threatintel

Malware Analysis – djvu – 3eec37f699a345275d8c76cb2c6757b3

December 6, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: 3eec37f699a345275d8c76cb2c6757b3SHA1: 4ac02fa96bb5f0fdc57c180a05f3d4f587de71c0ANALYSIS DATE: 2022-12-06T16:40:12ZTTPS: T1222, T1060, T1112, T1082 ScoreMeaningExample10Known badA malware family...

Malware Analysis – ransomware – f18e1e56201d0ad2279565d85572561c

December 6, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: f18e1e56201d0ad2279565d85572561cSHA1: a43891053dfc110d15e4ad5fdba3f91d90774280ANALYSIS DATE: 2022-12-06T15:52:06ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Russia’s second-largest bank VTB Bank under DDoS attack

December 6, 2022

Russia’s second-largest bank VTB Bank reveals it is facing the largest DDoS (distributed denial of service) attack in its history....

A flaw in the connected vehicle service SiriusXM allows remote car hacking

December 6, 2022

Researchers discovered a security flaw in the connected vehicle service SiriusXM that exposes multiple car models to remote attacks. Cybersecurity...

Klyda – Highly Configurable Script For Dictionary/Spray Attacks Against Online Web Applications

December 6, 2022

The Klyda project has been created to aid in quick credential based attacks against online web applications. Klyda supports the...

Cobalt Stike Beacon Detected – 77[.]73[.]133[.]120:80

December 6, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 124[.]222[.]203[.]214:8080

December 6, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 107[.]189[.]6[.]84:80

December 6, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 167[.]71[.]204[.]199:8443

December 6, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

BlackCat/ALPHV Ransomware Victim: pro office Büro + Wohnkultur GmbH

December 6, 2022

BlackCat / ALPHV Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the...

Black Basta Ransomware Victim: nworksllc

December 6, 2022

Black Basta Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Cobalt Stike Beacon Detected – 13[.]39[.]17[.]109:80

December 6, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 208[.]167[.]253[.]63:443

December 6, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 81[.]68[.]184[.]236:80

December 6, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 81[.]68[.]175[.]191:80

December 6, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – persistence – 172a3ab963d3e150845bd3b7d7047034

December 6, 2022

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 172a3ab963d3e150845bd3b7d7047034SHA1: c28b888ed5754ef5fa7876f1be66dd7675f54b76ANALYSIS DATE: 2022-12-03T11:40:51ZTTPS: T1060, T1112, T1004, T1491 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – discovery – b6e08a65972c4023436c14a359fe73af

December 6, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploit, upxMD5: b6e08a65972c4023436c14a359fe73afSHA1: 611847af498d29c8e2404fc7124c994c5f4085b1ANALYSIS DATE: 2022-12-03T10:15:36ZTTPS: T1082, T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – djvu – 2892caea283ee2c4526774b43d02ea3c

December 6, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 2892caea283ee2c4526774b43d02ea3cSHA1: 184928ccdc38470af7b4b8363a6796c85b4f27a8ANALYSIS DATE: 2022-12-06T09:37:01ZTTPS:...

Malware Analysis – djvu – 37693f504555f769a091f00c52f3eab4

December 6, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 37693f504555f769a091f00c52f3eab4SHA1: cb924b833880a6822bd9cfb30456d12c09a7ef41ANALYSIS DATE: 2022-12-06T09:17:24ZTTPS: T1082, T1012, T1005, T1081,...

Malware Analysis – persistence – d21c5963ef3b01b79b3364ee3836fd33

December 6, 2022

Score: 7 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: d21c5963ef3b01b79b3364ee3836fd33SHA1: 9703a569ea8cbd5f1b135ac8931ce64e67dc4f69ANALYSIS DATE: 2022-12-03T11:09:54ZTTPS: T1060, T1112, T1491, T1012, T1082 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – evasion – 036dd9df87e9420f03b6c93e44fe6910

December 6, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomwareMD5: 036dd9df87e9420f03b6c93e44fe6910SHA1: 5776cac2de5c46a98b645b12ba85d69b726f867cANALYSIS DATE: 2022-12-03T11:40:56ZTTPS: T1490, T1158, T1112, T1042, T1004, T1060, T1012, T1120, T1082,...

Malware Analysis – evasion – 3ab29a70acbd3b0d2c094e3ada484054

December 6, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 3ab29a70acbd3b0d2c094e3ada484054SHA1: 12d73c93755c765517f13de942817fd8d9952ec9ANALYSIS DATE: 2022-12-06T09:52:02ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – evasion – 040cb7a7191f01d4b6d2c57c936e6514

December 6, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 040cb7a7191f01d4b6d2c57c936e6514SHA1: dbf3e6ffe21d4c6a2a842d584f40f0b2253e4399ANALYSIS DATE: 2022-12-06T10:04:03ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – dcrat – c2b0008dd2da9de079e327b7bd4b0e7f

December 6, 2022

Score: 10 MALWARE FAMILY: dcratTAGS:family:dcrat, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, infostealer, persistence, ransomware, rat, spyware, stealer, trojanMD5: c2b0008dd2da9de079e327b7bd4b0e7fSHA1:...

threatintel

Malware Analysis – djvu – 3eec37f699a345275d8c76cb2c6757b3

Malware Analysis – ransomware – f18e1e56201d0ad2279565d85572561c

Russia’s second-largest bank VTB Bank under DDoS attack

A flaw in the connected vehicle service SiriusXM allows remote car hacking

Klyda – Highly Configurable Script For Dictionary/Spray Attacks Against Online Web Applications

Cobalt Stike Beacon Detected – 77[.]73[.]133[.]120:80

Cobalt Stike Beacon Detected – 124[.]222[.]203[.]214:8080

Cobalt Stike Beacon Detected – 107[.]189[.]6[.]84:80

Cobalt Stike Beacon Detected – 167[.]71[.]204[.]199:8443

BlackCat/ALPHV Ransomware Victim: pro office Büro + Wohnkultur GmbH

Black Basta Ransomware Victim: nworksllc

Cobalt Stike Beacon Detected – 13[.]39[.]17[.]109:80

Cobalt Stike Beacon Detected – 208[.]167[.]253[.]63:443

Cobalt Stike Beacon Detected – 81[.]68[.]184[.]236:80

Cobalt Stike Beacon Detected – 81[.]68[.]175[.]191:80

Malware Analysis – persistence – 172a3ab963d3e150845bd3b7d7047034

Malware Analysis – discovery – b6e08a65972c4023436c14a359fe73af

Malware Analysis – djvu – 2892caea283ee2c4526774b43d02ea3c

Malware Analysis – djvu – 37693f504555f769a091f00c52f3eab4

Malware Analysis – persistence – d21c5963ef3b01b79b3364ee3836fd33

Malware Analysis – evasion – 036dd9df87e9420f03b6c93e44fe6910

Malware Analysis – evasion – 3ab29a70acbd3b0d2c094e3ada484054

Malware Analysis – evasion – 040cb7a7191f01d4b6d2c57c936e6514

Malware Analysis – dcrat – c2b0008dd2da9de079e327b7bd4b0e7f

CVE Alert: CVE-2024-35114

CVE Alert: CVE-2024-35134

CVE Alert: CVE-2024-39750

CVE Alert: CVE-2024-35144

CVE Alert: CVE-2024-35113

You may have missed