threatintel

Malware Analysis – djvu – 7975898ff46d2d1da41ed19eff05735e

October 9, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 7975898ff46d2d1da41ed19eff05735eSHA1: 85f0d6f74690f48aa9541ff500273e4baac91573ANALYSIS DATE: 2022-10-09T04:49:56ZTTPS: T1222, T1082, T1005, T1081,...

Malware Analysis – djvu – 5fc28945e43189d5d50012c5513cf116

October 9, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 5fc28945e43189d5d50012c5513cf116SHA1: d41fb9e7f1b86bbace14a4397ca2923c6ab09f73ANALYSIS DATE: 2022-10-08T20:24:47ZTTPS: T1060, T1112, T1005, T1081,...

Malware Analysis – djvu – 5a74f152191f4536c1aa72fbc9c2af94

October 9, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 5a74f152191f4536c1aa72fbc9c2af94SHA1: 3f272e9fca62eeef5fe8b7e95a12a0ac9f5af946ANALYSIS DATE: 2022-10-08T20:21:55ZTTPS: T1060, T1112, T1082, T1053,...

Cobalt Stike Beacon Detected – 101[.]43[.]249[.]51:81

October 9, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 128[.]199[.]225[.]53:80

October 9, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 31[.]7[.]62[.]194:443

October 9, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 5[.]44[.]42[.]49:443

October 9, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – 589db297cea020e84850c31f811839d8

October 9, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 589db297cea020e84850c31f811839d8SHA1: eed4e70e2c5eacec8927dc30a4a64d5c0c523939ANALYSIS DATE: 2022-10-08T20:41:13ZTTPS: T1222, T1082, T1005, T1081,...

Malware Analysis – djvu – d36adfd8ca6256e28f92f559347f0f45

October 9, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: d36adfd8ca6256e28f92f559347f0f45SHA1: 30729283bac983139b98f99c182ae5d6db07e42eANALYSIS DATE: 2022-10-08T20:42:02ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – djvu – 70522f6d4d1aac922291b1cde7194392

October 9, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 70522f6d4d1aac922291b1cde7194392SHA1: 434c905aa4ecb59c75bd014c2b312de8c5369c0aANALYSIS DATE: 2022-10-08T21:01:09ZTTPS:...

Malware Analysis – djvu – 3aedc46600040196cd9cf8a41020d81b

October 9, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 3aedc46600040196cd9cf8a41020d81bSHA1: 81e706eaaf6d14eea5a86a4c5613baac4229a720ANALYSIS DATE: 2022-10-08T21:02:17ZTTPS: T1222, T1012, T1082, T1005,...

Malware Analysis – djvu – 97fa4449deec602b6164558d3881750c

October 9, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 97fa4449deec602b6164558d3881750cSHA1: 221a3c3c33a03376d128c69489a9f348bde3db84ANALYSIS DATE: 2022-10-08T22:02:43ZTTPS:...

Malware Analysis – djvu – 2c651acbd30133e91cc7cb91229065cf

October 9, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 2c651acbd30133e91cc7cb91229065cfSHA1: 55c563f6cc974ef5471ff30c453ca32bbb5a2dd7ANALYSIS DATE: 2022-10-08T22:55:04ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – – a36e43c61d51a333f7ea5403a7a657f2

October 9, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: a36e43c61d51a333f7ea5403a7a657f2SHA1: 981fd36739b6bdb27ac098cdc52efe4f903afdcaANALYSIS DATE: 2022-10-08T21:37:33ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – 1d300efd6540e957d8fe82ff8a3eabe0

October 9, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 1d300efd6540e957d8fe82ff8a3eabe0SHA1: 764370fd5b58afb7e80c1433174c66218f2f77b0ANALYSIS DATE: 2022-10-08T21:22:39ZTTPS: T1222, T1082, T1005, T1081,...

BlackByte Ransomware abuses vulnerable driver to bypass security solutions

October 8, 2022

The BlackByte ransomware operators are leveraging a flaw in a legitimate Windows driver to bypass security solutions. Researchers from Sophos...

