Cobalt Stike Beacon Detected – 43[.]155[.]2[.]46:2086
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Security
Cobalt Stike Beacon Detected – 62[.]182[.]159[.]147:80
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Malware Analysis – djvu – bed3853c06f4fa8b1dca5cfd5ef08ba3
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:raccoon, family:vidar, botnet:17aad1e8aa2ca5164d7690cff1926390, botnet:517, botnet:9333547b6d5c69ea798fd93c66d78435, collection, discovery, persistence, ransomware, spyware, stealerMD5: bed3853c06f4fa8b1dca5cfd5ef08ba3SHA1: 08e6df089dfdf1c5c8f61550e33b93bc0373c3f1ANALYSIS DATE: 2022-10-08T08:33:00ZTTPS:...
Malware Analysis – smokeloader – 8ce22bc1444ad810017b5cebba54afef
Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 8ce22bc1444ad810017b5cebba54afefSHA1: d4d00bae938c76891daaf5bba0c5210ee8a11335ANALYSIS DATE: 2022-10-08T09:31:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...
Malware Analysis – djvu – 8ce22bc1444ad810017b5cebba54afef
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:raccoon, family:redline, family:smokeloader, family:vidar, botnet:17aad1e8aa2ca5164d7690cff1926390, botnet:517, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5:...
Malware Analysis – wannacry – 3a90fb6f3194ef7204223681c17d05aa
Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, ransomware, wormMD5: 3a90fb6f3194ef7204223681c17d05aaSHA1: dcd511cadc7d96168f1d8a6d4d8ab9793cd5c841ANALYSIS DATE: 2022-10-08T09:39:54ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...
Malware Analysis – djvu – dded0f80668ac80813b64d0446c08a1a
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5: dded0f80668ac80813b64d0446c08a1aSHA1: b8bd4baa6f8de52f74680ab9396c382ea37ba1e4ANALYSIS...
Malware Analysis – djvu – bf08335a7f356c591227c922bb569924
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: bf08335a7f356c591227c922bb569924SHA1: d7059fca57702cfa55fbe9b41ea8e10b56e69583ANALYSIS DATE: 2022-10-08T10:14:56ZTTPS: T1012, T1082, T1053, T1005,...
Malware Analysis – smokeloader – dded0f80668ac80813b64d0446c08a1a
Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: dded0f80668ac80813b64d0446c08a1aSHA1: b8bd4baa6f8de52f74680ab9396c382ea37ba1e4ANALYSIS DATE: 2022-10-08T10:31:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...
Malware Analysis – djvu – 9fd1f518e56f044ab5daae7d530fdfd6
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 9fd1f518e56f044ab5daae7d530fdfd6SHA1: 38fd15016a4e44d9d0639b8569226555c4499244ANALYSIS DATE: 2022-10-08T10:10:54ZTTPS: T1053, T1005, T1081, T1012,...
Empire C2 Detected – 138[.]68[.]25[.]174:8999
The Information provided at the time of posting was detected as "Empire C2". Depending on when you are viewing this...
TOP 10 unattributed APT mysteries
Targeted attack attribution is always a tricky thing, and in general, we believe that attribution is best left to law...
Malware Analysis – smokeloader – a469bb625be5d13d8aa867f2fa6b4730
Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: a469bb625be5d13d8aa867f2fa6b4730SHA1: 784aab6c2a854ecd4b30c8e2775f2dbb01bf7c5bANALYSIS DATE: 2022-10-08T02:01:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...
Malware Analysis – ransomware – 7c12716137f46392a08209d29c9a23c7
Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 7c12716137f46392a08209d29c9a23c7SHA1: 38d5b9e4d8a61ec929fd1e9a2009db83797e8606ANALYSIS DATE: 2022-10-08T02:27:12ZTTPS: T1107, T1490, T1112, T1203 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...
Malware Analysis – djvu – 3cea4cf14cd0a2175326d89a281e0e81
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 3cea4cf14cd0a2175326d89a281e0e81SHA1: 9db8ea1bf0b6aba56dd689a022b8ad5af6e65523ANALYSIS DATE: 2022-10-08T02:20:36ZTTPS: T1005, T1081, T1012, T1082,...
Malware Analysis – djvu – a618c4ffada12e2682dbf46b595b96d4
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: a618c4ffada12e2682dbf46b595b96d4SHA1: c479ed5d2e4c30e13849c2a345828708e8c58c0aANALYSIS DATE: 2022-10-08T02:18:00ZTTPS: T1082, T1012, T1005, T1081,...
Malware Analysis – – 4cbffe0acf3a42b9d9df109cd3006f5f
Score: 8 MALWARE FAMILY: TAGS:MD5: 4cbffe0acf3a42b9d9df109cd3006f5fSHA1: ce65877cbdfe33049ee8d1004a93826f8c16cf53ANALYSIS DATE: 2022-10-08T02:16:49ZTTPS: T1012, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...
Malware Analysis – smokeloader – 4d8f01c686b099f19366ee38ac8b423c
Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 4d8f01c686b099f19366ee38ac8b423cSHA1: 8b12aff95432b1a081a0ab98e8ac12f7a6b98787ANALYSIS DATE: 2022-10-08T03:31:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...
Malware Analysis – smokeloader – 20f6d6a75c4e0f1f0e59f4ce9da4fcdf
Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 20f6d6a75c4e0f1f0e59f4ce9da4fcdfSHA1: f733f55da3f6df46838d86d2b564f6ddf880b571ANALYSIS DATE: 2022-10-08T02:32:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...
Malware Analysis – djvu – 20f6d6a75c4e0f1f0e59f4ce9da4fcdf
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:raccoon, family:smokeloader, family:vidar, botnet:17aad1e8aa2ca5164d7690cff1926390, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 20f6d6a75c4e0f1f0e59f4ce9da4fcdfSHA1: f733f55da3f6df46838d86d2b564f6ddf880b571ANALYSIS...
Malware Analysis – djvu – e931ee5e0c7a7eb47c201828c496e794
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: e931ee5e0c7a7eb47c201828c496e794SHA1: 455b3c1d2a56223464c9ad15593e0ffdc00d7b6cANALYSIS DATE: 2022-10-08T03:21:38ZTTPS: T1005, T1081, T1082, T1053,...
Malware Analysis – djvu – 4167826d2a9574ab9fca45f85f5fd6a0
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 4167826d2a9574ab9fca45f85f5fd6a0SHA1: 49a1aa342bd5b9a095f08742612f4ea5ae7e8c6fANALYSIS DATE: 2022-10-08T04:32:25ZTTPS:...
Malware Analysis – smokeloader – 4167826d2a9574ab9fca45f85f5fd6a0
Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 4167826d2a9574ab9fca45f85f5fd6a0SHA1: 49a1aa342bd5b9a095f08742612f4ea5ae7e8c6fANALYSIS DATE: 2022-10-08T04:31:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...
Malware Analysis – djvu – 9c4823daf9720caa8ba8cf87334ad4da
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 9c4823daf9720caa8ba8cf87334ad4daSHA1: 8fee76d26cc5b1b24c2fca445c7cfebffec9baa7ANALYSIS DATE: 2022-10-08T04:13:47ZTTPS: T1082, T1053, T1005, T1081,...
