Month: October 2022

Malware Analysis – ransomware – 7bd089aaea4e393b01b6069e47764be1

October 10, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 7bd089aaea4e393b01b6069e47764be1SHA1: 90dbfb2fed2a02dda07734d674084e837e601321ANALYSIS DATE: 2022-10-10T08:39:04ZTTPS: T1107, T1490, T1091, T1005, T1081, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – a94f67a806828baf78504f8d9d5cf42a

October 10, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: a94f67a806828baf78504f8d9d5cf42aSHA1: a72910578de00225c6d24306e9b5eeab4a6f33b4ANALYSIS DATE: 2022-10-10T08:39:05ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 0b0201c53825562dfdd5ebd7dbccbf38

October 10, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 0b0201c53825562dfdd5ebd7dbccbf38SHA1: 0fbcdf14d6c92bb7a95f203913b73b19a540c487ANALYSIS DATE: 2022-10-10T08:39:05ZTTPS: T1107, T1490, T1091, T1005, T1081, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 5e0d593d3632ac41daa02fade2043259

October 10, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 5e0d593d3632ac41daa02fade2043259SHA1: 3c824d507972ef34b687d7649583bceb7de71aeeANALYSIS DATE: 2022-10-10T08:39:05ZTTPS: T1107, T1490, T1091, T1005, T1081, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 20fc465d7c6489a0206c387c6554e447

October 10, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 20fc465d7c6489a0206c387c6554e447SHA1: c8ff352b3263c4971740fb73a7b4ea962c57fda7ANALYSIS DATE: 2022-10-10T08:39:06ZTTPS: T1091, T1005, T1081, T1082, T1107, T1490 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 1e207867d0bd42e2210870bf69dfa3b4

October 10, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 1e207867d0bd42e2210870bf69dfa3b4SHA1: 3bc83bfba8a3d842726507735dbd9f1288911e53ANALYSIS DATE: 2022-10-10T08:39:07ZTTPS: T1107, T1490, T1091, T1005, T1081, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – djvu – 73b061304660166c3ccad2752888bc22

October 10, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 73b061304660166c3ccad2752888bc22SHA1: 63f3be7ae2ef8ccab42d9f6d215c4759c16155b1ANALYSIS DATE: 2022-10-10T08:53:05ZTTPS: T1060, T1112, T1222, T1005,...

Malware Analysis – ransomware – 2db76b0260e905e94fa261a90906f8a4

October 10, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 2db76b0260e905e94fa261a90906f8a4SHA1: 41a976ebb4ab5652ca14b040a5682fea66b97dcbANALYSIS DATE: 2022-10-10T08:39:06ZTTPS: T1091, T1005, T1081, T1082, T1107, T1490 ScoreMeaningExample10Known badA malware...

Malware Analysis – smokeloader – 679444aa9f0d1e293e39eaed57113bb8

October 10, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 679444aa9f0d1e293e39eaed57113bb8SHA1: cae359ed828f2fadf8061b867ddcb2026bc9ecfeANALYSIS DATE: 2022-10-10T08:59:05ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 1fa8b13e3d5784a77dcbaaebe69eced2

October 10, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 1fa8b13e3d5784a77dcbaaebe69eced2SHA1: 0bb2bea339016ff1bc883702ba1b9f4ddbe5ca93ANALYSIS DATE: 2022-10-10T09:37:41ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – smokeloader – cdbdd4c235149f48e78ec4f31068f705

October 10, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: cdbdd4c235149f48e78ec4f31068f705SHA1: c561ec9b102998ce09d4f298481d61321f5d4181ANALYSIS DATE: 2022-10-10T09:31:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – ccf06f177138fd71b7e3be0733de43b9

October 10, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: ccf06f177138fd71b7e3be0733de43b9SHA1: 4da6d1a0271c5886fc28bad30800d56c1d6373b8ANALYSIS DATE: 2022-10-10T09:21:23ZTTPS: T1053, T1005, T1081, T1012,...

Black Basta Ransomware Victim: Shiloh Industries

October 10, 2022

Black Basta Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Malware Analysis – djvu – 9828af2b86b6ed65bb519df37f8c3474

October 10, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, family:vidar, botnet:517, botnet:newpatch13, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5: 9828af2b86b6ed65bb519df37f8c3474SHA1:...

Malware Analysis – djvu – 1f1dccb99906382819aad1fb0345693c

October 10, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 1f1dccb99906382819aad1fb0345693cSHA1: deea4e890ffd1af74c0d8e42a9397ca0e625072dANALYSIS DATE: 2022-10-10T10:44:50ZTTPS: T1060, T1112, T1053, T1012,...

