Security

Malware Analysis – djvu – eee1b3def7ccf85f54e78ea8908e482b

February 26, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: eee1b3def7ccf85f54e78ea8908e482bSHA1: d8abb83ba1b87bfd76adf59f825e27c8aacf0d7eANALYSIS DATE: 2023-02-26T03:21:57ZTTPS: T1222, T1060, T1112, T1053, T1005,...

Malware Analysis – djvu – ec7a59120aa48d773c8716798409ef6c

February 26, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: ec7a59120aa48d773c8716798409ef6cSHA1: c48161f62e5407188c0fc96b951c16d0e300b20aANALYSIS DATE: 2023-02-26T05:23:02ZTTPS: T1005, T1081, T1082, T1012, T1060,...

Malware Analysis – chaos – aeb08e18c57936e33a56cad7aba7d16e

February 26, 2023

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, evasion, ransomware, spyware, stealerMD5: aeb08e18c57936e33a56cad7aba7d16eSHA1: ce7dc6ce99d6a4e3c52e0fb0ac7b167455e5215aANALYSIS DATE: 2023-02-26T04:59:38ZTTPS: T1490, T1059, T1107, T1005, T1081, T1012, T1082,...

Malware Analysis – djvu – 0b9d8d3130f041d552cbc9bd81f2e356

February 26, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 0b9d8d3130f041d552cbc9bd81f2e356SHA1: 12b926487abe2849e85290a81fb99dab6241b212ANALYSIS DATE: 2023-02-26T04:29:57ZTTPS: T1005, T1081, T1053, T1012, T1082,...

Malware Analysis – djvu – 10c1d309a43c0ae8c867d445f0983a7c

February 26, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, backdoor, discovery, evasion, persistence, ransomware, stealer, trojan, vmprotectMD5: 10c1d309a43c0ae8c867d445f0983a7cSHA1: 7e81c65fa44afac85129806815dc422e42e7f421ANALYSIS DATE: 2023-02-26T04:34:56ZTTPS: T1012,...

Posh C2 Detected – 164[.]92[.]110[.]36:443

February 26, 2023

The Information provided at the time of posting was detected as "Posh C2". Depending on when you are viewing this...

Posh C2 Detected – 178[.]20[.]47[.]220:443

February 26, 2023

The Information provided at the time of posting was detected as "Posh C2". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 194[.]87[.]46[.]87:4433

February 26, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – 1ecf6c599b5035d4536c883996175b77

February 26, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 1ecf6c599b5035d4536c883996175b77SHA1: 297eaa1223c33f4769ac12a81bda9f05dd0ea7c4ANALYSIS DATE: 2023-02-25T21:43:05ZTTPS: T1053, T1005, T1081, T1012, T1060,...

Malware Analysis – djvu – 934b82044d9260bb02a2fde1ca2ffaf7

February 26, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 934b82044d9260bb02a2fde1ca2ffaf7SHA1: 61091945cdd6b85531044aea55c8743e443bc434ANALYSIS DATE: 2023-02-25T21:28:51ZTTPS: T1060, T1112, T1005, T1081, T1012,...

Malware Analysis – djvu – 807fe85241027aa8b78b2679cad1a2df

February 26, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 807fe85241027aa8b78b2679cad1a2dfSHA1: 18cfca4adf42d019d28fde5fbd5cf7703c95b4ebANALYSIS DATE: 2023-02-25T21:42:59ZTTPS: T1082, T1012, T1060, T1112, T1053,...

Cobalt Stike Beacon Detected – 124[.]221[.]144[.]169:443

February 26, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 77[.]91[.]84[.]1:80

February 26, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 81[.]69[.]221[.]247:8443

February 26, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 138[.]197[.]148[.]29:4433

February 26, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – b1737ee23f46fd10a95c3233ad44c021

February 26, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, backdoor, discovery, persistence, ransomware, stealer, trojan, vmprotectMD5: b1737ee23f46fd10a95c3233ad44c021SHA1: 9e0d0bb417f617b986256d479ede2c9260375accANALYSIS DATE: 2023-02-25T23:55:47ZTTPS: T1012, T1222,...

