Security

Malware Analysis – evasion – fbb796cc4209793257bc08943e9bfa29

December 19, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomwareMD5: fbb796cc4209793257bc08943e9bfa29SHA1: 5200d89104d66cab7ee6418e1dc5eccc13bc5193ANALYSIS DATE: 2022-12-19T17:46:03ZTTPS: T1082, T1491, T1112, T1004, T1070, T1060, T1012, T1120, T1490...

Malware Analysis – djvu – 9228f870c82e0b331680b9fe90486722

December 19, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 9228f870c82e0b331680b9fe90486722SHA1: f91f48f62bff5b8291589ccc150c7e8339daf66eANALYSIS DATE: 2022-12-19T17:50:17ZTTPS: T1060, T1112, T1082, T1005, T1081, T1012,...

Experts spotted a variant of the Agenda Ransomware written in Rust

December 19, 2022

Researchers spotted a new variant of the Agenda ransomware which is written in the cross-platform programming language Rust. Trend Micro...

US Gov warns of BEC attacks to hijack shipments of food products

December 19, 2022

US government is warning of business email compromise (BEC) attacks aimed at hijacking shipments of food products and ingredients. The...

Shennina – Automating Host Exploitation With AI

December 19, 2022

Shennina is an automated host exploitation framework. The mission of the project is to fully automate the scanning, vulnerability scanning/analysis,...

Malware Analysis – smokeloader – f2c597e9fa52dd47f91af87220519dac

December 19, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: f2c597e9fa52dd47f91af87220519dacSHA1: ac1f095102f466d2672a4c3f71ab4f5479d639d5ANALYSIS DATE: 2022-12-19T09:20:06ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – chaos – b89623caba31b7994735f4f5bf437fcd

December 19, 2022

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, evasion, persistence, ransomware, spyware, stealerMD5: b89623caba31b7994735f4f5bf437fcdSHA1: 12687458b19ec21ba567ac2bc974434a55855b64ANALYSIS DATE: 2022-12-19T09:27:10ZTTPS: T1490, T1059, T1107, T1005, T1081, T1060,...

Malware Analysis – evasion – f9e572211e62a06b45cff719e1dd20bd

December 19, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, ransomware, trojanMD5: f9e572211e62a06b45cff719e1dd20bdSHA1: c08dd725ccb50eddae75e2eaba3c085384b5aba5ANALYSIS DATE: 2022-12-19T09:27:09ZTTPS: T1053, T1107, T1490, T1082, T1031, T1112, T1089, T1012, T1120...

Malware Analysis – chaos – 79c1db9230bdd5766b516156f84c89a9

December 19, 2022

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, evasion, persistence, ransomware, spyware, stealerMD5: 79c1db9230bdd5766b516156f84c89a9SHA1: 82ac99d111262b7440fbb47824214d4efd033c8cANALYSIS DATE: 2022-12-19T09:27:10ZTTPS: T1490, T1059, T1107, T1491, T1112, T1082,...

Malware Analysis – phobos – 9d698f5fb023c21b0629273b0ef42594

December 19, 2022

Score: 10 MALWARE FAMILY: phobosTAGS:family:phobos, evasion, persistence, ransomware, spyware, stealerMD5: 9d698f5fb023c21b0629273b0ef42594SHA1: 76ba11bfc956c6c68b8d34731f6573e308d6771bANALYSIS DATE: 2022-12-19T09:27:10ZTTPS: T1490, T1059, T1107, T1031, T1005, T1081,...

Cobalt Stike Beacon Detected – 195[.]189[.]96[.]208:80

December 19, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 123[.]60[.]165[.]221:80

December 19, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 179[.]60[.]150[.]151:80

December 19, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – phobos – c103ec06780900e31e8f2b7eef87367c

December 19, 2022

Score: 10 MALWARE FAMILY: phobosTAGS:family:phobos, evasion, persistence, ransomware, spyware, stealerMD5: c103ec06780900e31e8f2b7eef87367cSHA1: b154ab6d401c53e43e7fafa757e96cf0a86a044fANALYSIS DATE: 2022-12-19T09:27:11ZTTPS: T1490, T1059, T1107, T1005, T1081, T1112,...

Malware Analysis – evasion – d079c0fa48fce0e934ba91eb9aaa1371

December 19, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: d079c0fa48fce0e934ba91eb9aaa1371SHA1: b83fbd591c980e6f76b417f12cbbe98757156483ANALYSIS DATE: 2022-12-19T09:27:11ZTTPS: T1107, T1490, T1031, T1082, T1060, T1112, T1053, T1089,...

