Month: October 2022

Malware Analysis – evasion – 21f326eef6fda2c5d544c2b5e6d21f34

October 21, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 21f326eef6fda2c5d544c2b5e6d21f34SHA1: c6d5a6a665ebaa80d1174ca3850f7af509bd027bANALYSIS DATE: 2022-10-21T10:51:03ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – evasion – f05d8588cf2e8be9fa6ccac39a0f7311

October 21, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: f05d8588cf2e8be9fa6ccac39a0f7311SHA1: eddfb1947ce609cf33c1409f5977ea78ecaf0f32ANALYSIS DATE: 2022-10-21T10:51:04ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – – 80483a90cf3e46ca6eb0ffe03a10c759

October 21, 2022

Score: 7 MALWARE FAMILY: TAGS:MD5: 80483a90cf3e46ca6eb0ffe03a10c759SHA1: 5428c02bda841adec9c5e42b50b9ee52f7fc3f85ANALYSIS DATE: 2022-10-21T10:51:03ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – 9d3ca081e7fe27e44707d8634c22fc95

October 21, 2022

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 9d3ca081e7fe27e44707d8634c22fc95SHA1: dc0220f9a43989a4628f4eabd5e963fd80d8f698ANALYSIS DATE: 2022-10-21T10:51:03ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – – ac32ffaa379aed78dcc11ea74fbdfcfe

October 21, 2022

Score: 7 MALWARE FAMILY: TAGS:MD5: ac32ffaa379aed78dcc11ea74fbdfcfeSHA1: 7555f5c5e70d3b33a35e9db9a6cb5554b38ad9f3ANALYSIS DATE: 2022-10-21T10:51:05ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – evasion – 155316526ff476698494e90efc1127bc

October 21, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasionMD5: 155316526ff476698494e90efc1127bcSHA1: be7bba8dc417a5cfa665d647ce7bafabb67a0d00ANALYSIS DATE: 2022-10-21T10:51:04ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – – 12bea094932da9fa51853740fcaa68a1

October 21, 2022

Score: 7 MALWARE FAMILY: TAGS:MD5: 12bea094932da9fa51853740fcaa68a1SHA1: 3a799c0fc8fe06659b8d22d2332f24f18effe17dANALYSIS DATE: 2022-10-21T10:52:05ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – evasion – 50a9624b74624f99284b417b732b82af

October 21, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasionMD5: 50a9624b74624f99284b417b732b82afSHA1: 628d0bf29626fca8b66053597e310b2f842172d3ANALYSIS DATE: 2022-10-21T10:52:05ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – – 25a65cbfc9d34f5367acb5ea2a32e3ef

October 21, 2022

Score: 7 MALWARE FAMILY: TAGS:MD5: 25a65cbfc9d34f5367acb5ea2a32e3efSHA1: 4bbea845641b884f5e07005881caa3a157f3ce55ANALYSIS DATE: 2022-10-21T10:52:05ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – evasion – cc88f21406eaeed70a890f53e57c98b6

October 21, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: cc88f21406eaeed70a890f53e57c98b6SHA1: 1d497ae9e273441f1e800d3efafbf50119dd3242ANALYSIS DATE: 2022-10-21T10:52:05ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – evasion – fbd0afe5bd3d0d61feb21680b304d7ae

October 21, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: fbd0afe5bd3d0d61feb21680b304d7aeSHA1: 2c61d60f8b1b52688b5642f646c89dad124f466eANALYSIS DATE: 2022-10-21T10:53:04ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – – 86da3a7378e17b51ba83ba3333e86a32

October 21, 2022

Score: 7 MALWARE FAMILY: TAGS:MD5: 86da3a7378e17b51ba83ba3333e86a32SHA1: e09c6fdc034da5c5cd1656a7b3b49116db575ac1ANALYSIS DATE: 2022-10-21T10:52:05ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – – d199c202beb4380e2f675e93c36cf0f4

October 21, 2022

Score: 7 MALWARE FAMILY: TAGS:MD5: d199c202beb4380e2f675e93c36cf0f4SHA1: 94037ffde778e4f0c49bc357d8e84a991f3baf6fANALYSIS DATE: 2022-10-21T10:53:04ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – smokeloader – 800687c66b176288d45e1a1b2fd59009

October 21, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 800687c66b176288d45e1a1b2fd59009SHA1: 386b050115a3624751c825252931fe333d8cdcd4ANALYSIS DATE: 2022-10-21T10:56:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – – 43bd113a0952172bcba57055f5a707bb

