Security

Malware Analysis – djvu – 522b8a11b8f487fd11a851bba910bf3f

October 23, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 522b8a11b8f487fd11a851bba910bf3fSHA1: f91316474f7dd52530f316b9bfde120da3c17796ANALYSIS DATE: 2022-10-23T16:12:35ZTTPS: T1082, T1053, T1005, T1081,...

Malware Analysis – – a6c266b4c295f9e5d2956c7b2893eb7d

October 23, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: a6c266b4c295f9e5d2956c7b2893eb7dSHA1: c617fd14806b71f5930dd5ee26090ff53649eb12ANALYSIS DATE: 2022-10-23T16:50:36ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – 58b258d5b91b8589a05fafe397233691

October 23, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 58b258d5b91b8589a05fafe397233691SHA1: 870de902ee35343cfb7a917bfc8edf0c52b49eb3ANALYSIS DATE: 2022-10-23T16:26:55ZTTPS: T1060, T1112, T1222, T1005,...

Wholesale giant METRO confirmed to have suffered a cyberattack

October 23, 2022

International cash and carry giant METRO suffered this week IT infrastructure outages following a cyberattack. International cash and carry giant...

Cobalt Stike Beacon Detected – 89[.]248[.]163[.]247:443

October 23, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 124[.]221[.]119[.]2:8443

October 23, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 47[.]100[.]47[.]35:5555

October 23, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 47[.]93[.]241[.]137:8080

October 23, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – – 0c997c93bf7aac43e8bc22a9ea2fd9f8

October 23, 2022

Score: 8 MALWARE FAMILY: TAGS:MD5: 0c997c93bf7aac43e8bc22a9ea2fd9f8SHA1: 1c1e46e49c769c48104ee40506c67f738c6978f9ANALYSIS DATE: 2022-10-23T08:14:19ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – persistence – a0dcaefaa2689c66a46ee8222a6fbbc1

October 23, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: a0dcaefaa2689c66a46ee8222a6fbbc1SHA1: 67a1098314a8c987533615093274a2450e16f01dANALYSIS DATE: 2022-10-23T08:06:23ZTTPS: T1107, T1490, T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – – d4cdafc2d8aef481a9b6830894efcfc1

October 23, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: d4cdafc2d8aef481a9b6830894efcfc1SHA1: 68d8668d0b606b97ad40daacd3e680d1badeaf3cANALYSIS DATE: 2022-10-23T08:07:45ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Cobalt Stike Beacon Detected – 45[.]84[.]240[.]5:443

October 23, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 1[.]12[.]235[.]212:8443

October 23, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 140[.]120[.]114[.]107:9527

October 23, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 43[.]142[.]133[.]138:8888

October 23, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – bab0aa6a400fc9add645eb7611ef1ad6

October 23, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: bab0aa6a400fc9add645eb7611ef1ad6SHA1: fc0bbf5eb5dc2fa98ac61c860e3a9588c08b9430ANALYSIS DATE: 2022-10-23T08:32:42ZTTPS: T1060, T1112, T1082, T1012,...

Malware Analysis – djvu – 4663052a8fe18804286142693bbebfad

October 23, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 4663052a8fe18804286142693bbebfadSHA1: f5b11d52a4b4fb3a54efe877b9544305028e28e5ANALYSIS DATE: 2022-10-23T08:18:04ZTTPS: T1053, T1005, T1081, T1222,...

Malware Analysis – banker – 129e437a5f9ab363c48494755a3f8585

October 23, 2022

Score: 8 MALWARE FAMILY: bankerTAGS:banker, ransomwareMD5: 129e437a5f9ab363c48494755a3f8585SHA1: 3749ec8ce46f6896c0389f1cdd263bb6ef688cecANALYSIS DATE: 2022-10-23T08:26:21ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – djvu – 7e91f253656cfc70bd475bf9c0e61124

October 23, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 7e91f253656cfc70bd475bf9c0e61124SHA1: 8489c607d95b6dcc87e7b540dd2f287674e5d40cANALYSIS DATE: 2022-10-23T08:44:09ZTTPS: T1082, T1005, T1081, T1222,...

Cobalt Stike Beacon Detected – 106[.]12[.]159[.]14:443

October 23, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 1[.]12[.]42[.]153:8888

October 23, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 43[.]142[.]193[.]86:80

October 23, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 204[.]48[.]24[.]99:8443

October 23, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – – eabd3a0897cd161d8ba35caea23d0556

October 23, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: eabd3a0897cd161d8ba35caea23d0556SHA1: 45216a4e48ef209fa244ec2425486db671d55530ANALYSIS DATE: 2022-10-23T08:55:43ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Security

Malware Analysis – djvu – 522b8a11b8f487fd11a851bba910bf3f

Malware Analysis – – a6c266b4c295f9e5d2956c7b2893eb7d

Malware Analysis – djvu – 58b258d5b91b8589a05fafe397233691

Wholesale giant METRO confirmed to have suffered a cyberattack

Cobalt Stike Beacon Detected – 89[.]248[.]163[.]247:443

Cobalt Stike Beacon Detected – 124[.]221[.]119[.]2:8443

Cobalt Stike Beacon Detected – 47[.]100[.]47[.]35:5555

Cobalt Stike Beacon Detected – 47[.]93[.]241[.]137:8080

Malware Analysis – – 0c997c93bf7aac43e8bc22a9ea2fd9f8

Malware Analysis – persistence – a0dcaefaa2689c66a46ee8222a6fbbc1

Malware Analysis – – d4cdafc2d8aef481a9b6830894efcfc1

Cobalt Stike Beacon Detected – 45[.]84[.]240[.]5:443

Cobalt Stike Beacon Detected – 1[.]12[.]235[.]212:8443

Cobalt Stike Beacon Detected – 140[.]120[.]114[.]107:9527

Cobalt Stike Beacon Detected – 43[.]142[.]133[.]138:8888

Malware Analysis – djvu – bab0aa6a400fc9add645eb7611ef1ad6

Malware Analysis – djvu – 4663052a8fe18804286142693bbebfad

Malware Analysis – banker – 129e437a5f9ab363c48494755a3f8585

Malware Analysis – djvu – 7e91f253656cfc70bd475bf9c0e61124

Cobalt Stike Beacon Detected – 106[.]12[.]159[.]14:443

Cobalt Stike Beacon Detected – 1[.]12[.]42[.]153:8888

Cobalt Stike Beacon Detected – 43[.]142[.]193[.]86:80

Cobalt Stike Beacon Detected – 204[.]48[.]24[.]99:8443

Malware Analysis – – eabd3a0897cd161d8ba35caea23d0556

CISA: CISA Releases Nine Industrial Control Systems Advisories

CISA: CISA Releases Fact Sheet Detailing Embedded Backdoor Function of Contec CMS8000 Firmware

CISA: CISA Adds One Known Exploited Vulnerability to Catalog

CISA: CISA Partners with ASD’s ACSC, CCCS, NCSC-UK, and Other International and US Organizations to Release Guidance on Edge Devices

CISA: CISA Adds Four Known Exploited Vulnerabilities to Catalog

You may have missed