Security

Malware Analysis – djvu – 4a9bff8242e34c49b4ac9380686ff219

December 24, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 4a9bff8242e34c49b4ac9380686ff219SHA1: 7d65d6a5ca3ef29cb4052a515b981e9e59f483fbANALYSIS DATE: 2022-12-24T10:27:18ZTTPS: T1053, T1005, T1081, T1012, T1082, T1222,...

Cobalt Stike Beacon Detected – 180[.]76[.]115[.]62:8989

December 24, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – ae54ef9519196ced8a45354ab938551f

December 24, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: ae54ef9519196ced8a45354ab938551fSHA1: 27d50e391bb3da764dd365fe53fbf538179b4d5cANALYSIS DATE: 2022-12-24T10:10:06ZTTPS: T1012, T1222, T1082, T1053, T1005, T1081,...

Cobalt Stike Beacon Detected – 43[.]139[.]225[.]176:443

December 24, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 47[.]114[.]151[.]215:8088

December 24, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – 9babcbfae5216b1f3db8282790438586

December 24, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: 9babcbfae5216b1f3db8282790438586SHA1: e7c8fcc78bdaacaad85cacea73b209897f42f33aANALYSIS DATE: 2022-12-24T11:15:10ZTTPS: T1053, T1130, T1112, T1060, T1222, T1082 ScoreMeaningExample10Known badA...

Malware Analysis – djvu – 9cf5b0996cdf6ba6b34d85abdb85c0f5

December 24, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 9cf5b0996cdf6ba6b34d85abdb85c0f5SHA1: ff3f3db3868f37453335c0aa4fc0df30813769f0ANALYSIS DATE: 2022-12-24T10:41:27ZTTPS: T1222, T1082, T1053, T1012, T1005, T1081,...

Malware Analysis – djvu – 74315c762fbc50c9e128e4736af6451e

December 24, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: 74315c762fbc50c9e128e4736af6451eSHA1: 9676acee4631cba43064fcbcc07d2e5e145ec9a5ANALYSIS DATE: 2022-12-24T11:15:19ZTTPS: T1053, T1060, T1112, T1222, T1082, T1130 ScoreMeaningExample10Known badA...

Malware Analysis – smokeloader – 5265d31c93441df607ce7b0dae3e680e

December 24, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 5265d31c93441df607ce7b0dae3e680eSHA1: 557ca000136c84344aadf189710c22b2dc5e13a0ANALYSIS DATE: 2022-12-24T11:31:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Cobalt Stike Beacon Detected – 121[.]5[.]150[.]180:8054

December 24, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 179[.]43[.]187[.]247:80

December 24, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 124[.]223[.]181[.]21:8080

December 24, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 35[.]72[.]188[.]81:443

December 24, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 84[.]32[.]128[.]150:443

December 24, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 77[.]73[.]133[.]84:443

December 24, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 218[.]11[.]133[.]33:8806

December 24, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – smokeloader – 4492a6791a3e53bca0c5b050e3d395c1

December 24, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 4492a6791a3e53bca0c5b050e3d395c1SHA1: fda6d847dcef6a872c1ea5a03d4b712eade80597ANALYSIS DATE: 2022-12-23T21:01:06ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – e2e90686080b3a73208ab9bb1f62cb8b

December 24, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: e2e90686080b3a73208ab9bb1f62cb8bSHA1: c6ad315e0d676332960cab1e604baeabeb7c25f1ANALYSIS DATE: 2022-12-23T22:01:05ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – f842773eeae971948df273f1b72811ef

December 24, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: f842773eeae971948df273f1b72811efSHA1: 53c32961609be41cbbaf6a7c239c28ceb7edbcadANALYSIS DATE: 2022-12-23T23:02:05ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 8a3f8592ad4bfe56b0d3ecd8a45756d0

December 24, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 8a3f8592ad4bfe56b0d3ecd8a45756d0SHA1: e52b42276aa6ab284f4321cdda1f78e3d83e2ce5ANALYSIS DATE: 2022-12-23T22:46:55ZTTPS: T1222, T1082, T1012, T1005, T1081, T1060,...

Malware Analysis – djvu – 90363754a46ff1f0261845d1ede47a3a

December 24, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 90363754a46ff1f0261845d1ede47a3aSHA1: 2a032c2e0d53897b258362bc98a271f7b8b4e51eANALYSIS DATE: 2022-12-23T23:42:32ZTTPS: T1005, T1081, T1053, T1082, T1012, T1060,...

Malware Analysis – djvu – 60d534b335e0bab1e6b44e3f39962663

December 24, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 60d534b335e0bab1e6b44e3f39962663SHA1: c8ec8c06bdef1e2fa36e126c21ac735e55249cc9ANALYSIS DATE: 2022-12-23T23:57:20ZTTPS: T1012, T1082, T1060, T1112, T1005, T1081,...

IcedID Botnet Distributors Abuse Google PPC to Distribute Malware

December 23, 2022

We analyze the latest changes in IcedID botnet from a campaign that abuses Google pay per click (PPC) ads to...

S3Crets_Scanner – Hunting For Secrets Uploaded To Public S3 Buckets

December 23, 2022

S3cret Scanner tool designed to provide a complementary layer for the Contributing Pull requests and forks are welcome. For major...

Security

Malware Analysis – djvu – 4a9bff8242e34c49b4ac9380686ff219

Cobalt Stike Beacon Detected – 180[.]76[.]115[.]62:8989

Malware Analysis – djvu – ae54ef9519196ced8a45354ab938551f

Cobalt Stike Beacon Detected – 43[.]139[.]225[.]176:443

Cobalt Stike Beacon Detected – 47[.]114[.]151[.]215:8088

Malware Analysis – djvu – 9babcbfae5216b1f3db8282790438586

Malware Analysis – djvu – 9cf5b0996cdf6ba6b34d85abdb85c0f5

Malware Analysis – djvu – 74315c762fbc50c9e128e4736af6451e

Malware Analysis – smokeloader – 5265d31c93441df607ce7b0dae3e680e

Cobalt Stike Beacon Detected – 121[.]5[.]150[.]180:8054

Cobalt Stike Beacon Detected – 179[.]43[.]187[.]247:80

Cobalt Stike Beacon Detected – 124[.]223[.]181[.]21:8080

Cobalt Stike Beacon Detected – 35[.]72[.]188[.]81:443

Cobalt Stike Beacon Detected – 84[.]32[.]128[.]150:443

Cobalt Stike Beacon Detected – 77[.]73[.]133[.]84:443

Cobalt Stike Beacon Detected – 218[.]11[.]133[.]33:8806

Malware Analysis – smokeloader – 4492a6791a3e53bca0c5b050e3d395c1

Malware Analysis – smokeloader – e2e90686080b3a73208ab9bb1f62cb8b

Malware Analysis – smokeloader – f842773eeae971948df273f1b72811ef

Malware Analysis – djvu – 8a3f8592ad4bfe56b0d3ecd8a45756d0

Malware Analysis – djvu – 90363754a46ff1f0261845d1ede47a3a

Malware Analysis – djvu – 60d534b335e0bab1e6b44e3f39962663

IcedID Botnet Distributors Abuse Google PPC to Distribute Malware

S3Crets_Scanner – Hunting For Secrets Uploaded To Public S3 Buckets

[FOG] – Ransomware Victim: Bizcode

[FOG] – Ransomware Victim: 1X Internet

[FOG] – Ransomware Victim: Engikam

[FOG] – Ransomware Victim: Manning Publications Co[.]

[FOG] – Ransomware Victim: Euranova

You may have missed