Security

Malware Analysis – lockbit – 00a50f67d713a45cea6dc956c30042c1

January 7, 2023

Score: 10 MALWARE FAMILY: lockbitTAGS:family:lockbit, ransomwareMD5: 00a50f67d713a45cea6dc956c30042c1SHA1: bf02ef3db484122b551da73ce83c2aac79bbd2fcANALYSIS DATE: 2023-01-07T09:04:07ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – smokeloader – 333aa9917c09f5ccf2e8c5bb21ab8292

January 7, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 333aa9917c09f5ccf2e8c5bb21ab8292SHA1: 890625b934a90264290a1ea636e725eb06ae090aANALYSIS DATE: 2023-01-07T09:51:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – b474d30039b51a5fd11deda319dde90d

January 7, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: b474d30039b51a5fd11deda319dde90dSHA1: 0876ca51235b8ee3a2b338c7e73d58cc89a4a416ANALYSIS DATE: 2023-01-07T09:11:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – asyncrat – ddfdcc11a3e4a5dd265442a5bcea9fcf

January 7, 2023

Score: 10 MALWARE FAMILY: asyncratTAGS:family:asyncrat, discovery, persistence, ransomware, rat, spyware, stealerMD5: ddfdcc11a3e4a5dd265442a5bcea9fcfSHA1: a98cf41fb793d5c23bef6baac5c5848233c6ff41ANALYSIS DATE: 2023-01-07T10:41:42ZTTPS: T1012, T1082, T1053, T1060, T1120,...

Malware Analysis – djvu – 283b4ce9dfbdb15c6f0527b9670fc4ab

January 7, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 283b4ce9dfbdb15c6f0527b9670fc4abSHA1: 122f0d7d59d4cac2e3500af8ce5003b435342953ANALYSIS DATE: 2023-01-07T09:17:10ZTTPS: T1053, T1005, T1081, T1012,...

Malware Analysis – smokeloader – cfd57a3bbe2a49525cc1ff6183cc2085

January 7, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: cfd57a3bbe2a49525cc1ff6183cc2085SHA1: a2310517555e207a3c016364df67215dc69f7c33ANALYSIS DATE: 2023-01-07T11:26:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – asyncrat – 596e8b4c50fa6579495c12756c3b5f14

January 7, 2023

Score: 10 MALWARE FAMILY: asyncratTAGS:family:asyncrat, discovery, persistence, ransomware, ratMD5: 596e8b4c50fa6579495c12756c3b5f14SHA1: de331021e0b2f8fcb792db5cef59472c1964b3bfANALYSIS DATE: 2023-01-07T11:12:40ZTTPS: T1012, T1082, T1120, T1112, T1060, T1042, T1053...

Malware Analysis – djvu – b540bd5385b69b6efdc13929a24a1d94

January 7, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: b540bd5385b69b6efdc13929a24a1d94SHA1: 3e50087a02872cb41aa73a1dd57c4bced40c2b5bANALYSIS DATE: 2023-01-07T11:43:58ZTTPS: T1012, T1082, T1222, T1053,...

Malware Analysis – – c5bc2f381a335456610ad9eded37ff13

January 7, 2023

Score: 1 MALWARE FAMILY: TAGS:MD5: c5bc2f381a335456610ad9eded37ff13SHA1: 12164a4a698ae1f7b401aaac67d16a4d2684e9e1ANALYSIS DATE: 2023-01-07T11:05:29ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – 409c1dfc671e23c5db46a54c8bc89718

January 7, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 409c1dfc671e23c5db46a54c8bc89718SHA1: 3fb3c48f09d3175fe70e5411e457e0e937541a47ANALYSIS DATE: 2023-01-07T03:53:30ZTTPS: T1005, T1081, T1012, T1222,...

Malware Analysis – djvu – cafe995643719a184332620ddfd425b3

January 7, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: cafe995643719a184332620ddfd425b3SHA1: 5a51463584ce93b09e7227f4b0135b191a268bdcANALYSIS DATE: 2023-01-07T04:13:06ZTTPS: T1005, T1081, T1012, T1060,...

Malware Analysis – amadey – ab1584a0064fc4a6132e8ae530bf2a27

January 7, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:vidar, botnet:19, backdoor, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: ab1584a0064fc4a6132e8ae530bf2a27SHA1: bcee66986d10f96543ccd86f7263b5f57d675d5eANALYSIS DATE:...

Malware Analysis – amadey – eea2a8fb45dd969242c2bcfb9f612e48

January 7, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:vidar, botnet:19, backdoor, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: eea2a8fb45dd969242c2bcfb9f612e48SHA1: 9059fda6374dd9cea212ef65fb510003a9d4f9daANALYSIS DATE:...

Malware Analysis – djvu – 1dba6d82e5bfaf48d6648ffb5251c812

January 7, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 1dba6d82e5bfaf48d6648ffb5251c812SHA1: 850e12cb91891996bf5bd30e26a2001cf11f080fANALYSIS DATE: 2023-01-07T05:00:33ZTTPS: T1060, T1112, T1082, T1012,...

