OSINT

Malware Analysis – djvu – 4623857875232b3cd157433eb1fd0e46

January 26, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 4623857875232b3cd157433eb1fd0e46SHA1: f5b05f67ddf98eb52427f49f346736eeb1f47ffcANALYSIS DATE: 2023-01-26T10:54:21ZTTPS: T1005, T1081, T1082, T1012,...

Malware Analysis – smokeloader – 7961d2f393fbc2f1fa49db7410feaa21

January 26, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 7961d2f393fbc2f1fa49db7410feaa21SHA1: d7b1b94ee117bf2a4be1f3b6044fde46d175d27eANALYSIS DATE: 2023-01-26T11:25:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – f949ebdd228fd1ff03e7a1c963886ef2

January 26, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: f949ebdd228fd1ff03e7a1c963886ef2SHA1: 6a30d8454bedc3353ab8b7d5c9095e19583ac99aANALYSIS DATE: 2023-01-26T10:45:45ZTTPS: T1222, T1082, T1053, T1005,...

Cobalt Stike Beacon Detected – 100[.]26[.]163[.]51:80

January 26, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 104[.]208[.]73[.]11:80

January 26, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 107[.]151[.]195[.]11:80

January 26, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 47[.]92[.]126[.]214:8888

January 26, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Daily Vulnerability Trends: Thu Jan 26 2023

January 26, 2023

Daily Vulnerability Trends (sourced from VulnMon) CVE NAMECVE DescriptionCVE-2022-42864A race condition was addressed with improved state handling. This issue is...

Malware Analysis – djvu – 9d1e9d088036afdacfb2f89ca29dd137

January 26, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:19, backdoor, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: 9d1e9d088036afdacfb2f89ca29dd137SHA1: 1743eb444c948dbdf2d58508a72851daee0b6d69ANALYSIS DATE: 2023-01-26T03:02:38ZTTPS:...

Malware Analysis – djvu – 5d45ed8d173bcc871ca7c828b09832f3

January 26, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:19, backdoor, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: 5d45ed8d173bcc871ca7c828b09832f3SHA1: 8281eace3216fd0416ac4a0cf86f9169e8120fb5ANALYSIS DATE: 2023-01-26T03:18:18ZTTPS:...

Malware Analysis – – f26a8722a6deec5f530ebcfd2469087f

January 26, 2023

Score: 7 MALWARE FAMILY: TAGS:MD5: f26a8722a6deec5f530ebcfd2469087fSHA1: 7153ef673457d29166228f5977dff128722cf0d4ANALYSIS DATE: 2023-01-26T04:41:36ZTTPS: T1082, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – discovery – 39945d030f4f19876d81dd4f16ac8369

January 26, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: 39945d030f4f19876d81dd4f16ac8369SHA1: e4ff8415a04dca259205298d27236092d360dbb3ANALYSIS DATE: 2023-01-26T04:16:30ZTTPS: T1060, T1012, T1120, T1082, T1102 ScoreMeaningExample10Known badA malware family...

Malware Analysis – discovery – c2cf2b9242a2dd7550a36f63467c30b2

January 26, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: c2cf2b9242a2dd7550a36f63467c30b2SHA1: 196236477150bd5ccd5fb17b0d01017d9eda47bcANALYSIS DATE: 2023-01-26T05:23:31ZTTPS: T1060, T1082, T1057, T1012 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – medusalocker – 646698572afbbf24f50ec5681feb2db7

January 26, 2023

Score: 10 MALWARE FAMILY: medusalockerTAGS:family:medusalocker, evasion, ransomware, spyware, stealer, trojanMD5: 646698572afbbf24f50ec5681feb2db7SHA1: 70530bc23bad38e6aee66cbb2c2f58a96a18fb79ANALYSIS DATE: 2023-01-26T05:33:48ZTTPS: T1082, T1112, T1012, T1120, T1107, T1490,...