Malware Analysis – djvu – b45920399db890e6379d037226b90622

February 26, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:pseudomanuscrypt, family:smokeloader, family:vidar, backdoor, discovery, evasion, loader, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: b45920399db890e6379d037226b90622SHA1: 5bf0430e6b78fbd8194606840efd811d298d223eANALYSIS...

Malware Analysis – djvu – 4852acad8ef53a1e2af4b6a0e8cab49b

February 26, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 4852acad8ef53a1e2af4b6a0e8cab49bSHA1: 378450bb16452528c1ec73e2535cab22c9b9f2c0ANALYSIS DATE: 2023-02-25T23:57:26ZTTPS: T1082, T1005, T1081, T1012, T1222,...

Malware Analysis – smokeloader – 02a3a267a5596b104306f92c10a6aa97

February 26, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 02a3a267a5596b104306f92c10a6aa97SHA1: ff81db8dd264ea2eaf203905f2d3c1aa86081695ANALYSIS DATE: 2023-02-25T22:01:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Cobalt Stike Beacon Detected – 1[.]15[.]120[.]10:7778

February 26, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 49[.]232[.]128[.]4:1080

February 26, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 91[.]240[.]118[.]218:8094

February 26, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 139[.]180[.]194[.]27:80

February 26, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – a14d133c4e07e90b869d609f97f087de

February 25, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:pseudomanuscrypt, family:smokeloader, family:vidar, backdoor, discovery, evasion, loader, persistence, ransomware, stealer, trojan, vmprotectMD5: a14d133c4e07e90b869d609f97f087deSHA1: 10dfd3380619e8ecc12e6bdbe3213f832734b3b4ANALYSIS DATE:...

Security

Malware Analysis – djvu – eee1b3def7ccf85f54e78ea8908e482b

Malware Analysis – djvu – ec7a59120aa48d773c8716798409ef6c

Malware Analysis – chaos – aeb08e18c57936e33a56cad7aba7d16e

Malware Analysis – djvu – 0b9d8d3130f041d552cbc9bd81f2e356

Malware Analysis – djvu – 10c1d309a43c0ae8c867d445f0983a7c

Posh C2 Detected – 164[.]92[.]110[.]36:443

Posh C2 Detected – 178[.]20[.]47[.]220:443

Cobalt Stike Beacon Detected – 194[.]87[.]46[.]87:4433

Malware Analysis – djvu – 1ecf6c599b5035d4536c883996175b77

Malware Analysis – djvu – 934b82044d9260bb02a2fde1ca2ffaf7

Malware Analysis – djvu – 807fe85241027aa8b78b2679cad1a2df

Cobalt Stike Beacon Detected – 124[.]221[.]144[.]169:443

Cobalt Stike Beacon Detected – 77[.]91[.]84[.]1:80

Cobalt Stike Beacon Detected – 81[.]69[.]221[.]247:8443

Cobalt Stike Beacon Detected – 138[.]197[.]148[.]29:4433

Malware Analysis – djvu – b1737ee23f46fd10a95c3233ad44c021

Malware Analysis – djvu – b45920399db890e6379d037226b90622

Malware Analysis – djvu – 4852acad8ef53a1e2af4b6a0e8cab49b

Malware Analysis – smokeloader – 02a3a267a5596b104306f92c10a6aa97

Cobalt Stike Beacon Detected – 1[.]15[.]120[.]10:7778

Cobalt Stike Beacon Detected – 49[.]232[.]128[.]4:1080

Cobalt Stike Beacon Detected – 91[.]240[.]118[.]218:8094

Cobalt Stike Beacon Detected – 139[.]180[.]194[.]27:80

Malware Analysis – djvu – a14d133c4e07e90b869d609f97f087de

CVE Alert: CVE-2024-53876

CVE Alert: CVE-2024-53875

CVE Alert: CVE-2024-53873

CVE Alert: CVE-2024-53872

CVE Alert: CVE-2024-53874

You may have missed