Month: October 2022

Malware Analysis – ransomware – da76d2bffe40d98d25247b626c01b121

October 9, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: da76d2bffe40d98d25247b626c01b121SHA1: 0c119faabc854f7b8f27990d5a398efa104d7276ANALYSIS DATE: 2022-10-09T16:18:04ZTTPS: T1107, T1490, T1091, T1005, T1081, T1082 ScoreMeaningExample10Known badA malware...

HackerOne Bug Bounty Disclosure: email-address-exposure-via-gratipay-migration-toolbysuprnova

October 9, 2022

Programme HackerOne Liberapay Liberapay Submitted by suprnova suprnova Report Email Address Exposure via Gratipay Migration Tool Full Report A considerable...

HackerOne Bug Bounty Disclosure: relative-path-traversal-vulnerability-in-fabric-private-chaincodebybhaskar_ram

October 9, 2022

Programme HackerOne Hyperledger Hyperledger Submitted by bhaskar_ram bhaskar_ram Report Relative Path Traversal vulnerability in fabric-private-chaincode Full Report A considerable amount...

Malware Analysis – djvu – b0c844d44e1d1419bb822b73e468b020

October 9, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: b0c844d44e1d1419bb822b73e468b020SHA1: 6b2d09cd5b635052c4e5007337b9fe1fd745f3eaANALYSIS DATE: 2022-10-09T16:43:36ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – wannacry – 959ceca4c10333e52586daf29fe071ed

October 9, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, ransomware, wormMD5: 959ceca4c10333e52586daf29fe071edSHA1: dc318745d78affc46d8865a8c78a5543d9739f7eANALYSIS DATE: 2022-10-09T16:44:36ZTTPS: T1491, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – djvu – 851275055c38f4a855f3ab3c388c7937

October 9, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 851275055c38f4a855f3ab3c388c7937SHA1: 83787fa3a361bdb6ee6eb472b109ae210c0c40f7ANALYSIS DATE: 2022-10-09T16:27:39ZTTPS: T1005, T1081, T1012, T1060,...

Malware Analysis – discovery – 7372c9a138bb854972452263abab1dc5

October 9, 2022

Score: 9 MALWARE FAMILY: discoveryTAGS:discovery, ransomwareMD5: 7372c9a138bb854972452263abab1dc5SHA1: ad247b2428fac6d07bdd9628cddaa18004840e6cANALYSIS DATE: 2022-10-09T16:47:35ZTTPS: T1046, T1082, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – sodinokibi – be9c59183353af01fb3cb23055948e42

October 9, 2022

Score: 10 MALWARE FAMILY: sodinokibiTAGS:family:sodinokibi, botnet:$2b$13$smhroaoopkdhdonl/mu1f.ngqdxcrizvxx5jgju1ep6jzpd9z7w6o, campaign:143, ransomwareMD5: be9c59183353af01fb3cb23055948e42SHA1: c9fe087cd656f1d63c378e55ef9f47bb330a5be1ANALYSIS DATE: 2022-10-09T16:57:55ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – phobos – 57c5c9f7dd743b7f53fef622ddfaa455

October 9, 2022

Score: 10 MALWARE FAMILY: phobosTAGS:family:phobos, evasion, persistence, ransomware, spyware, stealerMD5: 57c5c9f7dd743b7f53fef622ddfaa455SHA1: 13122e4d18672561479f988f850dd191c3431c78ANALYSIS DATE: 2022-10-09T16:51:25ZTTPS: T1490, T1059, T1107, T1005, T1081, T1060,...

Malware Analysis – evasion – 87b7f560df2bebd79b95ffd9f093ec6e

October 9, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 87b7f560df2bebd79b95ffd9f093ec6eSHA1: b7bcca9a12bb1fe6e3a595d9c76555a18c8331bcANALYSIS DATE: 2022-10-09T16:54:46ZTTPS: T1107, T1490, T1082, T1031, T1562, T1489, T1012, T1120 ScoreMeaningExample10Known badA...

Malware Analysis – djvu – 65a246928c141f08acf59ac236e57557

October 9, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 65a246928c141f08acf59ac236e57557SHA1: cd8736526dc89d1490c06314e0ecdfa8d5d92e24ANALYSIS DATE: 2022-10-09T16:50:51ZTTPS:...

Security Affairs newsletter Round 387

October 9, 2022

A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs free for...