Malware Analysis – smokeloader – 9828af2b86b6ed65bb519df37f8c3474

October 10, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 9828af2b86b6ed65bb519df37f8c3474SHA1: 73005a5deae041694f83d36ec1e3581dd3e5bba1ANALYSIS DATE: 2022-10-10T10:02:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – cdbdd4c235149f48e78ec4f31068f705

October 10, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5: cdbdd4c235149f48e78ec4f31068f705SHA1: c561ec9b102998ce09d4f298481d61321f5d4181ANALYSIS...

Dark web carding site BidenCash gives 1.2M payment cards for free

October 10, 2022

BidenCash, a popular dark web carding site, released a dump of more than 1.2 million credit cards to promote its...

Daily Vulnerability Trends: Mon Oct 10 2022

October 10, 2022

Daily Vulnerability Trends (sourced from VulnMon) CVE NAMECVE DescriptionCVE-2022-26717 No description provided CVE-2022-2992 No description provided CVE-2022-27925Zimbra Collaboration (aka ZCS)...

Malware Analysis – djvu – b470b44156d20ac1c14cbd248fce929b

October 10, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5: b470b44156d20ac1c14cbd248fce929bSHA1: 04d40722c041655e3dd0589cccdbcc8ee20dfbcdANALYSIS DATE: 2022-10-10T02:40:09ZTTPS:...

Malware Analysis – ransomware – a304c5eeb1b2fd42d1e5fdd3925cd23e

October 10, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: a304c5eeb1b2fd42d1e5fdd3925cd23eSHA1: c267eadb2dbeaed0ea1b8bb6ef6064a1bf5d0dbcANALYSIS DATE: 2022-10-10T03:45:23ZTTPS: T1107, T1490, T1091, T1005, T1081, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – fe1995022dda4cb8802a7c3d9732598f

October 10, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: fe1995022dda4cb8802a7c3d9732598fSHA1: 7e83ad54aec0d44feda378f431fc0b432111c050ANALYSIS DATE: 2022-10-10T03:45:26ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – djvu – 7f60063226def0bebfc01dc88fc3fa77

October 10, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, botnet:newpatch13, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5: 7f60063226def0bebfc01dc88fc3fa77SHA1: a1d1534805cc1f2c255c73f378608e1368948f2dANALYSIS DATE:...

Harvard Business Publishing licensee hit by ransomware

October 10, 2022

Threat actors got to a database with over 152,000 customer records before its owner, the Turkish branch of Harvard Business...

Month: October 2022

Malware Analysis – ransomware – 7bd089aaea4e393b01b6069e47764be1

Malware Analysis – ransomware – a94f67a806828baf78504f8d9d5cf42a

Malware Analysis – ransomware – 0b0201c53825562dfdd5ebd7dbccbf38

Malware Analysis – ransomware – 5e0d593d3632ac41daa02fade2043259

Malware Analysis – ransomware – 20fc465d7c6489a0206c387c6554e447

Malware Analysis – ransomware – 1e207867d0bd42e2210870bf69dfa3b4

Malware Analysis – djvu – 73b061304660166c3ccad2752888bc22

Malware Analysis – ransomware – 2db76b0260e905e94fa261a90906f8a4

Malware Analysis – smokeloader – 679444aa9f0d1e293e39eaed57113bb8

Malware Analysis – djvu – 1fa8b13e3d5784a77dcbaaebe69eced2

Malware Analysis – smokeloader – cdbdd4c235149f48e78ec4f31068f705

Malware Analysis – djvu – ccf06f177138fd71b7e3be0733de43b9

Black Basta Ransomware Victim: Shiloh Industries

Malware Analysis – djvu – 9828af2b86b6ed65bb519df37f8c3474

Malware Analysis – djvu – 1f1dccb99906382819aad1fb0345693c

Malware Analysis – smokeloader – 9828af2b86b6ed65bb519df37f8c3474

Malware Analysis – djvu – cdbdd4c235149f48e78ec4f31068f705

Dark web carding site BidenCash gives 1.2M payment cards for free

Daily Vulnerability Trends: Mon Oct 10 2022

Malware Analysis – djvu – b470b44156d20ac1c14cbd248fce929b

Malware Analysis – ransomware – a304c5eeb1b2fd42d1e5fdd3925cd23e

Malware Analysis – ransomware – fe1995022dda4cb8802a7c3d9732598f

Malware Analysis – djvu – 7f60063226def0bebfc01dc88fc3fa77

Harvard Business Publishing licensee hit by ransomware

CISA: CISA Releases Four Industrial Control Systems Advisories

CISA: Apple Releases Security Updates for Multiple Products

CISA: CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA: Fortinet Updates Guidance and Indicators of Compromise following FortiManager Vulnerability Exploitation

CISA: Foreign Threat Actor Conducting Large-Scale Spearphishing Campaign with RDP Attachments

You may have missed