Security

Malware Analysis – chaos – 45f6effd67ff42b7285c6852ac84089e

February 18, 2023

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, evasion, ransomware, spyware, stealerMD5: 45f6effd67ff42b7285c6852ac84089eSHA1: 98a8ff6114b65bf0d88fe62ec5faa32c5c4dfa9bANALYSIS DATE: 2023-02-18T16:31:02ZTTPS: T1490, T1059, T1107, T1005, T1081, T1082 ScoreMeaningExample10Known...

Malware Analysis – djvu – c8e50ba08f558fcf82f7d22d48661fc9

February 18, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:laplas, family:smokeloader, family:vidar, botnet:19, backdoor, clipper, discovery, evasion, persistence, ransomware, spyware, stealer, themida, trojan, vmprotectMD5:...

Malware Analysis – chaos – f5ad2a45442c0028f4268c72e21e2035

February 18, 2023

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, family:quasar, botnet:ransomware, ransomware, spyware, trojanMD5: f5ad2a45442c0028f4268c72e21e2035SHA1: 1edc22b76db0a40f9267a10ab3805bc4955e86b4ANALYSIS DATE: 2023-02-18T16:31:03ZTTPS: T1082, T1053 ScoreMeaningExample10Known badA malware family...

Malware Analysis – djvu – 0347b3417f6fcf5d58ef9d6c1f9c1404

February 18, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 0347b3417f6fcf5d58ef9d6c1f9c1404SHA1: e3ff63b00704de67d0f9f70f24f4566579d80ef2ANALYSIS DATE: 2023-02-18T17:32:03ZTTPS: T1222, T1082, T1005, T1081,...

Malware Analysis – djvu – 7ff5343fece92fb5d5428a984f89e3bc

February 18, 2023

Malware Analysis – djvu – b06df9c80c32bda4a006a3a49c742af2

February 18, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: b06df9c80c32bda4a006a3a49c742af2SHA1: 323e14b79207907028bd18613648ebeb277b3452ANALYSIS DATE: 2023-02-18T17:14:29ZTTPS: T1060, T1112, T1005, T1081,...

Malware Analysis – djvu – 728bfb5c16833dff2ccaf7d5a3585841

February 18, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 728bfb5c16833dff2ccaf7d5a3585841SHA1: 3ec0be90afce6e5190166cb5313b7b76ed800746ANALYSIS DATE: 2023-02-18T17:14:40ZTTPS: T1060, T1112, T1082, T1053,...

Cobalt Stike Beacon Detected – 147[.]182[.]250[.]103:443

February 18, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 119[.]91[.]148[.]9:443

February 18, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 146[.]190[.]118[.]40:443

February 18, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 45[.]92[.]158[.]220:8000

February 18, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 101[.]34[.]36[.]50:3333

February 18, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – smokeloader – f16b0526c3c7082918f6abf8fd944664

February 18, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: f16b0526c3c7082918f6abf8fd944664SHA1: 8c6df4532d47296d62b5d935120a5d2e788978e8ANALYSIS DATE: 2023-02-18T09:18:08ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – – 1ce725c0dc288d7789a0ba52a54726ac

February 18, 2023

Score: 1 MALWARE FAMILY: TAGS:MD5: 1ce725c0dc288d7789a0ba52a54726acSHA1: 20dcfb326a66350af7aea504277d7cc97caa420cANALYSIS DATE: 2023-02-18T09:22:35ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – 087f75c142ef66212e79e99f26abf68a

February 18, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 087f75c142ef66212e79e99f26abf68aSHA1: 44999a5c4ad01c3cc48868a49c81ef79d183d429ANALYSIS DATE: 2023-02-18T09:34:52ZTTPS: T1005, T1081, T1012, T1222,...

Malware Analysis – djvu – 036b724993d70eeada2c2607e0d5028e

February 18, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 036b724993d70eeada2c2607e0d5028eSHA1: 0bafca071bac6f6dff62841419a50ee070d5ba33ANALYSIS DATE: 2023-02-18T09:21:36ZTTPS: T1060, T1112, T1012, T1082,...

