Year: 2023

Cobalt Stike Beacon Detected – 3[.]115[.]104[.]192:443

February 28, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – 35ae0e39993e000deb10e26406b7846e

February 28, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 35ae0e39993e000deb10e26406b7846eSHA1: 421e61dca4f3d9e7e471e6d646f8440b6ce63a84ANALYSIS DATE: 2023-02-28T10:21:19ZTTPS: T1082, T1053, T1012, T1005, T1081,...

Malware Analysis – djvu – 4125fa73b85056ccd163fc08307f6d61

February 28, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, backdoor, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: 4125fa73b85056ccd163fc08307f6d61SHA1: e4d91a6c035a17de15665fdfbba7f0bbc6ee2272ANALYSIS DATE: 2023-02-28T10:02:14ZTTPS: T1012,...

Malware Analysis – djvu – 9fa7c62a4aac9c219defa886b6e6b01a

February 28, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 9fa7c62a4aac9c219defa886b6e6b01aSHA1: d040a3a9157498b8946829c87e0a21e35168e537ANALYSIS DATE: 2023-02-28T10:20:33ZTTPS: T1222, T1012, T1082, T1060, T1112,...

Malware Analysis – djvu – a822f2c5685b5071d945f53a75f31b47

February 28, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: a822f2c5685b5071d945f53a75f31b47SHA1: 0f7323a6fd73a36da8384f00c50360f69ba28f6aANALYSIS DATE: 2023-02-28T10:32:36ZTTPS: T1082, T1053, T1012, T1005, T1081,...

Cobalt Stike Beacon Detected – 1[.]13[.]254[.]87:80

February 28, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 42[.]194[.]213[.]51:8034

February 28, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 179[.]43[.]162[.]6:80

February 28, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 43[.]139[.]19[.]125:8585

February 28, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – a0ed2f262fb1c36c2a8e248292114ce6

February 28, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: a0ed2f262fb1c36c2a8e248292114ce6SHA1: 33dc687c00c1f60834e12bf98750dfff4374f068ANALYSIS DATE: 2023-02-28T10:34:19ZTTPS: T1012, T1082, T1005, T1081, T1060,...

Malware Analysis – djvu – 9649c65f594f4d871ee9eb889c4c1a31

February 28, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 9649c65f594f4d871ee9eb889c4c1a31SHA1: c795b31cf2972fad2d1c105eec1b5246ec83f1bdANALYSIS DATE: 2023-02-28T11:31:10ZTTPS: T1060, T1112, T1222, T1082, T1005,...

Malware Analysis – djvu – c13f64b54d8640237ebc8c9edcf482b4

February 28, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: c13f64b54d8640237ebc8c9edcf482b4SHA1: b2f496500a8ba5503152cafd7f8e45f0c4430febANALYSIS DATE: 2023-02-28T11:51:01ZTTPS: T1060, T1112, T1005, T1081, T1082,...

Malware Analysis – djvu – b5301a4e4c0106610a65c09320704cc5

February 28, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, backdoor, discovery, persistence, ransomware, stealer, trojan, vmprotectMD5: b5301a4e4c0106610a65c09320704cc5SHA1: dac7814be2c38e22aff9c78efaa020cbbfbabcf9ANALYSIS DATE: 2023-02-28T10:33:29ZTTPS: T1012, T1120,...

ZoneMinder file inclusion | CVE-2023-26038

February 28, 2023

NAME__________ZoneMinder file inclusionPlatforms Affected:Risk Level:5.4Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________ZoneMinder could allow a remote authenticated attacker to include arbitrary files. An attacker could...

Real Temp code execution | CVE-2023-1047

February 28, 2023

NAME__________Real Temp code executionPlatforms Affected:Risk Level:5.3Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Real Temp could allow a local authenticated attacker to execute arbitrary code on...

MuYuCMS directory traversal | CVE-2023-1043

February 28, 2023

NAME__________MuYuCMS directory traversalPlatforms Affected:Risk Level:4.3Exploitability:Proof of ConceptConsequences:Obtain Information DESCRIPTION__________MuYuCMS could allow a remote authenticated attacker to traverse directories on the...

Nextcloud Server denial of service | CVE-2023-25816

February 28, 2023

NAME__________Nextcloud Server denial of servicePlatforms Affected:Risk Level:3.5Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________Nextcloud Server is vulnerable to a denial of service, caused by...

Online Boat Reservation System cross-site scripting | CVE-2023-1030

February 28, 2023

NAME__________Online Boat Reservation System cross-site scriptingPlatforms Affected:Risk Level:3.5Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Online Boat Reservation System is vulnerable to cross-site scripting, caused by...

lite-web-server denial of service | CVE-2023-26104

February 28, 2023

NAME__________lite-web-server denial of servicePlatforms Affected:lite-web-server lite-web-server 1.2.2Risk Level:7.5Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________lite-web-server is vulnerable to a denial of service, caused by...

Year: 2023

Cobalt Stike Beacon Detected – 3[.]115[.]104[.]192:443

Malware Analysis – djvu – 35ae0e39993e000deb10e26406b7846e

Malware Analysis – djvu – 4125fa73b85056ccd163fc08307f6d61

Malware Analysis – djvu – 9fa7c62a4aac9c219defa886b6e6b01a

Malware Analysis – djvu – a822f2c5685b5071d945f53a75f31b47

Cobalt Stike Beacon Detected – 1[.]13[.]254[.]87:80

Cobalt Stike Beacon Detected – 42[.]194[.]213[.]51:8034

Cobalt Stike Beacon Detected – 179[.]43[.]162[.]6:80

Cobalt Stike Beacon Detected – 43[.]139[.]19[.]125:8585

Malware Analysis – djvu – a0ed2f262fb1c36c2a8e248292114ce6

Malware Analysis – djvu – 9649c65f594f4d871ee9eb889c4c1a31

Malware Analysis – djvu – c13f64b54d8640237ebc8c9edcf482b4

Malware Analysis – djvu – b5301a4e4c0106610a65c09320704cc5

ZoneMinder file inclusion | CVE-2023-26038

Real Temp code execution | CVE-2023-1047

MuYuCMS directory traversal | CVE-2023-1043

Nextcloud Server denial of service | CVE-2023-25816

Online Boat Reservation System cross-site scripting | CVE-2023-1030

lite-web-server denial of service | CVE-2023-26104

All in One SEO plugin for WordPress cross-site scripting | CVE-2023-0586

Clinic’s Patient Management System SQL injection | CVE-2023-1035

MuYuCMS code execution | CVE-2023-1044

IBM Cloud Pak for Business Automation cross-site scripting | CVE-2023-22860

All in One SEO plugin for WordPress cross-site scripting | CVE-2023-0585

[KAIROS] – Ransomware Victim: nightingalehammerson[.]org

[LYNX] – Ransomware Victim: Gossett Motor Cars

[FUNKSEC] – Ransomware Victim: funkforum

CVE Alert: CVE-2025-23922

CVE Alert: CVE-2025-23919

You may have missed