Month: October 2022

Malware Analysis – – bbb3d02b1741d7ce95e2e3780ce5cb7b

October 24, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: bbb3d02b1741d7ce95e2e3780ce5cb7bSHA1: 932292ecd108e71e5eacfbcb9985a5c67259125cANALYSIS DATE: 2022-10-24T10:07:19ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – – 49aa80367a6609b3e74f25c8e161459b

October 24, 2022

Score: 7 MALWARE FAMILY: TAGS:MD5: 49aa80367a6609b3e74f25c8e161459bSHA1: fcb94c4cea61fa21a8fa4960514cc33ae94d02a2ANALYSIS DATE: 2022-10-24T10:00:54ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – – 4665ba56c2b7a6b9fbebf62c3785979d

October 24, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: 4665ba56c2b7a6b9fbebf62c3785979dSHA1: 799cd700dded3a1059b04974cdd3c8790695c5a8ANALYSIS DATE: 2022-10-24T10:13:45ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – locky – da863294f14ea0c1ab3e68ba6b45f0cf

October 24, 2022

Score: 10 MALWARE FAMILY: lockyTAGS:family:locky, ransomwareMD5: da863294f14ea0c1ab3e68ba6b45f0cfSHA1: c9143d4a1ef5d493660832efef9ff5df52e39a55ANALYSIS DATE: 2022-10-24T10:28:51ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – djvu – 1823a652c5e16ec21c93b389ace3aa4a

October 24, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, botnet:google2, botnet:nam7, botnet:newe, botnet:slovarik15btc, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5:...

Malware Analysis – wannacry – f7c34b753c7230c8a312de2a6a1a2ab0

October 24, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: f7c34b753c7230c8a312de2a6a1a2ab0SHA1: 635ddf63f95e34967d2d8653d2d08f4f76177876ANALYSIS DATE: 2022-10-24T10:40:20ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – – b0274b076c0242d074f13100d87b87a7

October 24, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: b0274b076c0242d074f13100d87b87a7SHA1: ff4089753080f562aa75b737c3017682e3e48e05ANALYSIS DATE: 2022-10-24T10:40:24ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Oracle E-Business Suite Web Applications Desktop Integrator Application Service unspecified | CVE-2022-21587

October 24, 2022

NAME Oracle E-Business Suite Web Applications Desktop Integrator Application Service unspecified Platforms Affected:Oracle Web Applications Desktop Integrator 12.2.3 Oracle Web...

Oracle E-Business Suite Web Applications Desktop Integrator Application Service unspecified | CVE-2022-39428

October 24, 2022

NAME Oracle E-Business Suite Web Applications Desktop Integrator Application Service unspecified Platforms Affected:Oracle Web Applications Desktop Integrator 12.2.3 Oracle Web...

F5 BIG-IP (Advanced WAF, ASM) code execution | CVE-2022-41617

October 24, 2022

NAME F5 BIG-IP (Advanced WAF, ASM) code execution Platforms Affected:F5 BIG-IP (ASM) 14.1.0 F5 BIG-IP (ASM) 13.1.0 F5 BIG-IP (ASM)...

Security experts targeted with malicious CVE PoC exploits on GitHub

October 24, 2022

Researchers discovered thousands of GitHub repositories that offer fake proof-of-concept (PoC) exploits for various flaws used to distribute malware. A team...

Daily Vulnerability Trends: Mon Oct 24 2022

October 24, 2022

Daily Vulnerability Trends (sourced from VulnMon) CVE NAMECVE DescriptionCVE-2021-3493The overlayfs implementation in the linux kernel did not properly validate with...

Malware Analysis – djvu – 1767f81e6b15d8125fedcf58948e3a0a

October 24, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 1767f81e6b15d8125fedcf58948e3a0aSHA1: de2a93d8806ba8a0f33f24bbf37260dbf54c64b2ANALYSIS DATE: 2022-10-24T02:03:24ZTTPS: T1012, T1082, T1222, T1053,...

Malware Analysis – discovery – 94ea4ebdb5ff16a4468fe5fdea591243

October 24, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, evasion, ransomware, spyware, stealerMD5: 94ea4ebdb5ff16a4468fe5fdea591243SHA1: 737419b9a66f61bb50b692aa7cd1eb2d740b9e4cANALYSIS DATE: 2022-10-24T02:40:22ZTTPS: T1490, T1059, T1107, T1005, T1081, T1012, T1120,...

Malware Analysis – wannacry – ad64bbe31bf2f9c77721bd430ec06fc0

October 24, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: ad64bbe31bf2f9c77721bd430ec06fc0SHA1: ff83b0292bdc8922ed327a3d52755e0ad52cd51eANALYSIS DATE: 2022-10-24T03:20:20ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – ransomware – cb211f677a774d5475c55fa639041eb1

October 24, 2022

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: cb211f677a774d5475c55fa639041eb1SHA1: 9caf0aeb45eb49e895e3bb283655a34d732ba9efANALYSIS DATE: 2022-10-24T02:40:15ZTTPS: T1082, T1012, T1120 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – djvu – 5e9f2be25372093f388c2270f6c16d7c

October 24, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 5e9f2be25372093f388c2270f6c16d7cSHA1: 89aa7779184920d4a942a55ef432e88f99b3b94eANALYSIS DATE: 2022-10-24T02:16:17ZTTPS: T1012, T1082, T1222, T1060,...

