Year: 2023

Malware Analysis – djvu – 1216b77e5872bc9e320a1f60842a9e42

February 26, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 1216b77e5872bc9e320a1f60842a9e42SHA1: 7047fee069340791a464ada9dd4fa319dbcf342eANALYSIS DATE: 2023-02-26T09:32:09ZTTPS: T1053, T1012, T1082, T1005, T1081,...

Malware Analysis – djvu – 92090ab43fcef53f8bfcdac7764b9520

February 26, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 92090ab43fcef53f8bfcdac7764b9520SHA1: a5ae4989aee7f650b9ff93090989b0335a2dd4bdANALYSIS DATE: 2023-02-26T09:52:19ZTTPS: T1012, T1053, T1082, T1222, T1005,...

Cobalt Stike Beacon Detected – 1[.]15[.]42[.]6:443

February 26, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 18[.]162[.]188[.]12:443

February 26, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 140[.]99[.]171[.]92:80

February 26, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – evasion – fbdb51ec41a66962bbd473e1c77c44cb

February 26, 2023

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: fbdb51ec41a66962bbd473e1c77c44cbSHA1: d3b86f9d094b87fa640a3d51a1baec82a357d038ANALYSIS DATE: 2023-02-26T10:25:05ZTTPS: T1107, T1490, T1012, T1120, T1082, T1031, T1562, T1489, T1112 ScoreMeaningExample10Known...

Malware Analysis – djvu – b418cdc483cbd304f2654c357264bc45

February 26, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, backdoor, discovery, evasion, persistence, ransomware, stealer, trojan, vmprotectMD5: b418cdc483cbd304f2654c357264bc45SHA1: 98bd0110369eb55ebc30626c3ad7304fcb86047cANALYSIS DATE: 2023-02-26T10:39:27ZTTPS: T1012,...

Malware Analysis – djvu – 0d482442b579b826145c3fb9c8703d58

February 26, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 0d482442b579b826145c3fb9c8703d58SHA1: 219923d843ae31f3eed65ec757501fc4fc479b25ANALYSIS DATE: 2023-02-26T10:04:58ZTTPS: T1012, T1082, T1005, T1081, T1060,...

Malware Analysis – djvu – cdd526e5b73aad52c63431eaa556b7db

February 26, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, backdoor, discovery, persistence, ransomware, stealer, trojan, vmprotectMD5: cdd526e5b73aad52c63431eaa556b7dbSHA1: 013e6c79db772a21243a3f0e66ea2c1ac90b172bANALYSIS DATE: 2023-02-26T10:01:38ZTTPS: T1012, T1222,...

Cobalt Stike Beacon Detected – 35[.]183[.]12[.]60:4433

February 26, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 77[.]91[.]84[.]53:443

February 26, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 139[.]9[.]190[.]31:9988

February 26, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 1[.]13[.]168[.]66:80

February 26, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – evasion – 980ea1789565f4a365e180413383e083

February 26, 2023

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 980ea1789565f4a365e180413383e083SHA1: 980f0eb6db868e2a92fb5973874fc332fa75d7a7ANALYSIS DATE: 2023-02-26T11:56:38ZTTPS: T1107, T1490, T1112, T1031, T1562, T1489, T1012, T1120, T1082 ScoreMeaningExample10Known...

Malware Analysis – djvu – d9d5aeb697436e9c5796c050ad37a733

February 26, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: d9d5aeb697436e9c5796c050ad37a733SHA1: e53ad8bb6af2dacf9af01863d1350c5f80f3e0bfANALYSIS DATE: 2023-02-26T10:50:03ZTTPS: T1005, T1081, T1012, T1082, T1060,...

Malware Analysis – discovery – 70a14ae99707c359c24d5e52f30502f3

February 26, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, ransomwareMD5: 70a14ae99707c359c24d5e52f30502f3SHA1: 79ad03d9cb065ed82ad2137749d4e85e4f838d42ANALYSIS DATE: 2023-02-26T10:43:38ZTTPS: T1082, T1057, T1012 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – evasion – 3e7b527b02f4c9d8e73b2dedffbe6519

February 26, 2023

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 3e7b527b02f4c9d8e73b2dedffbe6519SHA1: db4d167c06270ed8ca86024efe5646326f4ed049ANALYSIS DATE: 2023-02-26T11:24:46ZTTPS: T1107, T1490, T1031, T1562, T1489, T1012, T1120, T1082, T1112, T1018...

Year: 2023

Malware Analysis – djvu – 1216b77e5872bc9e320a1f60842a9e42

Malware Analysis – djvu – 92090ab43fcef53f8bfcdac7764b9520

Cobalt Stike Beacon Detected – 1[.]15[.]42[.]6:443

Cobalt Stike Beacon Detected – 18[.]162[.]188[.]12:443

Cobalt Stike Beacon Detected – 140[.]99[.]171[.]92:80

Malware Analysis – evasion – fbdb51ec41a66962bbd473e1c77c44cb

Malware Analysis – djvu – b418cdc483cbd304f2654c357264bc45

Malware Analysis – djvu – 0d482442b579b826145c3fb9c8703d58

Malware Analysis – djvu – cdd526e5b73aad52c63431eaa556b7db

Cobalt Stike Beacon Detected – 35[.]183[.]12[.]60:4433

Cobalt Stike Beacon Detected – 77[.]91[.]84[.]53:443

Cobalt Stike Beacon Detected – 139[.]9[.]190[.]31:9988

Cobalt Stike Beacon Detected – 1[.]13[.]168[.]66:80

Malware Analysis – evasion – 980ea1789565f4a365e180413383e083

Malware Analysis – djvu – d9d5aeb697436e9c5796c050ad37a733

Malware Analysis – discovery – 70a14ae99707c359c24d5e52f30502f3

Malware Analysis – evasion – 3e7b527b02f4c9d8e73b2dedffbe6519

Cobalt Stike Beacon Detected – 139[.]198[.]187[.]234:80

Cobalt Stike Beacon Detected – 116[.]62[.]231[.]188:443

Cobalt Stike Beacon Detected – 104[.]243[.]143[.]71:80

Cobalt Stike Beacon Detected – 124[.]221[.]66[.]75:60001

Apple iOS, iPadOS and macOS Ventura privilege escalation | CVE-2023-23531

Cisco Firepower 4100, 9300 Security Appliances, and UCS Fabric Interconnects command execution | CVE-2023-20015

Apple iOS, iPadOS and macOS Ventura information disclosure | CVE-2023-23520

Cobalt Strike Beacon Detected – 118[.]178[.]89[.]212:4434

Cobalt Strike Beacon Detected – 193[.]57[.]57[.]121:9443

Cobalt Strike Beacon Detected – 124[.]71[.]192[.]162:50000

Cobalt Strike Beacon Detected – 18[.]138[.]186[.]108:4444

Cobalt Strike Beacon Detected – 8[.]130[.]123[.]92:80

You may have missed