Malware Analysis – phobos – 578244d3c1afbe8009f04bbc9eb54076

December 19, 2022

Score: 10 MALWARE FAMILY: phobosTAGS:family:phobos, evasion, persistence, ransomware, spyware, stealerMD5: 578244d3c1afbe8009f04bbc9eb54076SHA1: 83c1841f67d81d90aec1217766721bbb6856973eANALYSIS DATE: 2022-12-19T09:27:11ZTTPS: T1490, T1059, T1107, T1112, T1060, T1082,...

Malware Analysis – chaos – be7f1f1945fb7f3b6fa92e38cc466619

December 19, 2022

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, evasion, persistence, ransomware, spyware, stealerMD5: be7f1f1945fb7f3b6fa92e38cc466619SHA1: 7cffcbbbadaebd23ffecba0d40dc0290ba528603ANALYSIS DATE: 2022-12-19T09:27:10ZTTPS: T1490, T1059, T1107, T1491, T1112, T1082,...

Cobalt Stike Beacon Detected – 43[.]139[.]139[.]56:8080

December 19, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 147[.]182[.]177[.]163:443

December 19, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 173[.]82[.]206[.]184:80

December 19, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – evasion – cb1ba70812eda56152bd1e2186acabe9

December 19, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomwareMD5: cb1ba70812eda56152bd1e2186acabe9SHA1: 0416d3296a3e4ad7b3746d01f79c13f1166a6a3fANALYSIS DATE: 2022-12-19T09:27:11ZTTPS: T1107, T1490, T1082, T1112, T1031, T1562, T1489, T1012, T1120,...

Malware Analysis – djvu – c4c212e00c54bd667019ed5709b8724d

December 19, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: c4c212e00c54bd667019ed5709b8724dSHA1: 22974e6a95ec64e983c78bba8c3850586aa34619ANALYSIS DATE: 2022-12-19T11:05:05ZTTPS: T1012, T1082, T1053, T1060, T1112, T1222,...

Cobalt Stike Beacon Detected – 103[.]43[.]12[.]109:443

December 19, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – ransomware – 432ef25107f4c29775ecc469699d02fb

December 19, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 432ef25107f4c29775ecc469699d02fbSHA1: c74dc4765adcf729367068b4570ca3ea1bba7e0dANALYSIS DATE: 2022-12-19T10:39:33ZTTPS: T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Security

Malware Analysis – evasion – fbb796cc4209793257bc08943e9bfa29

Malware Analysis – djvu – 9228f870c82e0b331680b9fe90486722

Experts spotted a variant of the Agenda Ransomware written in Rust

US Gov warns of BEC attacks to hijack shipments of food products

Shennina – Automating Host Exploitation With AI

Malware Analysis – smokeloader – f2c597e9fa52dd47f91af87220519dac

Malware Analysis – chaos – b89623caba31b7994735f4f5bf437fcd

Malware Analysis – evasion – f9e572211e62a06b45cff719e1dd20bd

Malware Analysis – chaos – 79c1db9230bdd5766b516156f84c89a9

Malware Analysis – phobos – 9d698f5fb023c21b0629273b0ef42594

Cobalt Stike Beacon Detected – 195[.]189[.]96[.]208:80

Cobalt Stike Beacon Detected – 123[.]60[.]165[.]221:80

Cobalt Stike Beacon Detected – 179[.]60[.]150[.]151:80

Malware Analysis – phobos – c103ec06780900e31e8f2b7eef87367c

Malware Analysis – evasion – d079c0fa48fce0e934ba91eb9aaa1371

Malware Analysis – phobos – 578244d3c1afbe8009f04bbc9eb54076

Malware Analysis – chaos – be7f1f1945fb7f3b6fa92e38cc466619

Cobalt Stike Beacon Detected – 43[.]139[.]139[.]56:8080

Cobalt Stike Beacon Detected – 147[.]182[.]177[.]163:443

Cobalt Stike Beacon Detected – 173[.]82[.]206[.]184:80

Malware Analysis – evasion – cb1ba70812eda56152bd1e2186acabe9

Malware Analysis – djvu – c4c212e00c54bd667019ed5709b8724d

Cobalt Stike Beacon Detected – 103[.]43[.]12[.]109:443

Malware Analysis – ransomware – 432ef25107f4c29775ecc469699d02fb

[INCRANSOM] – Ransomware Victim: Naples Heritage Golf & Country Club

[LYNX] – Ransomware Victim: Dynamic Closures

[QILIN] – Ransomware Victim: Connekted, Inc[.]

[FOG] – Ransomware Victim: WJCC Public Schools (wjccschools[.]org)

CVE Alert: CVE-2025-0954

You may have missed