Security

Malware Analysis – smokeloader – 8ae5a35a6e434514f421e720aecab786

October 22, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 8ae5a35a6e434514f421e720aecab786SHA1: 518ae303c6e50d29ab84765b49e94d9f34862599ANALYSIS DATE: 2022-10-22T04:21:05ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ransomware – 5253ee04a417dcde084c02f9922996bc

October 22, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 5253ee04a417dcde084c02f9922996bcSHA1: 96788615fc0392ac867d7f61e8b8042ed648cd51ANALYSIS DATE: 2022-10-22T04:23:52ZTTPS: T1082, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – ransomware – a4743f759b43493ff32ce5f70b45946d

October 22, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: a4743f759b43493ff32ce5f70b45946dSHA1: e89f2f7f7e226a869a60bec822db5cafb26d36dbANALYSIS DATE: 2022-10-22T04:33:03ZTTPS: T1082, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – – ced879efa3f8ed1c2ff2952c6bc7225e

October 22, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: ced879efa3f8ed1c2ff2952c6bc7225eSHA1: 8286ca8d0c4a54a15aa194ec78fde219bf4c4149ANALYSIS DATE: 2022-10-22T04:45:29ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – 7b1414db846dddafb2de8405425b57fd

October 22, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 7b1414db846dddafb2de8405425b57fdSHA1: e9220f99b4c33d253221ecf54b58af3a0573054aANALYSIS DATE: 2022-10-22T04:32:48ZTTPS:...

Malware Analysis – – 9dfb7e7d7cb190a206b360f6bea86f0d

October 22, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: 9dfb7e7d7cb190a206b360f6bea86f0dSHA1: 43d3abf94c67911584cf6a2800c240be7edc0a9eANALYSIS DATE: 2022-10-22T04:28:54ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – – f23f34894961227fa6ddb1d64318e28e

October 22, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: f23f34894961227fa6ddb1d64318e28eSHA1: b9e83c5e9ff682ad0a54694ca75557b3defa9d7aANALYSIS DATE: 2022-10-22T04:48:22ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – – 6b07adb7eeea289e1908cb5baf5a5d93

October 22, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: 6b07adb7eeea289e1908cb5baf5a5d93SHA1: 47d27128426623be81417c109a12e3838c093eb6ANALYSIS DATE: 2022-10-22T04:50:03ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – – aab7a497e2166339b9a82a01d2a051c4

October 22, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: aab7a497e2166339b9a82a01d2a051c4SHA1: 10e9aee8464b4094fb6a6a754d8f617b8746119bANALYSIS DATE: 2022-10-22T04:49:18ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – – 8ba287e4d5b62c8b3bd9e5d3e04afcee

October 22, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: 8ba287e4d5b62c8b3bd9e5d3e04afceeSHA1: 02781f4b15680c21c59a26959fe858044b0f6135ANALYSIS DATE: 2022-10-22T04:46:36ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Security

Malware Analysis – smokeloader – 8ae5a35a6e434514f421e720aecab786

Malware Analysis – ransomware – 5253ee04a417dcde084c02f9922996bc

Malware Analysis – ransomware – a4743f759b43493ff32ce5f70b45946d

Malware Analysis – – ced879efa3f8ed1c2ff2952c6bc7225e

Malware Analysis – djvu – 7b1414db846dddafb2de8405425b57fd

Malware Analysis – – 9dfb7e7d7cb190a206b360f6bea86f0d

Malware Analysis – – f23f34894961227fa6ddb1d64318e28e

Malware Analysis – – 6b07adb7eeea289e1908cb5baf5a5d93

Malware Analysis – – aab7a497e2166339b9a82a01d2a051c4

Malware Analysis – – 8ba287e4d5b62c8b3bd9e5d3e04afcee

Cobalt Stike Beacon Detected – 185[.]225[.]17[.]60:443

Cobalt Stike Beacon Detected – 44[.]197[.]246[.]120:53

Cobalt Stike Beacon Detected – 43[.]142[.]138[.]251:8046

Cobalt Stike Beacon Detected – 101[.]42[.]178[.]86:8443

Cobalt Stike Beacon Detected – 216[.]240[.]130[.]72:443

Cobalt Stike Beacon Detected – 143[.]198[.]116[.]67:80

Cobalt Stike Beacon Detected – 128[.]199[.]60[.]130:80

Cobalt Stike Beacon Detected – 199[.]127[.]60[.]67:80

Cobalt Stike Beacon Detected – 101[.]99[.]94[.]218:80

Cobalt Stike Beacon Detected – 206[.]2[.]200[.]132:80

Cobalt Stike Beacon Detected – 137[.]184[.]18[.]113:443

EnergyAustralia Electricity company discloses security breach

Cobalt Stike Beacon Detected – 38[.]6[.]155[.]103:443

Cobalt Stike Beacon Detected – 190[.]123[.]44[.]225:443

[INCRANSOM] – Ransomware Victim: Naples Heritage Golf & Country Club

[LYNX] – Ransomware Victim: Dynamic Closures

[QILIN] – Ransomware Victim: Connekted, Inc[.]

[FOG] – Ransomware Victim: WJCC Public Schools (wjccschools[.]org)

CVE Alert: CVE-2025-0954

You may have missed