Cobalt Stike Beacon Detected – 43[.]143[.]195[.]119:2121

February 18, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 180[.]76[.]247[.]230:8082

February 18, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 43[.]143[.]130[.]125:8809

February 18, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 146[.]190[.]164[.]193:443

February 18, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – banker – ba1e76cfbd9461a75cea4976aec75450

February 18, 2023

Score: 8 MALWARE FAMILY: bankerTAGS:banker, evasion, ransomwareMD5: ba1e76cfbd9461a75cea4976aec75450SHA1: d031a3a2a9880ff09589d5b8d5fc0cadee3fa73aANALYSIS DATE: 2023-02-18T10:55:08ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – discovery – 87cee2eb9b9190baf07970bbf9b2975c

February 18, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, phishing, ransomwareMD5: 87cee2eb9b9190baf07970bbf9b2975cSHA1: 156dbed1d99359a498021e7684f518a926630814ANALYSIS DATE: 2023-02-18T09:57:53ZTTPS: T1012, T1082, T1112, T1060, T1042 ScoreMeaningExample10Known badA malware...

Malware Analysis – djvu – 6f676a2ba7c6aadee8edf99abcdd3600

February 18, 2023

Malware Analysis – discovery – 91ff0a576c00974ac41c59675fc4e2af

February 18, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: 91ff0a576c00974ac41c59675fc4e2afSHA1: f786896607489c7c967cbb4f04688e42042bb261ANALYSIS DATE: 2023-02-18T11:02:38ZTTPS: T1060, T1082, T1012 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Security

Malware Analysis – chaos – 45f6effd67ff42b7285c6852ac84089e

Malware Analysis – djvu – c8e50ba08f558fcf82f7d22d48661fc9

Malware Analysis – chaos – f5ad2a45442c0028f4268c72e21e2035

Malware Analysis – djvu – 0347b3417f6fcf5d58ef9d6c1f9c1404

Malware Analysis – djvu – 7ff5343fece92fb5d5428a984f89e3bc

Malware Analysis – djvu – b06df9c80c32bda4a006a3a49c742af2

Malware Analysis – djvu – 728bfb5c16833dff2ccaf7d5a3585841

Cobalt Stike Beacon Detected – 147[.]182[.]250[.]103:443

Cobalt Stike Beacon Detected – 119[.]91[.]148[.]9:443

Cobalt Stike Beacon Detected – 146[.]190[.]118[.]40:443

Cobalt Stike Beacon Detected – 45[.]92[.]158[.]220:8000

Cobalt Stike Beacon Detected – 101[.]34[.]36[.]50:3333

Malware Analysis – smokeloader – f16b0526c3c7082918f6abf8fd944664

Malware Analysis – – 1ce725c0dc288d7789a0ba52a54726ac

Malware Analysis – djvu – 087f75c142ef66212e79e99f26abf68a

Malware Analysis – djvu – 036b724993d70eeada2c2607e0d5028e

Cobalt Stike Beacon Detected – 43[.]143[.]195[.]119:2121

Cobalt Stike Beacon Detected – 180[.]76[.]247[.]230:8082

Cobalt Stike Beacon Detected – 43[.]143[.]130[.]125:8809

Cobalt Stike Beacon Detected – 146[.]190[.]164[.]193:443

Malware Analysis – banker – ba1e76cfbd9461a75cea4976aec75450

Malware Analysis – discovery – 87cee2eb9b9190baf07970bbf9b2975c

Malware Analysis – djvu – 6f676a2ba7c6aadee8edf99abcdd3600

Malware Analysis – discovery – 91ff0a576c00974ac41c59675fc4e2af

CISA: Trimble Releases Security Updates to Address a Vulnerability in Cityworks Software

Geopolitical Tensions Boost APT Attacks and Hacktivism in 2024

Ransomware Attack Exposes Genea IVF Patient Data Online

HaveIBeenPwned Adds 244 Million Stolen Passwords From Infostealers

Data Breach Affects 3.3M Individuals: DISA Global Solutions Responds

You may have missed