Security

Malware Analysis – asyncrat – ea78d1ea9761657c99bc813f66be5b1d

March 5, 2023

Score: 10 MALWARE FAMILY: asyncratTAGS:family:asyncrat, family:nanocore, family:njrat, family:xworm, botnet::), botnet:default, botnet:متخطي بروسيس خاص, evasion, keylogger, persistence, pyinstaller, ransomware, rat, spyware,...

Malware Analysis – djvu – 4eb58b88d5eb2f3c3ee03ef07d4ec90e

March 5, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 4eb58b88d5eb2f3c3ee03ef07d4ec90eSHA1: a99e6c29bd428027701ead8e6f45856c4b1d782dANALYSIS DATE: 2023-03-04T21:32:44ZTTPS: T1005, T1081, T1012, T1082, T1222,...

Malware Analysis – djvu – 6c18dae7be8f90441b86851a7cc1d62a

March 5, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 6c18dae7be8f90441b86851a7cc1d62aSHA1: 9932f62742d803bafc0b8ceec0af99c5401467ddANALYSIS DATE: 2023-03-04T23:26:45ZTTPS: T1005, T1081, T1222, T1053, T1012,...

Malware Analysis – redline – 481ca5811352fa9ef53a2f39a83bd1cf

March 5, 2023

Score: 10 MALWARE FAMILY: redlineTAGS:family:redline, discovery, infostealer, persistence, ransomware, spywareMD5: 481ca5811352fa9ef53a2f39a83bd1cfSHA1: af239d190a3c2bdc8531a8c34a7bcedc086ec88cANALYSIS DATE: 2023-03-04T23:11:17ZTTPS: T1082, T1060, T1012, T1005, T1081, T1112,...

Malware Analysis – djvu – 37a0cfb5bde13c19c06363e90c2d98ad

March 5, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 37a0cfb5bde13c19c06363e90c2d98adSHA1: 74a2edca446c6929ac68ebead896c1025acb4dbbANALYSIS DATE: 2023-03-04T21:46:49ZTTPS: T1082, T1053, T1012, T1005, T1081,...

Malware Analysis – asyncrat – 27f8ef3eb1c6fdbe295174f4fa4ea19c

March 5, 2023

Score: 10 MALWARE FAMILY: asyncratTAGS:family:asyncrat, family:bitrat, family:neshta, family:njrat, family:redline, family:remcos, family:warzonerat, botnet:default, botnet:hacked, botnet:hackpack, botnet:nyan cat, botnet:remotehost, discovery, evasion, infostealer,...

Cobalt Stike Beacon Detected – 85[.]195[.]123[.]138:443

March 5, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 101[.]42[.]38[.]79:8888

March 5, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 107[.]173[.]251[.]222:443

March 5, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 34[.]125[.]190[.]77:443

March 5, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – 257c7df0813fc7897781336970a207ff

March 4, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 257c7df0813fc7897781336970a207ffSHA1: fdd625dc334bcd40d07da5c481424a85bf15a53bANALYSIS DATE: 2023-03-04T16:24:54ZTTPS: T1005, T1081, T1012, T1060, T1112,...

Malware Analysis – ransomware – 443a37cd2cc49d05fb25c4db8ee95632

March 4, 2023

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 443a37cd2cc49d05fb25c4db8ee95632SHA1: 27be9cfb271d790f37868317314bae772365fc6cANALYSIS DATE: 2023-03-04T15:18:54ZTTPS: T1005, T1081 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – djvu – a5f09e4df796c56f6dcc97e840cd8c02

March 4, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: a5f09e4df796c56f6dcc97e840cd8c02SHA1: 19a0f4e6bacc31eb024dc63037033f7b5de11da5ANALYSIS DATE: 2023-03-04T17:27:07ZTTPS: T1053, T1005, T1081, T1012, T1082,...