Malware Analysis – discovery – dd4705e982301fd3b2c633456091443e

October 8, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: dd4705e982301fd3b2c633456091443eSHA1: 97d6d4fc1a26be2c1eab40bf5a044232cac1a479ANALYSIS DATE: 2022-10-08T13:49:20ZTTPS: T1082, T1060, T1012 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ransomware – a4cdc979beb84ea8abf82613819fe77f

October 8, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: a4cdc979beb84ea8abf82613819fe77fSHA1: 93e85b0ad5e02bd7290df8135a0e0f77a0171572ANALYSIS DATE: 2022-10-08T13:26:34ZTTPS: T1082, T1005, T1081, T1102 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – smokeloader – 0933ced736e413d0c0e495186280a761

October 8, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 0933ced736e413d0c0e495186280a761SHA1: c1744b4fc8371d8bb9da154bbb460192de8543e7ANALYSIS DATE: 2022-10-08T15:01:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – dcrat – 17d99dd89d24876b77cdac867eeee249

October 8, 2022

Score: 10 MALWARE FAMILY: dcratTAGS:family:dcrat, family:djvu, family:redline, family:smokeloader, family:vidar, botnet:517, botnet:обнова, backdoor, collection, discovery, infostealer, persistence, ransomware, rat, spyware, stealer,...

Malware Analysis – lockbit – c9420fe90699c6bebad3f795f9e4aca3

October 8, 2022

Score: 10 MALWARE FAMILY: lockbitTAGS:family:lockbit, discovery, evasion, persistence, ransomwareMD5: c9420fe90699c6bebad3f795f9e4aca3SHA1: c2e629d90d7bbcd595032d6fb1f775957fe9e6e2ANALYSIS DATE: 2022-10-08T14:36:04ZTTPS: T1490, T1046, T1060, T1112, T1107, T1082 ScoreMeaningExample10Known...

Malware Analysis – smokeloader – 17d99dd89d24876b77cdac867eeee249

October 8, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 17d99dd89d24876b77cdac867eeee249SHA1: c926da71b769adc734e20831249da2819b33e8d2ANALYSIS DATE: 2022-10-08T14:01:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – ea9f6efc3b1a0476f57992a00ea6c759

October 8, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: ea9f6efc3b1a0476f57992a00ea6c759SHA1: be26452d1dc132b687b89f4845d1ce3ab0a48082ANALYSIS DATE: 2022-10-08T16:14:32ZTTPS: T1060, T1112, T1005, T1081,...

Malware Analysis – smokeloader – 432f1158e2d09eab65b9e855c1736313

October 8, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 432f1158e2d09eab65b9e855c1736313SHA1: 150518dda45e3767015a19161c4b677971fdced7ANALYSIS DATE: 2022-10-08T16:03:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

threatintel

Malware Analysis – djvu – 7975898ff46d2d1da41ed19eff05735e

Malware Analysis – djvu – 5fc28945e43189d5d50012c5513cf116

Malware Analysis – djvu – 5a74f152191f4536c1aa72fbc9c2af94

Cobalt Stike Beacon Detected – 101[.]43[.]249[.]51:81

Cobalt Stike Beacon Detected – 128[.]199[.]225[.]53:80

Cobalt Stike Beacon Detected – 31[.]7[.]62[.]194:443

Cobalt Stike Beacon Detected – 5[.]44[.]42[.]49:443

Malware Analysis – djvu – 589db297cea020e84850c31f811839d8

Malware Analysis – djvu – d36adfd8ca6256e28f92f559347f0f45

Malware Analysis – djvu – 70522f6d4d1aac922291b1cde7194392

Malware Analysis – djvu – 3aedc46600040196cd9cf8a41020d81b

Malware Analysis – djvu – 97fa4449deec602b6164558d3881750c

Malware Analysis – djvu – 2c651acbd30133e91cc7cb91229065cf

Malware Analysis – – a36e43c61d51a333f7ea5403a7a657f2

Malware Analysis – djvu – 1d300efd6540e957d8fe82ff8a3eabe0

BlackByte Ransomware abuses vulnerable driver to bypass security solutions

Malware Analysis – discovery – dd4705e982301fd3b2c633456091443e

Malware Analysis – ransomware – a4cdc979beb84ea8abf82613819fe77f

Malware Analysis – smokeloader – 0933ced736e413d0c0e495186280a761

Malware Analysis – dcrat – 17d99dd89d24876b77cdac867eeee249

Malware Analysis – lockbit – c9420fe90699c6bebad3f795f9e4aca3

Malware Analysis – smokeloader – 17d99dd89d24876b77cdac867eeee249

Malware Analysis – djvu – ea9f6efc3b1a0476f57992a00ea6c759

Malware Analysis – smokeloader – 432f1158e2d09eab65b9e855c1736313

Cobalt Strike Copies Decline 80% Due to Enhanced Security Measures

Cyber-Attack Reporting Mandate Introduced for Switzerland’s Critical Infrastructure

Texas Developer Sentenced for Intentional Computer Damage in Kill Switch Sabotage

Nation-State Hackers Threaten UK AI Research Progress

Malicious Software Packages Surge: Exploiting System Vulnerabilities

You may have missed