Security

Malware Analysis – djvu – cd5df181c1ea27e3f45fdbf2a4d3f6ff

February 11, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: cd5df181c1ea27e3f45fdbf2a4d3f6ffSHA1: 533af8e223aac78aed2c58d872f3be995d103253ANALYSIS DATE: 2023-02-11T17:12:59ZTTPS: T1012, T1005, T1081, T1082,...

Malware Analysis – djvu – 796d4630165fe9d82db1830cd6a85fd2

February 11, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, backdoor, discovery, persistence, ransomware, trojan, vmprotectMD5: 796d4630165fe9d82db1830cd6a85fd2SHA1: 54baa86ab231578a35a3d9b6861fff7ecb07db10ANALYSIS DATE: 2023-02-11T17:47:13ZTTPS: T1012, T1082, T1120, T1222,...

Malware Analysis – djvu – 6b5b2f946394208759afe4848dc720ad

February 11, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 6b5b2f946394208759afe4848dc720adSHA1: d2941d251511006660d4d64560dab58b1124943aANALYSIS DATE: 2023-02-11T09:26:07ZTTPS: T1222, T1082, T1005, T1081,...

Malware Analysis – djvu – 83c3a77944c98ff33c27422973f498d4

February 11, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:laplas, family:smokeloader, family:vidar, botnet:19, backdoor, clipper, discovery, evasion, persistence, ransomware, stealer, trojan, vmprotectMD5: 83c3a77944c98ff33c27422973f498d4SHA1: 2f741357ed679ed4d972b2a02265db927a33809eANALYSIS...

Cobalt Stike Beacon Detected – 47[.]95[.]248[.]144:80

February 11, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – fba1dbb9208031a21bdb80cb60b23ad2

February 11, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: fba1dbb9208031a21bdb80cb60b23ad2SHA1: e0d77781ba9c17caf50759acdcf5d2f8b33a4b7fANALYSIS DATE: 2023-02-11T09:59:09ZTTPS: T1060, T1112, T1222, T1082, T1012 ScoreMeaningExample10Known badA malware...

Malware Analysis – djvu – 93e58fa4667b20bddafb9a3d50a3f81f

February 11, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:laplas, family:smokeloader, family:vidar, botnet:19, backdoor, clipper, discovery, evasion, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: 93e58fa4667b20bddafb9a3d50a3f81fSHA1:...

Malware Analysis – ransomware – e7beb2fcccf55f27ed67eb9870362913

February 11, 2023

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: e7beb2fcccf55f27ed67eb9870362913SHA1: c205d6bb2c0f8514ebe625b37fba00df2f09cc94ANALYSIS DATE: 2023-02-11T10:14:33ZTTPS: T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – – 5af48fb2e7485ccee2b7c5bdf2ae9d4c

February 11, 2023

Score: 3 MALWARE FAMILY: TAGS:MD5: 5af48fb2e7485ccee2b7c5bdf2ae9d4cSHA1: 2df3bbb03687431c082bc36c2563578065d47551ANALYSIS DATE: 2023-02-11T10:17:29ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Cobalt Stike Beacon Detected – 46[.]161[.]40[.]118:80

February 11, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 185[.]143[.]223[.]33:443

February 11, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 141[.]98[.]10[.]124:80

February 11, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 124[.]71[.]152[.]140:80

February 11, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – smokeloader – c418a430529db80b4daabd52c5c8adce

February 11, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: c418a430529db80b4daabd52c5c8adceSHA1: 3fd4955aca9bb801a2cb337cb9acbb3f61fd4d07ANALYSIS DATE: 2023-02-11T10:39:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ryuk – 5ac0f050f93f86e69026faea1fbb4450

February 11, 2023

Score: 10 MALWARE FAMILY: ryukTAGS:family:ryuk, persistence, ransomwareMD5: 5ac0f050f93f86e69026faea1fbb4450SHA1: 9709774fde9ec740ad6fed8ed79903296ca9d571ANALYSIS DATE: 2023-02-11T10:59:29ZTTPS: T1082, T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 0aeddad4b0aa26e2b46f2b1c498bda5c

February 11, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 0aeddad4b0aa26e2b46f2b1c498bda5cSHA1: ab08be349ed68c56de52a04a502683a45f1020e5ANALYSIS DATE: 2023-02-11T11:34:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ransomware – e29a4153e08b5b85b4a51f8a2cd2714e

February 11, 2023

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: e29a4153e08b5b85b4a51f8a2cd2714eSHA1: 1a2056b4d141fcfc44f7132f31cba62d6f31d86dANALYSIS DATE: 2023-02-11T10:17:53ZTTPS: T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Security

Malware Analysis – djvu – cd5df181c1ea27e3f45fdbf2a4d3f6ff

Malware Analysis – djvu – 796d4630165fe9d82db1830cd6a85fd2

Malware Analysis – djvu – 6b5b2f946394208759afe4848dc720ad

Malware Analysis – djvu – 83c3a77944c98ff33c27422973f498d4

Cobalt Stike Beacon Detected – 47[.]95[.]248[.]144:80

Malware Analysis – djvu – fba1dbb9208031a21bdb80cb60b23ad2

Malware Analysis – djvu – 93e58fa4667b20bddafb9a3d50a3f81f

Malware Analysis – ransomware – e7beb2fcccf55f27ed67eb9870362913

Malware Analysis – – 5af48fb2e7485ccee2b7c5bdf2ae9d4c

Cobalt Stike Beacon Detected – 46[.]161[.]40[.]118:80

Cobalt Stike Beacon Detected – 185[.]143[.]223[.]33:443

Cobalt Stike Beacon Detected – 141[.]98[.]10[.]124:80

Cobalt Stike Beacon Detected – 124[.]71[.]152[.]140:80

Malware Analysis – smokeloader – c418a430529db80b4daabd52c5c8adce

Malware Analysis – ryuk – 5ac0f050f93f86e69026faea1fbb4450

Malware Analysis – smokeloader – 0aeddad4b0aa26e2b46f2b1c498bda5c

Malware Analysis – ransomware – e29a4153e08b5b85b4a51f8a2cd2714e

Cobalt Stike Beacon Detected – 162[.]19[.]206[.]0:80

Cobalt Stike Beacon Detected – 103[.]142[.]246[.]194:8443

Cobalt Stike Beacon Detected – 3[.]84[.]109[.]117:80

Cobalt Stike Beacon Detected – 107[.]172[.]208[.]88:80

Cobalt Stike Beacon Detected – 185[.]254[.]37[.]251:80

Cobalt Stike Beacon Detected – 154[.]26[.]192[.]11:443

Cobalt Stike Beacon Detected – 3[.]0[.]188[.]18:80

[RANSOMHUB] – Ransomware Victim: www[.]nasonptc[.]com

[RUNSOMEWARES] – Ransomware Victim: Gilbert

[RUNSOMEWARES] – Ransomware Victim: F&V Capital Management, LLC (FVCM)

[RUNSOMEWARES] – Ransomware Victim: Donna G[.] Rogers, CPA, P[.]A[.]

[RANSOMHUB] – Ransomware Victim: teamwass[.]com

You may have missed