Security

Malware Analysis – smokeloader – 2486d74f06a082f19c89a9fd1ff8f33c

January 31, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 2486d74f06a082f19c89a9fd1ff8f33cSHA1: 462fa1e0c497739a65d651c1fb20b37b292d8330ANALYSIS DATE: 2023-01-30T23:01:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ransomware – 794b00893a1b95ade9379710821ac1a4

January 31, 2023

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomware, upxMD5: 794b00893a1b95ade9379710821ac1a4SHA1: 85c7b2c351700457e3d6a21032dfd971ccb9b09dANALYSIS DATE: 2023-01-30T23:38:10ZTTPS: T1491, T1112, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – discovery – 05882ff7f159734468f66e60cb10f316

January 31, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, ransomwareMD5: 05882ff7f159734468f66e60cb10f316SHA1: ec0b1d3fd2a67a5f85e2a8b1e04d69f4362b6b4eANALYSIS DATE: 2023-01-30T23:48:44ZTTPS: T1082, T1057, T1012 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

c1f8837aa9f871ea0cc3954930d50e54c03cca418b9a40538f4c5a856b7ea5c2

DFShell – The Best Forwarded Shell

January 30, 2023

██████╗ ███████╗███████╗██╗ ██╗███████╗██╗ ██╗ ██╔══██╗██╔════╝██╔════╝██║ ██║███╔═══╝██║ ██║ ██║ ██║█████╗ ███████╗███████║█████╗ ██║ ██║ ██║ ██║██╔══╝ ╚════██║██╔══██║██╔══╝ ██║ ██║ ██████╔╝██║ ███████║██║ ██║███████╗████████╗███████╗╚═════╝...

Cobalt Stike Beacon Detected – 212[.]193[.]30[.]14:8080

January 30, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 210[.]209[.]123[.]100:443

January 30, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 107[.]172[.]206[.]242:9990

January 30, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 176[.]10[.]111[.]175:8443

January 30, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 75[.]127[.]13[.]147:80

January 30, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 185[.]175[.]156[.]42:80

January 30, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 81[.]70[.]11[.]25:9999

January 30, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 173[.]254[.]204[.]67:443

January 30, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 150[.]158[.]101[.]160:443

January 30, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 212[.]193[.]30[.]14:443

January 30, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 124[.]223[.]49[.]76:8080

January 30, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 195[.]189[.]96[.]249:80

January 30, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 124[.]222[.]30[.]121:5000

January 30, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – discovery – 053bcae6cc46eb852a346774a8f5373a

January 30, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: 053bcae6cc46eb852a346774a8f5373aSHA1: 11ba7711a7c3c275b5e48d94b5b432c3f2b30e79ANALYSIS DATE: 2023-01-30T09:21:28ZTTPS: T1012, T1120, T1082, T1060, T1112 ScoreMeaningExample10Known badA malware family...

Malware Analysis – discovery – 7100ae995fa831c9caf2fcc284f6d404

January 30, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, ransomwareMD5: 7100ae995fa831c9caf2fcc284f6d404SHA1: b9fa6ef183fdd23ac99fc8e98287ae560349d145ANALYSIS DATE: 2023-01-30T09:02:16ZTTPS: T1012, T1082, T1057 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Cobalt Stike Beacon Detected – 18[.]212[.]19[.]9:80

January 30, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 104[.]129[.]21[.]122:443

January 30, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 96[.]45[.]170[.]235:8989

January 30, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 101[.]43[.]129[.]115:443

January 30, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – 1353a4920662db38d6bd16fbda5605e4

January 30, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 1353a4920662db38d6bd16fbda5605e4SHA1: 57dcbf4275ca000556a6cfaa344393c607faf5a9ANALYSIS DATE: 2023-01-30T10:11:57ZTTPS: T1012, T1222, T1082, T1053,...

Security

Malware Analysis – smokeloader – 2486d74f06a082f19c89a9fd1ff8f33c

Malware Analysis – ransomware – 794b00893a1b95ade9379710821ac1a4

Malware Analysis – discovery – 05882ff7f159734468f66e60cb10f316

DFShell – The Best Forwarded Shell

Cobalt Stike Beacon Detected – 212[.]193[.]30[.]14:8080

Cobalt Stike Beacon Detected – 210[.]209[.]123[.]100:443

Cobalt Stike Beacon Detected – 107[.]172[.]206[.]242:9990

Cobalt Stike Beacon Detected – 176[.]10[.]111[.]175:8443

Cobalt Stike Beacon Detected – 75[.]127[.]13[.]147:80

Cobalt Stike Beacon Detected – 185[.]175[.]156[.]42:80

Cobalt Stike Beacon Detected – 81[.]70[.]11[.]25:9999

Cobalt Stike Beacon Detected – 173[.]254[.]204[.]67:443

Cobalt Stike Beacon Detected – 150[.]158[.]101[.]160:443

Cobalt Stike Beacon Detected – 212[.]193[.]30[.]14:443

Cobalt Stike Beacon Detected – 124[.]223[.]49[.]76:8080

Cobalt Stike Beacon Detected – 195[.]189[.]96[.]249:80

Cobalt Stike Beacon Detected – 124[.]222[.]30[.]121:5000

Malware Analysis – discovery – 053bcae6cc46eb852a346774a8f5373a

Malware Analysis – discovery – 7100ae995fa831c9caf2fcc284f6d404

Cobalt Stike Beacon Detected – 18[.]212[.]19[.]9:80

Cobalt Stike Beacon Detected – 104[.]129[.]21[.]122:443

Cobalt Stike Beacon Detected – 96[.]45[.]170[.]235:8989

Cobalt Stike Beacon Detected – 101[.]43[.]129[.]115:443

Malware Analysis – djvu – 1353a4920662db38d6bd16fbda5605e4

Telefónica Germany Offloads Vmware Support To Spinnaker Due To High Renewalcosts

CVE Alert: CVE-2025-7489

CVE Alert: CVE-2025-7483

CVE Alert: CVE-2025-7485

CVE Alert: CVE-2025-7487

You may have missed