CommonSpirit hospital chains hit by ransomware, patients are facing problems

October 9, 2022

CommonSpirit, one of the largest hospital chains in the US, suffered a ransomware cyberattack that impacted its operations. Common Spirit,...

EvilnoVNC – Ready To Go Phishing Platform

October 9, 2022

EvilnoVNC is a Ready to go Phishing Platform. Unlike other phishing techniques, EvilnoVNC allows 2FA bypassing by using a real...

Cobalt Stike Beacon Detected – 84[.]32[.]128[.]13:80

October 9, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 43[.]138[.]59[.]205:80

October 9, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 138[.]68[.]69[.]19:443

October 9, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 101[.]42[.]221[.]54:443

October 9, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 110[.]43[.]34[.]176:443

October 9, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – a31728f1578939de11bcf95509015f35

October 9, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: a31728f1578939de11bcf95509015f35SHA1: 0fce37afab13319f182849da37d97f5e75774794ANALYSIS DATE: 2022-10-09T08:41:02ZTTPS: T1114, T1005,...

Malware Analysis – djvu – fc297ecbdd6f2ebf586541caaa5166ea

October 9, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: fc297ecbdd6f2ebf586541caaa5166eaSHA1: 9ad9318fe86e6102d32f0efd10ab4bb54f9e02a3ANALYSIS DATE: 2022-10-09T08:14:31ZTTPS: T1012, T1120,...

Malware Analysis – djvu – 42ffdba9b92798093c337aae0be68cd1

October 9, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 42ffdba9b92798093c337aae0be68cd1SHA1: a9bce0279a067d5485f391630a49963296d59f97ANALYSIS DATE: 2022-10-09T08:32:34ZTTPS: T1012, T1082, T1053, T1005,...

Cobalt Stike Beacon Detected – 81[.]68[.]193[.]9:8000

October 9, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 185[.]143[.]223[.]90:443

October 9, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Month: October 2022

Malware Analysis – ransomware – da76d2bffe40d98d25247b626c01b121

HackerOne Bug Bounty Disclosure: email-address-exposure-via-gratipay-migration-toolbysuprnova

HackerOne Bug Bounty Disclosure: relative-path-traversal-vulnerability-in-fabric-private-chaincodebybhaskar_ram

Malware Analysis – djvu – b0c844d44e1d1419bb822b73e468b020

Malware Analysis – wannacry – 959ceca4c10333e52586daf29fe071ed

Malware Analysis – djvu – 851275055c38f4a855f3ab3c388c7937

Malware Analysis – discovery – 7372c9a138bb854972452263abab1dc5

Malware Analysis – sodinokibi – be9c59183353af01fb3cb23055948e42

Malware Analysis – phobos – 57c5c9f7dd743b7f53fef622ddfaa455

Malware Analysis – evasion – 87b7f560df2bebd79b95ffd9f093ec6e

Malware Analysis – djvu – 65a246928c141f08acf59ac236e57557

Security Affairs newsletter Round 387

CommonSpirit hospital chains hit by ransomware, patients are facing problems

EvilnoVNC – Ready To Go Phishing Platform

Cobalt Stike Beacon Detected – 84[.]32[.]128[.]13:80

Cobalt Stike Beacon Detected – 43[.]138[.]59[.]205:80

Cobalt Stike Beacon Detected – 138[.]68[.]69[.]19:443

Cobalt Stike Beacon Detected – 101[.]42[.]221[.]54:443

Cobalt Stike Beacon Detected – 110[.]43[.]34[.]176:443

Malware Analysis – djvu – a31728f1578939de11bcf95509015f35

Malware Analysis – djvu – fc297ecbdd6f2ebf586541caaa5166ea

Malware Analysis – djvu – 42ffdba9b92798093c337aae0be68cd1

Cobalt Stike Beacon Detected – 81[.]68[.]193[.]9:8000

Cobalt Stike Beacon Detected – 185[.]143[.]223[.]90:443

Tackle the Fraud Epidemic: ICO Calls for Enhanced Data Sharing

Meta Shutters Two Million Scam Accounts: A Two-Year Crackdown on Digital Fraud

Google Deindexes Propaganda Network: Uncovering Pro-China Influence Operations

New York Wins $11.3 Million Settlement from Insurers Over Data Breaches

AI Security Lab Launched by UK to Counter Russian Cyber Threats

You may have missed