Month: October 2022

Malware Analysis – persistence – f21bcc4d9dd94342c1602e96534002b6

October 19, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: f21bcc4d9dd94342c1602e96534002b6SHA1: 1a7e9f7896a02df7e9729e481890a4ee82daac1eANALYSIS DATE: 2022-10-19T10:40:46ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091, T1060, T1112...

Malware Analysis – ransomware – 91504a2349db14afb99e62b5d6f693d4

October 19, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 91504a2349db14afb99e62b5d6f693d4SHA1: 90a1df9e4812850e95545d07509472b0614c8f71ANALYSIS DATE: 2022-10-19T10:40:34ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – af3175967e229bbc607bc32699cef621

October 19, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: af3175967e229bbc607bc32699cef621SHA1: 683449dd00992bff104e987a130eca526cd39afbANALYSIS DATE: 2022-10-19T10:40:31ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – persistence – 60f87cba4fc4edc6a22d5dd65827e9b4

October 19, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 60f87cba4fc4edc6a22d5dd65827e9b4SHA1: 1daa253da17f83939ccf0a6ddf6578570daaee54ANALYSIS DATE: 2022-10-19T10:40:40ZTTPS: T1107, T1490, T1091, T1060, T1112, T1005, T1081, T1082...

Cobalt Stike Beacon Detected – 49[.]232[.]144[.]57:80

October 19, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 5[.]8[.]18[.]242:443

October 19, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 1[.]15[.]67[.]80:443

October 19, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 168[.]100[.]11[.]84:80

October 19, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

IBM InfoSphere Information Server external entity injection | CVE-2022-40747

October 19, 2022

NAME IBM InfoSphere Information Server external entity injection Platforms Affected:IBM InfoSphere Information Server 11.7Risk Level:8.2Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION IBM InfoSphere Information...

Daily Vulnerability Trends: Wed Oct 19 2022

October 19, 2022

Daily Vulnerability Trends (sourced from VulnMon) CVE NAMECVE DescriptionCVE-2022-42948 No description provided CVE-2022-40684An authentication bypass using an alternate path or...

Microsoft Office 365 Message Encryption (OME) doesn’t ensure confidentiality

October 19, 2022

A bug in the message encryption mechanism used by Microsoft in Office 365 can allow to access the contents of the...

Cuba Ransomware Victim: Dialogsas

October 19, 2022

Cuba Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of...

Cuba Ransomware Victim: Ville-chaville

October 19, 2022

Cuba Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of...

Malware Analysis – djvu – f41b9e7741b3c6ea33a947e85f8ecd89

October 19, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, stealer, trojan, vmprotectMD5: f41b9e7741b3c6ea33a947e85f8ecd89SHA1: 1d17879310cf6ae6d3388f29bfc3ddc062c2d980ANALYSIS DATE: 2022-10-18T20:09:37ZTTPS:...

Malware Analysis – ransomware – 3bd4ed1833f9ebf0c572cb573169536c

October 19, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 3bd4ed1833f9ebf0c572cb573169536cSHA1: a589f3a6991d4b9bddc598616b4f1372a2d318e2ANALYSIS DATE: 2022-10-18T20:00:18ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 5b54373a351644c25d6c05c93a948f72

October 19, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 5b54373a351644c25d6c05c93a948f72SHA1: ea2b5073a7121b7d6257f1290cbc0f2a5d2e9358ANALYSIS DATE: 2022-10-18T21:00:21ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – djvu – eca63d589dbf660d98a78af7fde075d9

October 19, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:privateloader, family:redline, family:smokeloader, botnet:new10181, backdoor, discovery, infostealer, loader, main, ransomware, spyware, stealer, trojanMD5: eca63d589dbf660d98a78af7fde075d9SHA1: fd7fd24163c473f2a99964384229f39b5e5a0aa7ANALYSIS...

