Security

Malware Analysis – djvu – 5a8e2f2bdcc6be8d189e1badb8717ca0

May 16, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:9dfa7ee730fa2f1efb5ed51dbbec22f5, discovery, persistence, ransomware, spyware, stealerMD5: 5a8e2f2bdcc6be8d189e1badb8717ca0SHA1: 08d6fbe62d6bfbff71e9cb54d04bd995de47ea0dANALYSIS DATE: 2023-05-16T15:46:00ZTTPS: T1060, T1112, T1082, T1005,...

CISA: CISA Releases Three Industrial Control Systems Advisories

May 16, 2023

CISA Releases Three Industrial Control Systems Advisories CISA released three Industrial Control Systems (ICS) advisories on May 16, 2023. These...

Cobalt Stike Beacon Detected – 101[.]43[.]165[.]220:8080

May 16, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

CISA: Mozilla Releases Security Advisories for Multiple Products

May 16, 2023

Mozilla Releases Security Advisories for Multiple Products Mozilla has released security advisories to address vulnerabilities in Thunderbird, Firefox and Firefox...

CISA: CISA Releases One Industrial Control Systems Advisory

May 16, 2023

CISA Releases One Industrial Control Systems Advisory CISA released one Industrial Control Systems (ICS) advisory on May 4, 2023.This advisory...

CISA: CISA Releases Two Industrial Control Systems Advisories

May 16, 2023

CISA Releases Two Industrial Control Systems Advisories CISA released two Industrial Control Systems (ICS) advisories on May 9, 2023. These...

CISA: CISA Releases One Industrial Control Systems Advisory

May 16, 2023

CISA Releases One Industrial Control Systems Advisory CISA released one Industrial Control Systems (ICS) advisory on May 2, 2023. These...

CISA: Microsoft Releases May 2023 Security Updates

May 16, 2023

Microsoft Releases May 2023 Security Updates Microsoft has released updates to address multiple vulnerabilities in Microsoft software. An attacker can...

CISA: CISA and FBI Release Joint Advisory in Response to Active Exploitation of PaperCut Vulnerability

May 16, 2023

CISA and FBI Release Joint Advisory in Response to Active Exploitation of PaperCut Vulnerability CISA and FBI have released a...

CISA: CISA Releases Fifteen Industrial Control Systems Advisories

May 16, 2023

CISA Releases Fifteen Industrial Control Systems Advisories CISA released fifteen Industrial Control Systems (ICS) advisories on May 11, 2023. These...

CISA: CISA Adds Seven Known Exploited Vulnerabilities to Catalog

May 16, 2023

CISA Adds Seven Known Exploited Vulnerabilities to Catalog CISA has added seven new vulnerabilities to its Known Exploited Vulnerabilities Catalog,...

CISA: CISA and Partners Disclose Snake Malware Threat From Russian Cyber Actors

May 16, 2023

CISA and Partners Disclose Snake Malware Threat From Russian Cyber Actors Today, CISA and partners released a joint advisory for...

CISA: CISA Adds One Known Exploited Vulnerability to Catalog

May 16, 2023

CISA Adds One Known Exploited Vulnerability to Catalog CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based...

Cobalt Stike Beacon Detected – 43[.]138[.]150[.]136:80

May 16, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 134[.]17[.]5[.]117:81

May 16, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 91[.]213[.]50[.]110:443

May 16, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

c3612886b816dca2c168a9f2329c54f7a47a529baf396f6cf2abd53afbfc16c0

ShadowSpray – A Tool To Spray Shadow Credentials Across An Entire Domain In Hopes Of Abusing Long Forgotten GenericWrite/GenericAll DACLs Over Other Objects In The Domain

May 15, 2023

A tool to spray Shadow Credentials across an entire domain in hopes of abusing long forgotten GenericWrite/GenericAll DACLs over other...