Malware Analysis – djvu – 504863d5dc6d3062a34f399173b61ec7

January 26, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:19, backdoor, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: 504863d5dc6d3062a34f399173b61ec7SHA1: c895012708971193f8462d28860bacfe3e36d510ANALYSIS DATE: 2023-01-26T05:42:07ZTTPS:...

Malware Analysis – ransomware – f7b5b9fd8c7020dedb138ef75190dffc

January 26, 2023

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: f7b5b9fd8c7020dedb138ef75190dffcSHA1: adebd8a52b6dc9ad35dee583eae8d93e0040b837ANALYSIS DATE: 2023-01-26T05:34:00ZTTPS: T1012, T1120, T1082, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – persistence – 20ebc478a429ac5c954870668f453cb2

January 26, 2023

Score: 8 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 20ebc478a429ac5c954870668f453cb2SHA1: 91c5fa33d5848a4e5bce867cf06a760aafd9dbd0ANALYSIS DATE: 2023-01-26T05:33:55ZTTPS: T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – dharma – 8bacbf2e386dbc47af1f1390e1bdbbf7

January 26, 2023

Score: 10 MALWARE FAMILY: dharmaTAGS:family:dharma, persistence, ransomware, spyware, stealerMD5: 8bacbf2e386dbc47af1f1390e1bdbbf7SHA1: 1101a108e9ae5aa0a0b905dd3cbbbaa05b7dd41dANALYSIS DATE: 2023-01-26T05:33:52ZTTPS: T1107, T1490, T1005, T1081, T1082, T1112, T1060...

OSINT

Malware Analysis – djvu – 4623857875232b3cd157433eb1fd0e46

Malware Analysis – smokeloader – 7961d2f393fbc2f1fa49db7410feaa21

Malware Analysis – djvu – f949ebdd228fd1ff03e7a1c963886ef2

Cobalt Stike Beacon Detected – 100[.]26[.]163[.]51:80

Cobalt Stike Beacon Detected – 104[.]208[.]73[.]11:80

Cobalt Stike Beacon Detected – 107[.]151[.]195[.]11:80

Cobalt Stike Beacon Detected – 47[.]92[.]126[.]214:8888

Daily Vulnerability Trends: Thu Jan 26 2023

Malware Analysis – djvu – 9d1e9d088036afdacfb2f89ca29dd137

Malware Analysis – djvu – 5d45ed8d173bcc871ca7c828b09832f3

Malware Analysis – – f26a8722a6deec5f530ebcfd2469087f

Malware Analysis – discovery – 39945d030f4f19876d81dd4f16ac8369

Malware Analysis – discovery – c2cf2b9242a2dd7550a36f63467c30b2

Malware Analysis – medusalocker – 646698572afbbf24f50ec5681feb2db7

Malware Analysis – djvu – 504863d5dc6d3062a34f399173b61ec7

Malware Analysis – ransomware – f7b5b9fd8c7020dedb138ef75190dffc

Malware Analysis – persistence – 20ebc478a429ac5c954870668f453cb2

Malware Analysis – dharma – 8bacbf2e386dbc47af1f1390e1bdbbf7

Cobalt Stike Beacon Detected – 124[.]221[.]169[.]111:8080

Cobalt Stike Beacon Detected – 154[.]204[.]43[.]31:443

Cobalt Stike Beacon Detected – 118[.]31[.]8[.]234:9955

Cobalt Stike Beacon Detected – 3[.]90[.]213[.]150:80

Brute Ratel C4 Detected – 35[.]72[.]0[.]113:80

Brute Ratel C4 Detected – 149[.]28[.]251[.]203:80

CVE Alert: CVE-2025-61756 – Oracle Corporation – Oracle Financial Services Analytical Applications Infrastructure

CVE Alert: CVE-2025-61763 – Oracle Corporation – Oracle Essbase

CVE Alert: CVE-2025-62290 – Oracle Corporation – Oracle ZFS Storage Appliance Kit

CVE Alert: CVE-2025-61760 – Oracle Corporation – Oracle VM VirtualBox

CVE Alert: CVE-2025-61752 – Oracle Corporation – Oracle WebLogic Server

You may have missed