Security

Malware Analysis – djvu – d4ce2b268bde19084d1b359d3a4829b3

October 22, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: d4ce2b268bde19084d1b359d3a4829b3SHA1: 2a4db50d36a2832f5da23ec258b8eec7cbda626aANALYSIS DATE: 2022-10-22T08:06:58ZTTPS: T1060, T1112, T1082, T1005,...

Malware Analysis – danabot – 7fbe91ac75b84e34eef686ccf1322f25

October 22, 2022

Score: 10 MALWARE FAMILY: danabotTAGS:family:danabot, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, banker, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 7fbe91ac75b84e34eef686ccf1322f25SHA1: d57422b77bee807b3e5df377abb7fcb187bfa5bcANALYSIS...

Cobalt Stike Beacon Detected – 47[.]100[.]47[.]35:80

October 22, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 1[.]13[.]176[.]232:80

October 22, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 47[.]243[.]236[.]221:4443

October 22, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 106[.]13[.]54[.]144:8010

October 22, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – b0a1a617d49859b95228bc5f4edbc783

October 22, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: b0a1a617d49859b95228bc5f4edbc783SHA1: 4147ac09ca79aaa488e3816a57bea7ef6d0e446fANALYSIS DATE: 2022-10-22T08:28:10ZTTPS: T1053, T1005, T1081, T1012,...

Malware Analysis – danabot – 794f5c531271e70c1af3a23fa6e74509

October 22, 2022

Score: 10 MALWARE FAMILY: danabotTAGS:family:danabot, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, banker, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 794f5c531271e70c1af3a23fa6e74509SHA1: d70c740b27c0dc476986fdf0d9ae6ecda5a71ed1ANALYSIS...

Malware Analysis – djvu – e537a3ab6b4e48a6d9121aa780761c01

October 22, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: e537a3ab6b4e48a6d9121aa780761c01SHA1: 2e0a71d24fcfcd151c11b1f50539669c2d6a266fANALYSIS DATE: 2022-10-22T08:44:50ZTTPS: T1012, T1082, T1060, T1112,...

Malware Analysis – djvu – f7358f89f421c996767e193d4457cd33

October 22, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: f7358f89f421c996767e193d4457cd33SHA1: 49d1e745872ee4f14ee54c5036a077c1b6beaef3ANALYSIS DATE: 2022-10-22T09:00:54ZTTPS: T1012, T1060, T1112, T1222,...

Cobalt Stike Beacon Detected – 193[.]233[.]202[.]121:80

October 22, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 18[.]184[.]235[.]54:80

October 22, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 43[.]138[.]150[.]21:8001

October 22, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 124[.]156[.]87[.]117:443

October 22, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – – 351f7496c3d09f5cf5577125d0ba03ac

October 22, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: 351f7496c3d09f5cf5577125d0ba03acSHA1: c2dadfb62972ab16abbfd29870758c372194d6a3ANALYSIS DATE: 2022-10-22T09:09:39ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – f1ed7c8df3b8844051673481c7a96fc9

October 22, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: f1ed7c8df3b8844051673481c7a96fc9SHA1: f6ec99d577cadc4f990388874b2f942f5b501a8fANALYSIS DATE: 2022-10-22T09:06:13ZTTPS: T1222, T1082, T1005, T1081,...

Malware Analysis – smokeloader – c711a4092dc474788a809a2a04817d47

October 22, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: c711a4092dc474788a809a2a04817d47SHA1: 4cf6b33deb31e59774abfe668ea3bba006893eb5ANALYSIS DATE: 2022-10-22T09:21:05ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – wannacry – 4c3778774e953461f657c3f30dcae65c

October 22, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: 4c3778774e953461f657c3f30dcae65cSHA1: 95949074bd6ea96adadfb933ec87d090ef56a8a7ANALYSIS DATE: 2022-10-22T09:20:23ZTTPS: T1158, T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Cobalt Stike Beacon Detected – 185[.]143[.]223[.]69:443

October 22, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 43[.]132[.]124[.]75:443

October 22, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 31[.]41[.]244[.]192:80

October 22, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 38[.]126[.]169[.]107:443

October 22, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – locky – f40dfb641736b161558f45a28eb7d12c

October 22, 2022

Score: 10 MALWARE FAMILY: lockyTAGS:family:locky, ransomwareMD5: f40dfb641736b161558f45a28eb7d12cSHA1: 5f7041f9e5abfc97c80bb1175c433fec01c2eb3bANALYSIS DATE: 2022-10-22T09:36:16ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – ransomware – 7b2e99759b23da1ac4e2672684b75c57

October 22, 2022

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 7b2e99759b23da1ac4e2672684b75c57SHA1: 2e80003d77c6a07c6dfc3e8c85586d226e2cb541ANALYSIS DATE: 2022-10-22T09:56:55ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Security

Malware Analysis – djvu – d4ce2b268bde19084d1b359d3a4829b3

Malware Analysis – danabot – 7fbe91ac75b84e34eef686ccf1322f25

Cobalt Stike Beacon Detected – 47[.]100[.]47[.]35:80

Cobalt Stike Beacon Detected – 1[.]13[.]176[.]232:80

Cobalt Stike Beacon Detected – 47[.]243[.]236[.]221:4443

Cobalt Stike Beacon Detected – 106[.]13[.]54[.]144:8010

Malware Analysis – djvu – b0a1a617d49859b95228bc5f4edbc783

Malware Analysis – danabot – 794f5c531271e70c1af3a23fa6e74509

Malware Analysis – djvu – e537a3ab6b4e48a6d9121aa780761c01

Malware Analysis – djvu – f7358f89f421c996767e193d4457cd33

Cobalt Stike Beacon Detected – 193[.]233[.]202[.]121:80

Cobalt Stike Beacon Detected – 18[.]184[.]235[.]54:80

Cobalt Stike Beacon Detected – 43[.]138[.]150[.]21:8001

Cobalt Stike Beacon Detected – 124[.]156[.]87[.]117:443

Malware Analysis – – 351f7496c3d09f5cf5577125d0ba03ac

Malware Analysis – djvu – f1ed7c8df3b8844051673481c7a96fc9

Malware Analysis – smokeloader – c711a4092dc474788a809a2a04817d47

Malware Analysis – wannacry – 4c3778774e953461f657c3f30dcae65c

Cobalt Stike Beacon Detected – 185[.]143[.]223[.]69:443

Cobalt Stike Beacon Detected – 43[.]132[.]124[.]75:443

Cobalt Stike Beacon Detected – 31[.]41[.]244[.]192:80

Cobalt Stike Beacon Detected – 38[.]126[.]169[.]107:443

Malware Analysis – locky – f40dfb641736b161558f45a28eb7d12c

Malware Analysis – ransomware – 7b2e99759b23da1ac4e2672684b75c57

[AKIRA] – Ransomware Victim: RFA Decor

CISA: FBI Warns of Data Extortion Scam Targeting Corporate Executives

CVE Alert: CVE-2024-13777

CVE Alert: CVE-2024-13780

CVE Alert: CVE-2024-13787

You may have missed