7cc1d62aSHA1: 9932f62742d803bafc0b8ceec0af99c5401467ddANALYSIS DATE: 2023-03-04T23:26:45ZTTPS: T1005, T1081, T1222, T1053, T1012,...

Cobalt Stike Beacon Detected – 101[.]42[.]38[.]79:8888

March 5, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 85[.]195[.]123[.]138:443

March 5, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 34[.]125[.]190[.]77:443

March 5, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 107[.]173[.]251[.]222:443

March 5, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – ransomware – 443a37cd2cc49d05fb25c4db8ee95632

March 4, 2023

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 443a37cd2cc49d05fb25c4db8ee95632SHA1: 27be9cfb271d790f37868317314bae772365fc6cANALYSIS DATE: 2023-03-04T15:18:54ZTTPS: T1005, T1081 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – djvu – 257c7df0813fc7897781336970a207ff

March 4, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 257c7df0813fc7897781336970a207ffSHA1: fdd625dc334bcd40d07da5c481424a85bf15a53bANALYSIS DATE: 2023-03-04T16:24:54ZTTPS: T1005, T1081, T1012, T1060, T1112,...

Malware Analysis – djvu – a5f09e4df796c56f6dcc97e840cd8c02

March 4, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: a5f09e4df796c56f6dcc97e840cd8c02SHA1: 19a0f4e6bacc31eb024dc63037033f7b5de11da5ANALYSIS DATE: 2023-03-04T17:27:07ZTTPS: T1053, T1005, T1081, T1012, T1082,...

Malware Analysis – djvu – 3b1535328a6380de620657732a170e4b

March 4, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 3b1535328a6380de620657732a170e4bSHA1: 62179f2f1800b4e862c956cf1e8dc9f2bbfad135ANALYSIS DATE: 2023-03-04T17:21:29ZTTPS: T1222, T1012, T1082, T1060, T1112,...

Malware Analysis – djvu – b6fac73eafc2ddc0b6ae6c605f4a451f

March 4, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: b6fac73eafc2ddc0b6ae6c605f4a451fSHA1: d4d2aa2ea7f7a0967a5d5f6213a389ad842dcce7ANALYSIS DATE: 2023-03-04T16:26:28ZTTPS: T1005, T1081, T1082, T1053, T1012,...

Malware Analysis – smokeloader – b6a95bcb19a3b33ca3ae1c4996a64dc8

March 4, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: b6a95bcb19a3b33ca3ae1c4996a64dc8SHA1: 482bed9c3b6d52bcd0c820829c009df3ea723db4ANALYSIS DATE: 2023-03-04T17:39:02ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

New FiXS ATM Malware Targeting Mexican Banks

March 4, 2023

A new ATM malware strain dubbed FiXS has been observed targeting Mexican banks since the start of February 2023. "The...

Security and IT Teams No Longer Need To Pay For SaaS-Shadow IT Discovery

March 4, 2023

This past January, a SaaS Security Posture Management (SSPM) company named Wing Security (Wing) made waves with the launch of...

Cobalt Stike Beacon Detected – 109[.]205[.]61[.]140:80

March 4, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 47[.]103[.]64[.]64:1111

March 4, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 190[.]97[.]165[.]108:443

March 4, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 185[.]143[.]223[.]120:443

March 4, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 39[.]105[.]188[.]90:8443

March 4, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 1[.]15[.]42[.]124:80

March 4, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – 49558407bdf3851df97837959cca2910

March 4, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 49558407bdf3851df97837959cca2910SHA1: a9d42dbebf8d9ec47a444a13c584e8a0522cda88ANALYSIS DATE: 2023-03-04T11:35:41ZTTPS: T1060, T1112, T1053, T1005, T1081,...

Year: 2023

Malware Analysis – djvu – 4a3282a67a824741e1d348ee66503787

Malware Analysis – asyncrat – 27f8ef3eb1c6fdbe295174f4fa4ea19c

Malware Analysis – djvu – 37a0cfb5bde13c19c06363e90c2d98ad

Malware Analysis – redline – 481ca5811352fa9ef53a2f39a83bd1cf

Malware Analysis – djvu – 6c18dae7be8f90441b86851a7cc1d62a

Cobalt Stike Beacon Detected – 101[.]42[.]38[.]79:8888

Cobalt Stike Beacon Detected – 85[.]195[.]123[.]138:443

Cobalt Stike Beacon Detected – 34[.]125[.]190[.]77:443

Cobalt Stike Beacon Detected – 107[.]173[.]251[.]222:443

Malware Analysis – ransomware – 443a37cd2cc49d05fb25c4db8ee95632

Malware Analysis – djvu – 257c7df0813fc7897781336970a207ff

Malware Analysis – djvu – a5f09e4df796c56f6dcc97e840cd8c02

Malware Analysis – djvu – 3b1535328a6380de620657732a170e4b

Malware Analysis – djvu – b6fac73eafc2ddc0b6ae6c605f4a451f

Malware Analysis – smokeloader – b6a95bcb19a3b33ca3ae1c4996a64dc8

New FiXS ATM Malware Targeting Mexican Banks

Security and IT Teams No Longer Need To Pay For SaaS-Shadow IT Discovery

Cobalt Stike Beacon Detected – 109[.]205[.]61[.]140:80

Cobalt Stike Beacon Detected – 47[.]103[.]64[.]64:1111

Cobalt Stike Beacon Detected – 190[.]97[.]165[.]108:443

Cobalt Stike Beacon Detected – 185[.]143[.]223[.]120:443

Cobalt Stike Beacon Detected – 39[.]105[.]188[.]90:8443

Cobalt Stike Beacon Detected – 1[.]15[.]42[.]124:80

Malware Analysis – djvu – 49558407bdf3851df97837959cca2910

CVE Alert: CVE-2024-12142

CVE Alert: CVE-2024-12703

CVE Alert: CVE-2024-13377

CVE Alert: CVE-2024-12476

CVE Alert: CVE-2024-10497

You may have missed