October 21, 2022

Score: 7 MALWARE FAMILY: TAGS:MD5: 43bd113a0952172bcba57055f5a707bbSHA1: accdbdc724fbe4a45c4de5f9f0bdfc369e8fb35dANALYSIS DATE: 2022-10-21T10:53:04ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – c4951ce5e946596e0356979341e6f240

October 21, 2022

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: c4951ce5e946596e0356979341e6f240SHA1: 530e602b959009f80b5161aeb0eaec7c75dfd826ANALYSIS DATE: 2022-10-21T10:54:03ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

F5 BIG-IP (Advanced WAF, ASM) code execution | CVE-2022-41617

October 21, 2022

NAME F5 BIG-IP (Advanced WAF, ASM) code execution Platforms Affected:F5 BIG-IP (ASM) 14.1.0 F5 BIG-IP (ASM) 13.1.0 F5 BIG-IP (ASM)...

HelpSystems Cobalt Strike code execution | CVE-2022-42948

October 21, 2022

NAME HelpSystems Cobalt Strike code execution Platforms Affected:HelpSystems Cobalt Strike 4.7.1Risk Level:9.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION HelpSystems Cobalt Strike could allow a...

News URSNIF variant doesn’t support banking features

October 21, 2022

A new variant of the popular Ursnif malware is used as a backdoor to deliver next-stage payloads and steal sensitive...

Daily Vulnerability Trends: Fri Oct 21 2022

October 21, 2022

Daily Vulnerability Trends (sourced from VulnMon) CVE NAMECVE DescriptionCVE-2022-41852Those using JXPath to interpret untrusted XPath expressions may be vulnerable to...

LockBit 3.0 Ransomware Victim: eeckman[.]eu

October 21, 2022

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

LockBit 3.0 Ransomware Victim: eureka-puzzle[.]eu

October 21, 2022

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Healthcare system Advocate Aurora Health data breach potentially impacted 3M patients

October 21, 2022

Healthcare system Advocate Aurora Health (AAH) disclosed a data breach that exposed the personal data of 3,000,000 patients. The US-based...

Malware Analysis – djvu – cf711afc5eca3498429bb1422b41d7a5

October 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: cf711afc5eca3498429bb1422b41d7a5SHA1: 364304eb925d2702c123736c16ab07e9d10dcf6dANALYSIS DATE: 2022-10-21T01:58:03ZTTPS: T1012, T1082, T1005, T1081,...

Month: October 2022

Malware Analysis – evasion – 21f326eef6fda2c5d544c2b5e6d21f34

Malware Analysis – evasion – f05d8588cf2e8be9fa6ccac39a0f7311

Malware Analysis – – 80483a90cf3e46ca6eb0ffe03a10c759

Malware Analysis – ransomware – 9d3ca081e7fe27e44707d8634c22fc95

Malware Analysis – – ac32ffaa379aed78dcc11ea74fbdfcfe

Malware Analysis – evasion – 155316526ff476698494e90efc1127bc

Malware Analysis – – 12bea094932da9fa51853740fcaa68a1

Malware Analysis – evasion – 50a9624b74624f99284b417b732b82af

Malware Analysis – – 25a65cbfc9d34f5367acb5ea2a32e3ef

Malware Analysis – evasion – cc88f21406eaeed70a890f53e57c98b6

Malware Analysis – evasion – fbd0afe5bd3d0d61feb21680b304d7ae

Malware Analysis – – 86da3a7378e17b51ba83ba3333e86a32

Malware Analysis – – d199c202beb4380e2f675e93c36cf0f4

Malware Analysis – smokeloader – 800687c66b176288d45e1a1b2fd59009

Malware Analysis – – 43bd113a0952172bcba57055f5a707bb

Malware Analysis – ransomware – c4951ce5e946596e0356979341e6f240

F5 BIG-IP (Advanced WAF, ASM) code execution | CVE-2022-41617

HelpSystems Cobalt Strike code execution | CVE-2022-42948

News URSNIF variant doesn’t support banking features

Daily Vulnerability Trends: Fri Oct 21 2022

LockBit 3.0 Ransomware Victim: eeckman[.]eu

LockBit 3.0 Ransomware Victim: eureka-puzzle[.]eu

Healthcare system Advocate Aurora Health data breach potentially impacted 3M patients

Malware Analysis – djvu – cf711afc5eca3498429bb1422b41d7a5

[KILLSEC] – Ransomware Victim: Nationwide Legal

[KILLSEC] – Ransomware Victim: Eassy Life

[INCRANSOM] – Ransomware Victim: Service Avicole JGL

[KILLSEC] – Ransomware Victim: Vogue Homes

[KILLSEC] – Ransomware Victim: Efi Sales

You may have missed