Security

Malware Analysis – ransomware – b9633cbd2d5d981610b3f99cfa6a3f51

October 5, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: b9633cbd2d5d981610b3f99cfa6a3f51SHA1: 64ca6877c0ad115191d950b11df709854dbb6807ANALYSIS DATE: 2022-10-05T13:22:04ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – smokeloader – ffcfc1526b2540403e83ffb80c1274a9

October 5, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: ffcfc1526b2540403e83ffb80c1274a9SHA1: edbec265adb2149eae9b433df946ee9e69e5deb8ANALYSIS DATE: 2022-10-05T14:02:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – fc47e9571ca6ac5aa22494a8924c5303

October 5, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: fc47e9571ca6ac5aa22494a8924c5303SHA1: 3f38e682284990961cec20317ef33e675dc20d43ANALYSIS DATE: 2022-10-05T14:27:13ZTTPS: T1060, T1112, T1082, T1012,...

Malware Analysis – djvu – ffcfc1526b2540403e83ffb80c1274a9

October 5, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, collection, discovery, persistence, ransomware, spyware, stealerMD5: ffcfc1526b2540403e83ffb80c1274a9SHA1: edbec265adb2149eae9b433df946ee9e69e5deb8ANALYSIS DATE: 2022-10-05T14:10:26ZTTPS: T1130, T1112, T1082,...

Malware Analysis – djvu – 95503e66b8b02be76b487665cd22127e

October 5, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 95503e66b8b02be76b487665cd22127eSHA1: aa950f5da6313eea5b765e68ba5842316f7c31eaANALYSIS DATE: 2022-10-05T14:24:31ZTTPS: T1060, T1112, T1222, T1053,...

Malware Analysis – lockbit – a9fb78ede24ebca4b2802637a0752c45

October 5, 2022

Score: 10 MALWARE FAMILY: lockbitTAGS:family:lockbit, ransomwareMD5: a9fb78ede24ebca4b2802637a0752c45SHA1: 994226d8a3ddaad76fade66c77958f00f3cf3d5aANALYSIS DATE: 2022-10-04T05:37:03ZTTPS: T1491, T1112, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Security

Malware Analysis – ransomware – b9633cbd2d5d981610b3f99cfa6a3f51

Malware Analysis – smokeloader – ffcfc1526b2540403e83ffb80c1274a9

Malware Analysis – djvu – fc47e9571ca6ac5aa22494a8924c5303

Malware Analysis – djvu – ffcfc1526b2540403e83ffb80c1274a9

Malware Analysis – djvu – 95503e66b8b02be76b487665cd22127e

Malware Analysis – lockbit – a9fb78ede24ebca4b2802637a0752c45

Erlik 2 – Vulnerable-Flask-App

Cobalt Stike Beacon Detected – 157[.]230[.]50[.]134:443

Cobalt Stike Beacon Detected – 5[.]44[.]42[.]49:80

Cobalt Stike Beacon Detected – 43[.]143[.]175[.]188:2096

Cobalt Stike Beacon Detected – 59[.]173[.]17[.]104:82

Cobalt Stike Beacon Detected – 49[.]235[.]95[.]50:87

Cobalt Stike Beacon Detected – 42[.]192[.]151[.]207:80

Cobalt Stike Beacon Detected – 47[.]109[.]43[.]215:443

Cobalt Stike Beacon Detected – 3[.]139[.]100[.]167:443

Cobalt Stike Beacon Detected – 152[.]136[.]232[.]171:8870

OnionPoison: malicious Tor Browser installer served through a popular Chinese YouTube channel

OnionPoison: infected Tor Browser installer distributed through popular YouTube channel

Cobalt Stike Beacon Detected – 156[.]96[.]157[.]101:80

Cobalt Stike Beacon Detected – 152[.]32[.]145[.]118:80

Cobalt Stike Beacon Detected – 72[.]18[.]215[.]170:2083

Cobalt Stike Beacon Detected – 84[.]246[.]85[.]141:443

Cobalt Stike Beacon Detected – 43[.]143[.]96[.]253:5555

Cobalt Stike Beacon Detected – 23[.]94[.]212[.]118:80

Cobalt Strike Beacon Detected – 74[.]176[.]106[.]50:443

Cobalt Strike Beacon Detected – 193[.]42[.]60[.]108:443

CISA: CISA Releases Eight Industrial Control Systems Advisories

CISA: CISA Adds One Known Exploited Vulnerability to Catalog

CISA: CISA Adds One Known Exploited Vulnerability to Catalog

You may have missed