Security

Malware Analysis – collection – 017214b2759268c211cb65b9df140857

February 15, 2023

Score: 10 MALWARE FAMILY: collectionTAGS:collection, evasion, ransomware, spyware, stealerMD5: 017214b2759268c211cb65b9df140857SHA1: 87953d31303e156302a1939c7dffd538c116af22ANALYSIS DATE: 2023-02-15T11:17:17ZTTPS: T1082, T1158, T1112, T1491, T1114, T1130, T1005,...

Malware Analysis – djvu – d24826e0fe7505e1f34a9c90b740407e

February 15, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: d24826e0fe7505e1f34a9c90b740407eSHA1: a87ff01742a668029e92ff16cd7c957080ea4f0aANALYSIS DATE: 2023-02-15T10:45:27ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – dcrat – 0fde60e5e798fd13595ebc51b0294983

February 15, 2023

Score: 10 MALWARE FAMILY: dcratTAGS:family:dcrat, family:djvu, family:laplas, family:rhadamanthys, family:smokeloader, family:vidar, botnet:19, backdoor, clipper, collection, discovery, evasion, infostealer, persistence, ransomware, rat,...

Malware Analysis – – f1c6ffbef4f05c68364d24fffc124f03

February 15, 2023

Score: 1 MALWARE FAMILY: TAGS:MD5: f1c6ffbef4f05c68364d24fffc124f03SHA1: fed0ef1c53333f699f94dffb85c70dae3b51706cANALYSIS DATE: 2023-02-15T03:18:17ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – f6e4d307bf6f9653e2855a2c6802a1d1

February 15, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: f6e4d307bf6f9653e2855a2c6802a1d1SHA1: 4b3bd7bc5cf228822f760ec0c85b1dad165ea27eANALYSIS DATE: 2023-02-15T03:29:12ZTTPS: T1012, T1082, T1053, T1005,...

Malware Analysis – djvu – 0ee550afc9cf3dfb22194926a66175f2

February 15, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 0ee550afc9cf3dfb22194926a66175f2SHA1: 2e4c903f3729a2aa53f2b765bfd8fff6951008edANALYSIS DATE: 2023-02-15T04:20:12ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – smokeloader – aafed58c0c20e3e6b15639650c448e34

February 15, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: aafed58c0c20e3e6b15639650c448e34SHA1: 5a2753f9eb4d15e8f322f61e8c58535820c0ec8aANALYSIS DATE: 2023-02-15T04:03:05ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – evasion – 9a4f70d1aed0c3e4cab2d565d8c2b2e3

February 15, 2023

Score: 8 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 9a4f70d1aed0c3e4cab2d565d8c2b2e3SHA1: 7ba0a92f77013b4b3df590399da28c181a423a94ANALYSIS DATE: 2023-02-15T05:00:36ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – djvu – 65e17c11acce0df0487431c9f97c685a

February 15, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 65e17c11acce0df0487431c9f97c685aSHA1: 35dc904af2a96e6f4f87857b45fc1ab5cf23ab2cANALYSIS DATE: 2023-02-15T05:03:13ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – ransomware – a55dd55e1534735a522f84a8cf6e54d2

February 15, 2023

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: a55dd55e1534735a522f84a8cf6e54d2SHA1: 31a49a4a744b0580f40fbd756ea0984fb2fd2fb9ANALYSIS DATE: 2023-02-15T04:47:41ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – 5ee1751c1b4d13cea1cb3225caa18ec0

February 15, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:laplas, family:rhadamanthys, family:smokeloader, family:vidar, botnet:19, backdoor, clipper, collection, discovery, evasion, persistence, ransomware, spyware, stealer, trojan,...

Malware Analysis – djvu – e44143d2af9f4d889076c2862fd2e067

February 15, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: e44143d2af9f4d889076c2862fd2e067SHA1: 17f188c714e857674273f79ff1a33ec32ae62451ANALYSIS DATE: 2023-02-15T05:20:30ZTTPS: T1222, T1060, T1112, T1082,...

Malware Analysis – djvu – f5d57b9e3fd125cf7eb642ef89e09d9b

February 15, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: f5d57b9e3fd125cf7eb642ef89e09d9bSHA1: 24cc19260eec4be76d219f81041e0eb2b5b5730cANALYSIS DATE: 2023-02-15T05:30:27ZTTPS: T1012, T1082, T1053, T1005,...

Malware Analysis – chaos – 1379c8d2a7758958c5f2ad789feef48e

February 15, 2023

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, evasion, ransomware, spyware, stealerMD5: 1379c8d2a7758958c5f2ad789feef48eSHA1: 24e960b51b156502b81c0e0deaeabca09b160a4eANALYSIS DATE: 2023-02-15T05:29:03ZTTPS: T1490, T1059, T1107, T1005, T1081, T1082, T1491,...

Malware Analysis – djvu – 0bd656fe319b787ae2a18e10f3f8cf27

February 15, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:rhadamanthys, family:smokeloader, backdoor, discovery, ransomware, spyware, stealer, trojan, vmprotectMD5: 0bd656fe319b787ae2a18e10f3f8cf27SHA1: 9d2a0bac3b07cb8a3d693a49cf1dc80b14b6032bANALYSIS DATE: 2023-02-15T05:40:33ZTTPS: T1012, T1120,...

Security

Malware Analysis – collection – 017214b2759268c211cb65b9df140857

Malware Analysis – djvu – d24826e0fe7505e1f34a9c90b740407e

Malware Analysis – dcrat – 0fde60e5e798fd13595ebc51b0294983

Malware Analysis – – f1c6ffbef4f05c68364d24fffc124f03

Malware Analysis – djvu – f6e4d307bf6f9653e2855a2c6802a1d1

Malware Analysis – djvu – 0ee550afc9cf3dfb22194926a66175f2

Malware Analysis – smokeloader – aafed58c0c20e3e6b15639650c448e34

Malware Analysis – evasion – 9a4f70d1aed0c3e4cab2d565d8c2b2e3

Malware Analysis – djvu – 65e17c11acce0df0487431c9f97c685a

Malware Analysis – ransomware – a55dd55e1534735a522f84a8cf6e54d2

Malware Analysis – djvu – 5ee1751c1b4d13cea1cb3225caa18ec0

Malware Analysis – djvu – e44143d2af9f4d889076c2862fd2e067

Malware Analysis – djvu – f5d57b9e3fd125cf7eb642ef89e09d9b

Malware Analysis – chaos – 1379c8d2a7758958c5f2ad789feef48e

Malware Analysis – djvu – 0bd656fe319b787ae2a18e10f3f8cf27

Cobalt Stike Beacon Detected – 120[.]46[.]192[.]64:80

Cobalt Stike Beacon Detected – 107[.]173[.]111[.]16:443

Cobalt Stike Beacon Detected – 1[.]117[.]117[.]162:443

Cobalt Stike Beacon Detected – 43[.]159[.]43[.]58:443

Cobalt Stike Beacon Detected – 123[.]58[.]197[.]94:8080

Cobalt Stike Beacon Detected – 23[.]94[.]240[.]207:443

Cobalt Stike Beacon Detected – 43[.]153[.]117[.]9:4433

Cobalt Stike Beacon Detected – 120[.]77[.]18[.]249:88

Cobalt Stike Beacon Detected – 176[.]113[.]115[.]44:443

[LYNX] – Ransomware Victim: Biogena GmbH & Co KG

CVE Alert: CVE-2025-20117

CVE Alert: CVE-2025-20119

CVE Alert: CVE-2025-20118

CVE Alert: CVE-2024-46226

You may have missed