Security

Malware Analysis – djvu – 66e2b7371289dd956427b58b8dc7eb14

January 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 66e2b7371289dd956427b58b8dc7eb14SHA1: 9d6fb6efbad6863d21643c7f665c3aa2521aa54dANALYSIS DATE: 2023-01-01T09:34:48ZTTPS: T1082, T1053, T1222, T1012,...

Malware Analysis – discovery – 5755c57c7d3b7304b42015c5dd34e5be

January 1, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, evasion, persistence, ransomwareMD5: 5755c57c7d3b7304b42015c5dd34e5beSHA1: 923d617a8a76195879a0eebc8a9794e00378450fANALYSIS DATE: 2023-01-01T09:38:40ZTTPS: T1060, T1112, T1012, T1082, T1031, T1053, T1158, T1042,...

Cobalt Stike Beacon Detected – 85[.]209[.]135[.]49:443

January 1, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 1[.]15[.]141[.]252:5555

January 1, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 1[.]15[.]141[.]252:443

January 1, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 110[.]41[.]131[.]105:6666

January 1, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – 89c3af6bef44ab50d7be35828dc5f1e3

January 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 89c3af6bef44ab50d7be35828dc5f1e3SHA1: b2ba0715cfbe5321bbc3e265fd5ec6998ad90c8cANALYSIS DATE: 2023-01-01T11:35:04ZTTPS: T1060, T1112, T1053, T1005,...

Malware Analysis – – a0affa0816e523701464051054026e1c

January 1, 2023

Score: 3 MALWARE FAMILY: TAGS:MD5: a0affa0816e523701464051054026e1cSHA1: 470172daf36ce355162213e898616b8a775b846cANALYSIS DATE: 2023-01-01T09:44:16ZTTPS: T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – smokeloader – 4040afcf9849e20e9305eb95cdd68ccc

January 1, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 4040afcf9849e20e9305eb95cdd68cccSHA1: 79b900321e613d55e919516e6db4e7d8d153ad1cANALYSIS DATE: 2023-01-01T11:12:17ZTTPS: T1012, T1120, T1082, T1112 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – amadey – e7f05ecc16b05f76c5a228a2b688c93e

January 1, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:lgoogloader, family:smokeloader, family:vidar, botnet:19, backdoor, collection, discovery, downloader, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5:...

Cobalt Stike Beacon Detected – 82[.]156[.]55[.]208:7788

January 1, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 54[.]178[.]175[.]181:443

January 1, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 43[.]156[.]3[.]238:2087

January 1, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 43[.]138[.]62[.]36:8080

January 1, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – c32f1f18730491571309a796b9f38f46

January 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: c32f1f18730491571309a796b9f38f46SHA1: 2594f24d355cf087d0a69ed603293c202403acf2ANALYSIS DATE: 2022-12-31T21:01:23ZTTPS: T1005, T1081, T1060, T1112,...

Malware Analysis – amadey – 875a57a33e01873ee9c566882252f2f9

January 1, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:dcrat, family:djvu, family:lgoogloader, family:smokeloader, family:vidar, botnet:19, backdoor, collection, discovery, downloader, infostealer, persistence, ransomware, rat, spyware,...

Malware Analysis – djvu – 49cbd9d2518f657fff793edb6e69aa34

January 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 49cbd9d2518f657fff793edb6e69aa34SHA1: 5811fa647ad74bc7162eec0de91cbb989bd30abfANALYSIS DATE: 2022-12-31T22:32:05ZTTPS: T1012, T1082, T1222, T1005,...

Malware Analysis – amadey – e9de3e39d8e212cd00a606f8e5b0f986

January 1, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:lgoogloader, family:smokeloader, family:vidar, botnet:19, backdoor, discovery, downloader, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: e9de3e39d8e212cd00a606f8e5b0f986SHA1:...

Malware Analysis – djvu – cdc85b918fbbb00351af10de34cc606a

January 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: cdc85b918fbbb00351af10de34cc606aSHA1: e11c47a9601aa3deef7baaceded201e90b90f2afANALYSIS DATE: 2022-12-31T22:21:19ZTTPS: T1005, T1081, T1082, T1053,...

Malware Analysis – discovery – 30cbb7176e5eff6db09b9ac58e2d0087

January 1, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, ransomwareMD5: 30cbb7176e5eff6db09b9ac58e2d0087SHA1: 383b8b1f5517c856df40eee799ab19689e7bbbbdANALYSIS DATE: 2022-12-31T22:42:09ZTTPS: T1130, T1112, T1012, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Security

Malware Analysis – djvu – 66e2b7371289dd956427b58b8dc7eb14

Malware Analysis – discovery – 5755c57c7d3b7304b42015c5dd34e5be

Cobalt Stike Beacon Detected – 85[.]209[.]135[.]49:443

Cobalt Stike Beacon Detected – 1[.]15[.]141[.]252:5555

Cobalt Stike Beacon Detected – 1[.]15[.]141[.]252:443

Cobalt Stike Beacon Detected – 110[.]41[.]131[.]105:6666

Malware Analysis – djvu – 89c3af6bef44ab50d7be35828dc5f1e3

Malware Analysis – – a0affa0816e523701464051054026e1c

Malware Analysis – smokeloader – 4040afcf9849e20e9305eb95cdd68ccc

Malware Analysis – amadey – e7f05ecc16b05f76c5a228a2b688c93e

Cobalt Stike Beacon Detected – 82[.]156[.]55[.]208:7788

Cobalt Stike Beacon Detected – 54[.]178[.]175[.]181:443

Cobalt Stike Beacon Detected – 43[.]156[.]3[.]238:2087

Cobalt Stike Beacon Detected – 43[.]138[.]62[.]36:8080

Malware Analysis – djvu – c32f1f18730491571309a796b9f38f46

Malware Analysis – amadey – 875a57a33e01873ee9c566882252f2f9

Malware Analysis – djvu – 49cbd9d2518f657fff793edb6e69aa34

Malware Analysis – amadey – e9de3e39d8e212cd00a606f8e5b0f986

Malware Analysis – djvu – cdc85b918fbbb00351af10de34cc606a

Malware Analysis – discovery – 30cbb7176e5eff6db09b9ac58e2d0087

Cobalt Stike Beacon Detected – 120[.]40[.]7[.]23:8999

Cobalt Stike Beacon Detected – 121[.]127[.]233[.]205:443

Cobalt Stike Beacon Detected – 49[.]4[.]88[.]243:82

Malware Analysis – amadey – 43fec7a0e3948a78bedf6cf27e9bf538

Cobalt Strike Beacon Detected – 47[.]119[.]158[.]127:9999

Cobalt Strike Beacon Detected – 103[.]24[.]95[.]45:8123

Cobalt Strike Beacon Detected – 103[.]24[.]95[.]47:8123

CVE Alert: CVE-2024-51952

CVE Alert: CVE-2024-51954

You may have missed