Malware Analysis – amadey – 11a7e34ac7eab95249626be889097378

January 7, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:vidar, botnet:19, backdoor, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: 11a7e34ac7eab95249626be889097378SHA1: 7c1799df6324d3f7c086dbd0810e176d7aa24644ANALYSIS DATE:...

Malware Analysis – amadey – 88d01b2f752a46708b106c66946917a8

January 7, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, backdoor, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: 88d01b2f752a46708b106c66946917a8SHA1: 108306ea32939fb9cc950e28e941bfb65ff5c4c3ANALYSIS DATE: 2023-01-07T05:04:52ZTTPS: T1082,...

Cobalt Stike Beacon Detected – 107[.]174[.]247[.]46:80

January 7, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 101[.]43[.]188[.]175:8443

January 7, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 38[.]242[.]241[.]231:443

January 7, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – b0f0b79c2b04c118ef4f6629e88cd2bc

January 7, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: b0f0b79c2b04c118ef4f6629e88cd2bcSHA1: e88aec0e4d70cce8ae9ac6ed07191f24eb03afeaANALYSIS DATE: 2023-01-06T21:16:19ZTTPS: T1012, T1082, T1005, T1081,...

Malware Analysis – djvu – 7873a6083d3990821cd66ad9a5aceebe

January 7, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:19, backdoor, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: 7873a6083d3990821cd66ad9a5aceebeSHA1: e0d03bb5c7674dc492687e66975edb397ff0b3c9ANALYSIS DATE: 2023-01-06T21:16:22ZTTPS:...

Malware Analysis – discovery – 4e72fd959c26c584f851553c854029cf

January 7, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, ransomwareMD5: 4e72fd959c26c584f851553c854029cfSHA1: d41f78eae4003a8713eccc9ce0250eb0455215e1ANALYSIS DATE: 2023-01-06T22:05:38ZTTPS: T1082, T1057, T1012, T1130, T1112 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – djvu – ee56af504d8d398200f6b80870499502

January 7, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: ee56af504d8d398200f6b80870499502SHA1: 268e292df2627e4263cf9de0debb5d3136e8057aANALYSIS DATE: 2023-01-06T21:41:36ZTTPS: T1053, T1005, T1081, T1012,...

Malware Analysis – evasion – 4c0e7f72921c21ebb2d67d58d92e92fb

January 7, 2023

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomwareMD5: 4c0e7f72921c21ebb2d67d58d92e92fbSHA1: 9b8a9d56ae0961825e7e5e8e0363c72297954009ANALYSIS DATE: 2023-01-06T22:25:33ZTTPS: T1031, T1562, T1489, T1060, T1112, T1107, T1490, T1012, T1120,...

Security

Malware Analysis – lockbit – 00a50f67d713a45cea6dc956c30042c1

Malware Analysis – smokeloader – 333aa9917c09f5ccf2e8c5bb21ab8292

Malware Analysis – smokeloader – b474d30039b51a5fd11deda319dde90d

Malware Analysis – asyncrat – ddfdcc11a3e4a5dd265442a5bcea9fcf

Malware Analysis – djvu – 283b4ce9dfbdb15c6f0527b9670fc4ab

Malware Analysis – smokeloader – cfd57a3bbe2a49525cc1ff6183cc2085

Malware Analysis – asyncrat – 596e8b4c50fa6579495c12756c3b5f14

Malware Analysis – djvu – b540bd5385b69b6efdc13929a24a1d94

Malware Analysis – – c5bc2f381a335456610ad9eded37ff13

Malware Analysis – djvu – 409c1dfc671e23c5db46a54c8bc89718

Malware Analysis – djvu – cafe995643719a184332620ddfd425b3

Malware Analysis – amadey – ab1584a0064fc4a6132e8ae530bf2a27

Malware Analysis – amadey – eea2a8fb45dd969242c2bcfb9f612e48

Malware Analysis – djvu – 1dba6d82e5bfaf48d6648ffb5251c812

Malware Analysis – amadey – 11a7e34ac7eab95249626be889097378

Malware Analysis – amadey – 88d01b2f752a46708b106c66946917a8

Cobalt Stike Beacon Detected – 107[.]174[.]247[.]46:80

Cobalt Stike Beacon Detected – 101[.]43[.]188[.]175:8443

Cobalt Stike Beacon Detected – 38[.]242[.]241[.]231:443

Malware Analysis – djvu – b0f0b79c2b04c118ef4f6629e88cd2bc

Malware Analysis – djvu – 7873a6083d3990821cd66ad9a5aceebe

Malware Analysis – discovery – 4e72fd959c26c584f851553c854029cf

Malware Analysis – djvu – ee56af504d8d398200f6b80870499502

Malware Analysis – evasion – 4c0e7f72921c21ebb2d67d58d92e92fb

BYOVD Attacks in Paragon Partition Manager: Zero-Day Exploited Revealed

Phishing Campaign Leverages Havoc Framework for Control of Infected Systems

ICO Investigates TikTok Over Children’s Data Privacy Concerns

Microsoft Teams and Quick Assist Exploited in Cyber Attacks

CISA Reaffirms Commitment to Cybersecurity Amid Russian Threats

You may have missed