threatintel

Malware Analysis – djvu – a64d49b747d1ae2346f8c4e47f75d990

October 7, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: a64d49b747d1ae2346f8c4e47f75d990SHA1: 1a127cbb2996ab256afeda3773571b90f61b1c2aANALYSIS DATE: 2022-10-06T20:01:45ZTTPS:...

Malware Analysis – djvu – 5ec6d8582f6ab8401fe667bc22ed639f

October 7, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 5ec6d8582f6ab8401fe667bc22ed639fSHA1: f51d073d99e98f0b23595738b927775fd72e9116ANALYSIS DATE: 2022-10-06T20:00:19ZTTPS: T1053, T1005, T1081, T1222,...

Cobalt Stike Beacon Detected – 124[.]223[.]96[.]251:80

October 7, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 39[.]108[.]111[.]72:8081

October 7, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – ransomware – 49143739704f7d2cb081f787241a5e6b

October 7, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 49143739704f7d2cb081f787241a5e6bSHA1: a7ca5e122c496ec9d605cca95ba93f5fabae4c44ANALYSIS DATE: 2022-10-06T20:11:06ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Cobalt Stike Beacon Detected – 175[.]24[.]230[.]165:443

October 7, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – smokeloader – a64d49b747d1ae2346f8c4e47f75d990

October 7, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: a64d49b747d1ae2346f8c4e47f75d990SHA1: 1a127cbb2996ab256afeda3773571b90f61b1c2aANALYSIS DATE: 2022-10-06T20:02:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – a64d49b747d1ae2346f8c4e47f75d990

October 7, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: a64d49b747d1ae2346f8c4e47f75d990SHA1: 1a127cbb2996ab256afeda3773571b90f61b1c2aANALYSIS DATE: 2022-10-06T20:02:29ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ransomware – 2af5fb4795f72a7e4d2d482f3de56203

October 7, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 2af5fb4795f72a7e4d2d482f3de56203SHA1: 3bd374109ebcd348321b351edd53bac2e3b809bfANALYSIS DATE: 2022-10-06T20:11:05ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Cobalt Stike Beacon Detected – 143[.]198[.]116[.]67:443

October 7, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 46[.]166[.]173[.]13:8099

October 7, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 107[.]174[.]138[.]166:9443

October 7, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 43[.]135[.]70[.]137:80

October 7, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – smokeloader – f1ec441f31d57ce6c855b027fbeb3da2

October 7, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: f1ec441f31d57ce6c855b027fbeb3da2SHA1: a6a0eaaa5ff49e19caf3657cd87713558c113da0ANALYSIS DATE: 2022-10-06T21:31:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ransomware – a26018cd2c37af036be7813691de7b0c

October 7, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: a26018cd2c37af036be7813691de7b0cSHA1: 9a45302f1c3bdebf51ee43cfa4cb6ae04fcf39f4ANALYSIS DATE: 2022-10-06T20:11:06ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – smokeloader – f1ec441f31d57ce6c855b027fbeb3da2

October 7, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: f1ec441f31d57ce6c855b027fbeb3da2SHA1: a6a0eaaa5ff49e19caf3657cd87713558c113da0ANALYSIS DATE: 2022-10-06T21:31:37ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 85e1f46bf518f778cb08158b25d0083d

October 7, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 85e1f46bf518f778cb08158b25d0083dSHA1: d64d8cd462d6126cabf44ce0d990ebc5e5c3a33dANALYSIS DATE: 2022-10-06T21:42:27ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – djvu – d80e037ba92c84639f67d82e625362c1

October 7, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: d80e037ba92c84639f67d82e625362c1SHA1: 95e0c5169e1828f47ae21d11c9a605e4f27e93bcANALYSIS DATE: 2022-10-06T22:13:19ZTTPS: T1012, T1082, T1005, T1081,...

Malware Analysis – dcrat – f1ec441f31d57ce6c855b027fbeb3da2

October 7, 2022

Score: 10 MALWARE FAMILY: dcratTAGS:family:dcrat, family:djvu, family:raccoon, family:smokeloader, family:vidar, botnet:517, botnet:884d084df0d90657bc52b99e12a5611c, backdoor, collection, discovery, infostealer, persistence, ransomware, rat, spyware, stealer,...

Malware Analysis – dcrat – 2cef6f29fb5ace1adc062e403a3fb65b

October 7, 2022

Malware Analysis – smokeloader – 2cef6f29fb5ace1adc062e403a3fb65b

October 7, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 2cef6f29fb5ace1adc062e403a3fb65bSHA1: febe262e803779050710a958d569a28371ccdaf6ANALYSIS DATE: 2022-10-06T22:32:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

threatintel

Malware Analysis – djvu – a64d49b747d1ae2346f8c4e47f75d990

Malware Analysis – djvu – 5ec6d8582f6ab8401fe667bc22ed639f

Cobalt Stike Beacon Detected – 124[.]223[.]96[.]251:80

Cobalt Stike Beacon Detected – 39[.]108[.]111[.]72:8081

Malware Analysis – ransomware – 49143739704f7d2cb081f787241a5e6b

Cobalt Stike Beacon Detected – 175[.]24[.]230[.]165:443

Malware Analysis – smokeloader – a64d49b747d1ae2346f8c4e47f75d990

Malware Analysis – smokeloader – a64d49b747d1ae2346f8c4e47f75d990

Malware Analysis – ransomware – 2af5fb4795f72a7e4d2d482f3de56203

Cobalt Stike Beacon Detected – 143[.]198[.]116[.]67:443

Cobalt Stike Beacon Detected – 46[.]166[.]173[.]13:8099

Cobalt Stike Beacon Detected – 107[.]174[.]138[.]166:9443

Cobalt Stike Beacon Detected – 43[.]135[.]70[.]137:80

Malware Analysis – smokeloader – f1ec441f31d57ce6c855b027fbeb3da2

Malware Analysis – ransomware – a26018cd2c37af036be7813691de7b0c

Malware Analysis – smokeloader – f1ec441f31d57ce6c855b027fbeb3da2

Malware Analysis – djvu – 85e1f46bf518f778cb08158b25d0083d

Malware Analysis – djvu – d80e037ba92c84639f67d82e625362c1

Malware Analysis – dcrat – f1ec441f31d57ce6c855b027fbeb3da2

Malware Analysis – dcrat – 2cef6f29fb5ace1adc062e403a3fb65b

Malware Analysis – smokeloader – 2cef6f29fb5ace1adc062e403a3fb65b

Watch out, a bug in Linux Kernel 5.19.12 can damage displays on Intel laptops

Secure Web Gateway (SWG) Security – SASE Part 3

Cyber Hygiene: 5 Tips for Company Buy-In

CISA: CISA Adds One Known Exploited Vulnerability to Catalog

CISA: ASD’s ACSC, CISA, and US and International Partners Release Guidance on Choosing Secure and Verifiable Technologies

CISA: Microsoft Releases December 2024 Security Updates

CISA: Ivanti Releases Security Updates for Multiple Products

CISA: Cisco Releases Security Updates for NX-OS Software

You may have missed