Malware Analysis – smokeloader – b6a95bcb19a3b33ca3ae1c4996a64dc8

March 4, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: b6a95bcb19a3b33ca3ae1c4996a64dc8SHA1: 482bed9c3b6d52bcd0c820829c009df3ea723db4ANALYSIS DATE: 2023-03-04T17:39:02ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – b6fac73eafc2ddc0b6ae6c605f4a451f

March 4, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: b6fac73eafc2ddc0b6ae6c605f4a451fSHA1: d4d2aa2ea7f7a0967a5d5f6213a389ad842dcce7ANALYSIS DATE: 2023-03-04T16:26:28ZTTPS: T1005, T1081, T1082, T1053, T1012,...

Malware Analysis – djvu – 3b1535328a6380de620657732a170e4b

March 4, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 3b1535328a6380de620657732a170e4bSHA1: 62179f2f1800b4e862c956cf1e8dc9f2bbfad135ANALYSIS DATE: 2023-03-04T17:21:29ZTTPS: T1222, T1012, T1082, T1060, T1112,...

Cobalt Stike Beacon Detected – 47[.]103[.]64[.]64:1111

March 4, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 109[.]205[.]61[.]140:80

March 4, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 185[.]143[.]223[.]120:443

March 4, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 190[.]97[.]165[.]108:443

March 4, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 1[.]15[.]42[.]124:80

March 4, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 39[.]105[.]188[.]90:8443

March 4, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – b22d97534fde7cb0f61db19f58bf102a

March 4, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: b22d97534fde7cb0f61db19f58bf102aSHA1: 951dfcaf058103e7a52bc5fca8ce5ca90d3486e2ANALYSIS DATE: 2023-03-04T09:20:26ZTTPS: T1082, T1012, T1053, T1005, T1081,...

Malware Analysis – djvu – 49558407bdf3851df97837959cca2910

March 4, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 49558407bdf3851df97837959cca2910SHA1: a9d42dbebf8d9ec47a444a13c584e8a0522cda88ANALYSIS DATE: 2023-03-04T11:35:41ZTTPS: T1060, T1112, T1053, T1005, T1081,...

Security

Malware Analysis – asyncrat – ea78d1ea9761657c99bc813f66be5b1d

Malware Analysis – djvu – 4eb58b88d5eb2f3c3ee03ef07d4ec90e

Malware Analysis – djvu – 6c18dae7be8f90441b86851a7cc1d62a

Malware Analysis – redline – 481ca5811352fa9ef53a2f39a83bd1cf

Malware Analysis – djvu – 37a0cfb5bde13c19c06363e90c2d98ad

Malware Analysis – asyncrat – 27f8ef3eb1c6fdbe295174f4fa4ea19c

Cobalt Stike Beacon Detected – 85[.]195[.]123[.]138:443

Cobalt Stike Beacon Detected – 101[.]42[.]38[.]79:8888

Cobalt Stike Beacon Detected – 107[.]173[.]251[.]222:443

Cobalt Stike Beacon Detected – 34[.]125[.]190[.]77:443

Malware Analysis – djvu – 257c7df0813fc7897781336970a207ff

Malware Analysis – ransomware – 443a37cd2cc49d05fb25c4db8ee95632

Malware Analysis – djvu – a5f09e4df796c56f6dcc97e840cd8c02

Malware Analysis – smokeloader – b6a95bcb19a3b33ca3ae1c4996a64dc8

Malware Analysis – djvu – b6fac73eafc2ddc0b6ae6c605f4a451f

Malware Analysis – djvu – 3b1535328a6380de620657732a170e4b

Cobalt Stike Beacon Detected – 47[.]103[.]64[.]64:1111

Cobalt Stike Beacon Detected – 109[.]205[.]61[.]140:80

Cobalt Stike Beacon Detected – 185[.]143[.]223[.]120:443

Cobalt Stike Beacon Detected – 190[.]97[.]165[.]108:443

Cobalt Stike Beacon Detected – 1[.]15[.]42[.]124:80

Cobalt Stike Beacon Detected – 39[.]105[.]188[.]90:8443

Malware Analysis – djvu – b22d97534fde7cb0f61db19f58bf102a

Malware Analysis – djvu – 49558407bdf3851df97837959cca2910

CVE Alert: CVE-2025-27347

CVE Alert: CVE-2025-27357

CVE Alert: CVE-2025-27356

CVE Alert: CVE-2025-25460

CVE Alert: CVE-2025-26803

You may have missed