Malware Analysis – ransomware – 9d8ef3799fb470997ad800632ec0b2aa

October 24, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 9d8ef3799fb470997ad800632ec0b2aaSHA1: 403fe426f70a0e998b1d55eaff6bc3f3c736cfb7ANALYSIS DATE: 2022-10-24T03:40:17ZTTPS: T1107, T1490, T1091, T1005, T1081, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – djvu – 22a9b2595531bd1d5a53cf2d72a30f8a

October 24, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 22a9b2595531bd1d5a53cf2d72a30f8aSHA1: 6738e9bac3b8512c0b0def79ff64a4349cb9edc2ANALYSIS DATE: 2022-10-24T03:27:08ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – djvu – 436611c2bcb98900e1511bf06fa8ed69

October 24, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 436611c2bcb98900e1511bf06fa8ed69SHA1: 82d595b9d260714b4790cbe0a37a7b9972243a04ANALYSIS DATE: 2022-10-24T03:33:03ZTTPS: T1053, T1012, T1060, T1112,...

Malware Analysis – dcrat – bf47a099e77b3de9ac0bb423f28c0fba

October 24, 2022

Score: 10 MALWARE FAMILY: dcratTAGS:family:dcrat, family:djvu, family:redline, family:smokeloader, family:vidar, botnet:517, botnet:google2, botnet:mario23_10, botnet:nam7, botnet:slovarikinstalls, backdoor, brand:microsoft, collection, discovery, infostealer, persistence,...

Malware Analysis – djvu – e380d1787e67a37c1a95ee975f924e81

October 24, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: e380d1787e67a37c1a95ee975f924e81SHA1: 69f7646edb8ffd6fc66374817a3ce0ef96d20e12ANALYSIS DATE: 2022-10-24T04:23:54ZTTPS: T1012, T1060, T1112, T1082,...

Malware Analysis – djvu – dd303c8898ac01ca98d2dec144d6557c

October 24, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: dd303c8898ac01ca98d2dec144d6557cSHA1: d022402715e8edac5f6fe905f14e9d549cf6f40fANALYSIS DATE: 2022-10-24T03:43:59ZTTPS: T1060, T1112, T1082, T1012,...

Malware Analysis – evasion – 4c3f4cc7a76a621c7fdc52039d2274c2

October 24, 2022

Score: 8 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 4c3f4cc7a76a621c7fdc52039d2274c2SHA1: a023bb4d47c73d1112bc81559c7b4987d9fff755ANALYSIS DATE: 2022-10-24T04:30:05ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Month: October 2022

Malware Analysis – – bbb3d02b1741d7ce95e2e3780ce5cb7b

Malware Analysis – – 49aa80367a6609b3e74f25c8e161459b

Malware Analysis – – 4665ba56c2b7a6b9fbebf62c3785979d

Malware Analysis – locky – da863294f14ea0c1ab3e68ba6b45f0cf

Malware Analysis – djvu – 1823a652c5e16ec21c93b389ace3aa4a

Malware Analysis – wannacry – f7c34b753c7230c8a312de2a6a1a2ab0

Malware Analysis – – b0274b076c0242d074f13100d87b87a7

Oracle E-Business Suite Web Applications Desktop Integrator Application Service unspecified | CVE-2022-21587

Oracle E-Business Suite Web Applications Desktop Integrator Application Service unspecified | CVE-2022-39428

F5 BIG-IP (Advanced WAF, ASM) code execution | CVE-2022-41617

Security experts targeted with malicious CVE PoC exploits on GitHub

Daily Vulnerability Trends: Mon Oct 24 2022

Malware Analysis – djvu – 1767f81e6b15d8125fedcf58948e3a0a

Malware Analysis – discovery – 94ea4ebdb5ff16a4468fe5fdea591243

Malware Analysis – wannacry – ad64bbe31bf2f9c77721bd430ec06fc0

Malware Analysis – ransomware – cb211f677a774d5475c55fa639041eb1

Malware Analysis – djvu – 5e9f2be25372093f388c2270f6c16d7c

Malware Analysis – ransomware – 9d8ef3799fb470997ad800632ec0b2aa

Malware Analysis – djvu – 22a9b2595531bd1d5a53cf2d72a30f8a

Malware Analysis – djvu – 436611c2bcb98900e1511bf06fa8ed69

Malware Analysis – dcrat – bf47a099e77b3de9ac0bb423f28c0fba

Malware Analysis – djvu – e380d1787e67a37c1a95ee975f924e81

Malware Analysis – djvu – dd303c8898ac01ca98d2dec144d6557c

Malware Analysis – evasion – 4c3f4cc7a76a621c7fdc52039d2274c2

[INCRANSOM] – Ransomware Victim: Alna-Bioscience

Cobalt Strike Beacon Detected – 52[.]231[.]10[.]139:8080

Cobalt Strike Beacon Detected – 54[.]224[.]145[.]120:443

Cobalt Strike Beacon Detected – 118[.]193[.]37[.]157:8889

Cobalt Strike Beacon Detected – 103[.]225[.]196[.]197:80

You may have missed