Month: October 2022

Malware Analysis – persistence – e1e7c39dfb76e42fea4d5ee81e4f21cd

October 20, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: e1e7c39dfb76e42fea4d5ee81e4f21cdSHA1: 353915351f9bf53b55c6ef0324c0d35379bb6c94ANALYSIS DATE: 2022-10-20T15:20:19ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091, T1060, T1112...

Malware Analysis – – 499eec4dab168f19d1ee282f66f724b0

October 20, 2022

Score: 8 MALWARE FAMILY: TAGS:MD5: 499eec4dab168f19d1ee282f66f724b0SHA1: ec42e15f7b138a5572a3b5cb1a022cd82f1d7279ANALYSIS DATE: 2022-10-20T15:29:32ZTTPS: T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – persistence – 1194a0f50753c9e2de2ca167e9126e4d

October 20, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 1194a0f50753c9e2de2ca167e9126e4dSHA1: 348b33d313f1adad9c4429ff59cae236f83b24dcANALYSIS DATE: 2022-10-20T15:20:33ZTTPS: T1082, T1107, T1490, T1091, T1060, T1112, T1005, T1081...

Malware Analysis – djvu – 548b95bb2513576d2887d1871bcc3990

October 20, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 548b95bb2513576d2887d1871bcc3990SHA1: 6699c6a95ea88d9c0e84ecd55fc47006e9870104ANALYSIS DATE: 2022-10-20T15:26:14ZTTPS: T1060, T1112, T1053, T1005,...

HackerOne Bug Bounty Disclosure: [csrf]-no-csrf-protection-against-sending-invitation-to-join-the-team-byimran_nisar

October 20, 2022

Programme HackerOne Lark Technologies Lark Technologies Submitted by imran_nisar imran_nisar Report No Csrf protection against sending invitation to join the...

HackerOne Bug Bounty Disclosure: removed-user-can-still-view-comments-on-the-file/documents-byimran_nisar

October 20, 2022

Programme HackerOne Lark Technologies Lark Technologies Submitted by imran_nisar imran_nisar Report Removed user can still view comments on the file/documents....

HackerOne Bug Bounty Disclosure: ability-to-view-non-permitted-admin-logbyimran_nisar

October 20, 2022

Programme HackerOne Lark Technologies Lark Technologies Submitted by imran_nisar imran_nisar Report Ability to View Non-Permitted Admin Log Full Report A...

Malware Analysis – smokeloader – f2f1b97c733698ad3c6ddb4a12bc703e

October 20, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: f2f1b97c733698ad3c6ddb4a12bc703eSHA1: 51e3ca64e3b6b3f74a714df9d916303e5ffe22a3ANALYSIS DATE: 2022-10-20T15:41:30ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ryuk – a650d5676dc2c91a3af2216044ddaf8c

October 20, 2022

Score: 10 MALWARE FAMILY: ryukTAGS:family:ryuk, discovery, evasion, ransomwareMD5: a650d5676dc2c91a3af2216044ddaf8cSHA1: 851eea629fda6f930ebfd7ac45de5e8bc3f506b5ANALYSIS DATE: 2022-10-20T15:40:19ZTTPS: T1158, T1222, T1082, T1012, T1120, T1053 ScoreMeaningExample10Known badA...

Malware Analysis – djvu – 15ed67e24f385d965b44b8b439cf4fe0

October 20, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 15ed67e24f385d965b44b8b439cf4fe0SHA1: 22535d74b6488d8ea9b84f885afe33cb671890c2ANALYSIS DATE: 2022-10-20T15:49:37ZTTPS: T1222, T1053, T1005, T1081,...

Malware Analysis – ransomware – 611aea0fc953a1a881cc939a9e3c3af5

October 20, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 611aea0fc953a1a881cc939a9e3c3af5SHA1: f70aee02ae0d06c6e6fd8a0e98931d1c660733cbANALYSIS DATE: 2022-10-20T15:40:15ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – djvu – cb404fc3a8a024240f2804dd5128ff6c

October 20, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5: cb404fc3a8a024240f2804dd5128ff6cSHA1: b882d72fab44002a7a7b1c05abdef03badb3f9b8ANALYSIS...

Malware Analysis – djvu – 0284ef0c5e906d8c6f03393d9cd82e63

October 20, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 0284ef0c5e906d8c6f03393d9cd82e63SHA1: df461c8ad24f1b90f6c711a9a3a58c4228b4a9d8ANALYSIS DATE: 2022-10-20T16:01:04ZTTPS: T1130, T1112, T1060, T1053,...