Malware Analysis – wannacry – b20913b442628f00400d7f633759c83f

October 19, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: b20913b442628f00400d7f633759c83fSHA1: ea066d9b2c9ad212e2f01d4d59866aa11504b34aANALYSIS DATE: 2022-10-18T20:20:18ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – djvu – e075dda67de3175bdecca9c24ed443c3

October 19, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: e075dda67de3175bdecca9c24ed443c3SHA1: c684831b200b0ee5ad9eaf36f48413d8db634177ANALYSIS DATE: 2022-10-18T21:12:41ZTTPS:...

Malware Analysis – evasion – f939bf75f63371ca206f31ab06145efd

October 19, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojan, upxMD5: f939bf75f63371ca206f31ab06145efdSHA1: 54a876db09f4bb36ace0e77a1633802f33585704ANALYSIS DATE: 2022-10-18T21:20:09ZTTPS: T1158, T1112, T1018, T1060, T1088, T1089, T1490,...

Malware Analysis – djvu – 1b91e4b18fde5cbd09317015b3f35855

October 19, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 1b91e4b18fde5cbd09317015b3f35855SHA1: ff5a4c1c7baf122f02fbd82eda14a3210c07b847ANALYSIS DATE: 2022-10-18T21:21:33ZTTPS: T1060, T1112, T1082, T1222,...

Malware Analysis – ransomware – dff75a4d740e487f955e2dc34e9863c4

October 19, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: dff75a4d740e487f955e2dc34e9863c4SHA1: 09a4325fdc97bbec984459f70fd5ab426e8643e0ANALYSIS DATE: 2022-10-18T21:20:17ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – evasion – dc1e01892f2849e20958022bd7de41ef

October 19, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: dc1e01892f2849e20958022bd7de41efSHA1: 33946f79b093fc797711f398102dd8f3cbe428bdANALYSIS DATE: 2022-10-18T21:20:19ZTTPS: T1060, T1112, T1012, T1120, T1082, T1158, T1490, T1088,...

Black Basta Ransomware Victim: BOOTZ

October 19, 2022

Black Basta Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Month: October 2022

Malware Analysis – persistence – f21bcc4d9dd94342c1602e96534002b6

Malware Analysis – ransomware – 91504a2349db14afb99e62b5d6f693d4

Malware Analysis – ransomware – af3175967e229bbc607bc32699cef621

Malware Analysis – persistence – 60f87cba4fc4edc6a22d5dd65827e9b4

Cobalt Stike Beacon Detected – 49[.]232[.]144[.]57:80

Cobalt Stike Beacon Detected – 5[.]8[.]18[.]242:443

Cobalt Stike Beacon Detected – 1[.]15[.]67[.]80:443

Cobalt Stike Beacon Detected – 168[.]100[.]11[.]84:80

IBM InfoSphere Information Server external entity injection | CVE-2022-40747

Daily Vulnerability Trends: Wed Oct 19 2022

Microsoft Office 365 Message Encryption (OME) doesn’t ensure confidentiality

Cuba Ransomware Victim: Dialogsas

Cuba Ransomware Victim: Ville-chaville

Malware Analysis – djvu – f41b9e7741b3c6ea33a947e85f8ecd89

Malware Analysis – ransomware – 3bd4ed1833f9ebf0c572cb573169536c

Malware Analysis – ransomware – 5b54373a351644c25d6c05c93a948f72

Malware Analysis – djvu – eca63d589dbf660d98a78af7fde075d9

Malware Analysis – wannacry – b20913b442628f00400d7f633759c83f

Malware Analysis – djvu – e075dda67de3175bdecca9c24ed443c3

Malware Analysis – evasion – f939bf75f63371ca206f31ab06145efd

Malware Analysis – djvu – 1b91e4b18fde5cbd09317015b3f35855

Malware Analysis – ransomware – dff75a4d740e487f955e2dc34e9863c4

Malware Analysis – evasion – dc1e01892f2849e20958022bd7de41ef

Black Basta Ransomware Victim: BOOTZ

[EVEREST] – Ransomware Victim: Concord Orthopaedics

[EVEREST] – Ransomware Victim: STIIIZY

[INCRANSOM] – Ransomware Victim: Pastor Real Estate

CVE Alert: CVE-2024-11387

CVE Alert: CVE-2024-10873

You may have missed