Malware Analysis – lockbit – 0633d74c0e25b59e42ea4b674417240c

May 15, 2023

Score: 10 MALWARE FAMILY: lockbitTAGS:family:lockbit, ransomware, spyware, stealerMD5: 0633d74c0e25b59e42ea4b674417240cSHA1: b1aeca1530d05004d37ab8dab996f9463a2dad9aANALYSIS DATE: 2023-05-15T15:17:56ZTTPS: T1005, T1081, T1491, T1112, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – lockbit – 1076cc8ff67a56f502f92ac4bd1ef7a2

May 15, 2023

Score: 10 MALWARE FAMILY: lockbitTAGS:family:lockbit, ransomware, spyware, stealerMD5: 1076cc8ff67a56f502f92ac4bd1ef7a2SHA1: ced86dbfd2ea04cdd51f5f87d555a313a46226c3ANALYSIS DATE: 2023-05-15T15:18:00ZTTPS: T1491, T1112, T1082, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – wannacry – 1f449b5387d2de73aeadcf0dd43b4b91

May 15, 2023

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: 1f449b5387d2de73aeadcf0dd43b4b91SHA1: d943c20f180064a0939fb947a3cc8cfb8207c1f9ANALYSIS DATE: 2023-05-15T15:18:07ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – wannacry – 2ac915b394e66a45719c308e66badd2a

May 15, 2023

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, persistence, ransomware, spyware, stealer, wormMD5: 2ac915b394e66a45719c308e66badd2aSHA1: 5ec4fdbb9b2c9313631825562098995793ce6278ANALYSIS DATE: 2023-05-15T15:18:11ZTTPS: T1046, T1158, T1222, T1107, T1490,...

Malware Analysis – ransomware – 1cb2cc59c6cbc0f5ca25f3bc3fe1c227

May 15, 2023

Score: 5 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 1cb2cc59c6cbc0f5ca25f3bc3fe1c227SHA1: 9c3ee8c6ce40fafc881f6931055b95bde631762aANALYSIS DATE: 2023-05-15T15:18:05ZTTPS: T1082, T1112, T1491 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – persistence – 1300732c2ecc5c87640c561678ecca57

May 15, 2023

Score: 8 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 1300732c2ecc5c87640c561678ecca57SHA1: 8dd040f529bac7d2e50984446dc4163d3e467d01ANALYSIS DATE: 2023-05-15T15:18:00ZTTPS: T1130, T1112, T1060, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – persistence – c835bbc4c4eb718ba0653d7b9a5f4448

May 15, 2023

Score: 8 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: c835bbc4c4eb718ba0653d7b9a5f4448SHA1: aad74838886e587fe4fa3c982afa7089fa37a846ANALYSIS DATE: 2023-05-15T15:18:59ZTTPS: T1082, T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Security

Malware Analysis – djvu – 5a8e2f2bdcc6be8d189e1badb8717ca0

CISA: CISA Releases Three Industrial Control Systems Advisories

Cobalt Stike Beacon Detected – 101[.]43[.]165[.]220:8080

CISA: Mozilla Releases Security Advisories for Multiple Products

CISA: CISA Releases One Industrial Control Systems Advisory

CISA: CISA Releases Two Industrial Control Systems Advisories

CISA: CISA Releases One Industrial Control Systems Advisory

CISA: Microsoft Releases May 2023 Security Updates

CISA: CISA and FBI Release Joint Advisory in Response to Active Exploitation of PaperCut Vulnerability

CISA: CISA Releases Fifteen Industrial Control Systems Advisories

CISA: CISA Adds Seven Known Exploited Vulnerabilities to Catalog

CISA: CISA and Partners Disclose Snake Malware Threat From Russian Cyber Actors

CISA: CISA Adds One Known Exploited Vulnerability to Catalog

Cobalt Stike Beacon Detected – 43[.]138[.]150[.]136:80

Cobalt Stike Beacon Detected – 134[.]17[.]5[.]117:81

Cobalt Stike Beacon Detected – 91[.]213[.]50[.]110:443

ShadowSpray – A Tool To Spray Shadow Credentials Across An Entire Domain In Hopes Of Abusing Long Forgotten GenericWrite/GenericAll DACLs Over Other Objects In The Domain

Malware Analysis – lockbit – 0633d74c0e25b59e42ea4b674417240c

Malware Analysis – lockbit – 1076cc8ff67a56f502f92ac4bd1ef7a2

Malware Analysis – wannacry – 1f449b5387d2de73aeadcf0dd43b4b91

Malware Analysis – wannacry – 2ac915b394e66a45719c308e66badd2a

Malware Analysis – ransomware – 1cb2cc59c6cbc0f5ca25f3bc3fe1c227

Malware Analysis – persistence – 1300732c2ecc5c87640c561678ecca57

Malware Analysis – persistence – c835bbc4c4eb718ba0653d7b9a5f4448

CVE Alert: CVE-2025-0910

CVE Alert: CVE-2025-0908

CVE Alert: CVE-2025-0909

CVE Alert: CVE-2025-0906

CVE Alert: CVE-2025-0907

You may have missed