Malware Analysis – ransomware – 332c1a9146276bc9abc1161e13efabde

October 20, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 332c1a9146276bc9abc1161e13efabdeSHA1: 6c366cd3b4a54f8e9f7ed6016aac9e7509b06102ANALYSIS DATE: 2022-10-20T16:14:30ZTTPS: T1091, T1005, T1081 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – persistence – b16fb95d7c624fb064dcfe39c746a29d

October 20, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: b16fb95d7c624fb064dcfe39c746a29dSHA1: 75f23d8fd87ca250ecc9dd66ca5c1d04a7e9540eANALYSIS DATE: 2022-10-20T16:00:28ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091, T1060, T1112...

CISA

CISA: Mozilla Releases Security Updates for Firefox

October 20, 2022

Mozilla Releases Security Updates for Firefox Mozilla has released security updates to address vulnerabilities in Firefox ESR and Firefox. An attacker could...

CISA

CISA: CISA Requests for Comment on Microsoft 365 Security Configuration Baselines

October 20, 2022

CISA Requests for Comment on Microsoft 365 Security Configuration Baselines CISA has issued requests for comment (RFCs) on eight Microsoft...

Internet disruptions observed as Russia targets critical infrastructure in Ukraine

October 20, 2022

While the Russian army is conducting coordinated missile and drone strikes in Ukraine experts observed Internet disruptions in the country....

PartyLoud – A Simple Tool To Generate Fake Web Browsing And Mitigate Tracking

October 20, 2022

PartyLoud is a highly configurable and straightforward free tool that helps you prevent tracking directly from your linux terminal, no...

Malware Analysis – snatch – 2fa3c5b2e6a0c465045fe8dd7f55dd9a

October 20, 2022

Score: 10 MALWARE FAMILY: snatchTAGS:family:snatch, ransomware, spyware, stealer, upxMD5: 2fa3c5b2e6a0c465045fe8dd7f55dd9aSHA1: 1e6ea91491804da44db10be25bd1ea36baa0b362ANALYSIS DATE: 2022-10-20T08:15:19ZTTPS: T1107, T1490, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 161d5d74281ab0315310fc0ba345d7f3

October 20, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 161d5d74281ab0315310fc0ba345d7f3SHA1: 0031fe55a758188fb7f1743c0a3b4b6426d9464bANALYSIS DATE: 2022-10-20T08:00:22ZTTPS: T1107, T1490, T1091, T1005, T1081, T1082 ScoreMeaningExample10Known badA malware...

Month: October 2022

Malware Analysis – persistence – e1e7c39dfb76e42fea4d5ee81e4f21cd

Malware Analysis – – 499eec4dab168f19d1ee282f66f724b0

Malware Analysis – persistence – 1194a0f50753c9e2de2ca167e9126e4d

Malware Analysis – djvu – 548b95bb2513576d2887d1871bcc3990

HackerOne Bug Bounty Disclosure: [csrf]-no-csrf-protection-against-sending-invitation-to-join-the-team-byimran_nisar

HackerOne Bug Bounty Disclosure: removed-user-can-still-view-comments-on-the-file/documents-byimran_nisar

HackerOne Bug Bounty Disclosure: ability-to-view-non-permitted-admin-logbyimran_nisar

Malware Analysis – smokeloader – f2f1b97c733698ad3c6ddb4a12bc703e

Malware Analysis – ryuk – a650d5676dc2c91a3af2216044ddaf8c

Malware Analysis – djvu – 15ed67e24f385d965b44b8b439cf4fe0

Malware Analysis – ransomware – 611aea0fc953a1a881cc939a9e3c3af5

Malware Analysis – djvu – cb404fc3a8a024240f2804dd5128ff6c

Malware Analysis – djvu – 0284ef0c5e906d8c6f03393d9cd82e63

Malware Analysis – ransomware – 332c1a9146276bc9abc1161e13efabde

Malware Analysis – persistence – b16fb95d7c624fb064dcfe39c746a29d

CISA: Mozilla Releases Security Updates for Firefox

CISA: CISA Requests for Comment on Microsoft 365 Security Configuration Baselines

Internet disruptions observed as Russia targets critical infrastructure in Ukraine

PartyLoud – A Simple Tool To Generate Fake Web Browsing And Mitigate Tracking

Malware Analysis – snatch – 2fa3c5b2e6a0c465045fe8dd7f55dd9a

Malware Analysis – ransomware – 161d5d74281ab0315310fc0ba345d7f3

Black Basta Ransomware Victim: A G Equipment Company

Black Basta Ransomware Victim: METASYS

Black Basta Ransomware Victim: ESSICKAIR

CVE Alert: CVE-2024-9511

CVE Alert: CVE-2024-11446

CVE Alert: CVE-2024-9635

CVE Alert: CVE-2024-11330

CVE Alert: CVE-2024-9659

You may have missed