Cobalt Stike Beacon Detected – 206[.]2[.]200[.]132:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Malware Analysis – play – 5dcfb98d5adf722424420d02377cee54
Score: 10 MALWARE FAMILY: playTAGS:family:play, ransomwareMD5: 5dcfb98d5adf722424420d02377cee54SHA1: d999c810fa88dcedebd45e0a83d08ec6cd49e871ANALYSIS DATE: 2022-10-22T08:06:05ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...
Malware Analysis – djvu – 49b36093a491b1b625066d3f2bcb9964
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 49b36093a491b1b625066d3f2bcb9964SHA1: fafe05e1978dedac0d3f781101acde8bf33ea1dfANALYSIS DATE: 2022-10-22T08:20:36ZTTPS: T1082, T1053, T1005, T1081,...
Malware Analysis – djvu – d4ce2b268bde19084d1b359d3a4829b3
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: d4ce2b268bde19084d1b359d3a4829b3SHA1: 2a4db50d36a2832f5da23ec258b8eec7cbda626aANALYSIS DATE: 2022-10-22T08:06:58ZTTPS: T1060, T1112, T1082, T1005,...
Malware Analysis – danabot – 7fbe91ac75b84e34eef686ccf1322f25
Score: 10 MALWARE FAMILY: danabotTAGS:family:danabot, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, banker, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 7fbe91ac75b84e34eef686ccf1322f25SHA1: d57422b77bee807b3e5df377abb7fcb187bfa5bcANALYSIS...
Cobalt Stike Beacon Detected – 1[.]13[.]176[.]232:80
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 47[.]100[.]47[.]35:80
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 106[.]13[.]54[.]144:8010
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 47[.]243[.]236[.]221:4443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Malware Analysis – danabot – 794f5c531271e70c1af3a23fa6e74509
Score: 10 MALWARE FAMILY: danabotTAGS:family:danabot, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, banker, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 794f5c531271e70c1af3a23fa6e74509SHA1: d70c740b27c0dc476986fdf0d9ae6ecda5a71ed1ANALYSIS...
Malware Analysis – djvu – b0a1a617d49859b95228bc5f4edbc783
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: b0a1a617d49859b95228bc5f4edbc783SHA1: 4147ac09ca79aaa488e3816a57bea7ef6d0e446fANALYSIS DATE: 2022-10-22T08:28:10ZTTPS: T1053, T1005, T1081, T1012,...
Malware Analysis – djvu – f7358f89f421c996767e193d4457cd33
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: f7358f89f421c996767e193d4457cd33SHA1: 49d1e745872ee4f14ee54c5036a077c1b6beaef3ANALYSIS DATE: 2022-10-22T09:00:54ZTTPS: T1012, T1060, T1112, T1222,...
Malware Analysis – djvu – e537a3ab6b4e48a6d9121aa780761c01
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: e537a3ab6b4e48a6d9121aa780761c01SHA1: 2e0a71d24fcfcd151c11b1f50539669c2d6a266fANALYSIS DATE: 2022-10-22T08:44:50ZTTPS: T1012, T1082, T1060, T1112,...
Cobalt Stike Beacon Detected – 193[.]233[.]202[.]121:80
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 124[.]156[.]87[.]117:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 43[.]138[.]150[.]21:8001
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 18[.]184[.]235[.]54:80
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Malware Analysis – wannacry – 4c3778774e953461f657c3f30dcae65c
Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: 4c3778774e953461f657c3f30dcae65cSHA1: 95949074bd6ea96adadfb933ec87d090ef56a8a7ANALYSIS DATE: 2022-10-22T09:20:23ZTTPS: T1158, T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...
Malware Analysis – smokeloader – c711a4092dc474788a809a2a04817d47
Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: c711a4092dc474788a809a2a04817d47SHA1: 4cf6b33deb31e59774abfe668ea3bba006893eb5ANALYSIS DATE: 2022-10-22T09:21:05ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...
Malware Analysis – djvu – f1ed7c8df3b8844051673481c7a96fc9
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: f1ed7c8df3b8844051673481c7a96fc9SHA1: f6ec99d577cadc4f990388874b2f942f5b501a8fANALYSIS DATE: 2022-10-22T09:06:13ZTTPS: T1222, T1082, T1005, T1081,...
Malware Analysis – – 351f7496c3d09f5cf5577125d0ba03ac
Score: 1 MALWARE FAMILY: TAGS:MD5: 351f7496c3d09f5cf5577125d0ba03acSHA1: c2dadfb62972ab16abbfd29870758c372194d6a3ANALYSIS DATE: 2022-10-22T09:09:39ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...
Cobalt Stike Beacon Detected – 38[.]126[.]169[.]107:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 31[.]41[.]244[.]192:80
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 43[.]132[.]124[.]75:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
