Month: October 2022

Malware Analysis – discovery – 47fa2b1225ab31d71a22e040e61ad6e0

October 31, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploitMD5: 47fa2b1225ab31d71a22e040e61ad6e0SHA1: 33691a246dcf14f8c8ddfaa6eb6ee4aaed813c4cANALYSIS DATE: 2022-10-30T08:41:18ZTTPS: T1012, T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – evasion – a1d6aa4d4c3ec2b228f160b4f0eff260

October 31, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealer, trojanMD5: a1d6aa4d4c3ec2b228f160b4f0eff260SHA1: 60307afb358af8a6764b8067c8cff23a52b295cbANALYSIS DATE: 2022-10-30T22:32:43ZTTPS: T1060, T1112, T1158, T1088, T1089, T1082,...

Malware Analysis – djvu – 8a3e5138988aba37af7bf7b46a1856c7

October 31, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, family:vidar, botnet:1752, botnet:mario23_10, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5: 8a3e5138988aba37af7bf7b46a1856c7SHA1:...

Cobalt Stike Beacon Detected – 38[.]6[.]157[.]112:80

October 31, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 52[.]172[.]224[.]253:80

October 31, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 102[.]129[.]214[.]35:80

October 31, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 45[.]9[.]148[.]135:443

October 31, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – 24b0c85674ba78acb5a1874ecbaeba1b

October 31, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, botnet:mario23_10, botnet:slovarik1btc, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, trojanMD5: 24b0c85674ba78acb5a1874ecbaeba1bSHA1: 1a790098fabbb5bfcac4b121778eebc4edb3b909ANALYSIS DATE:...

Malware Analysis – djvu – 9a95a7b355c69424882b236a582bf2be

October 31, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, botnet:mario23_10, botnet:slovarik1btc, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, trojanMD5: 9a95a7b355c69424882b236a582bf2beSHA1: b86e4102d769658824062250574cafbe9dbda28fANALYSIS DATE:...

Malware Analysis – evasion – a13660524fc3d9a379a2b1945ba0e3d0

October 31, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealer, trojanMD5: a13660524fc3d9a379a2b1945ba0e3d0SHA1: a0b161fbbe42a776807a58aff68afcda639fd79aANALYSIS DATE: 2022-10-30T22:32:45ZTTPS: T1060, T1112, T1088, T1089, T1005, T1081,...

Malware Analysis – evasion – a22a6791465a9a578b5476af1d3af3c0

October 31, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealer, trojanMD5: a22a6791465a9a578b5476af1d3af3c0SHA1: 2fee1734d038c460fa489907f415f5440cbf362bANALYSIS DATE: 2022-10-30T22:32:49ZTTPS: T1060, T1112, T1158, T1088, T1089, T1082,...

Former British Prime Minister Liz Truss ‘s phone was allegedly hacked by Russian spies

October 30, 2022

According to the Daily Mail, Former British Prime Minister Liz Truss ‘s personal phone was hacked by Russian spies. The...

German BKA arrested the alleged operator of Deutschland im Deep Web darknet market

October 30, 2022

German police arrested a student that is suspected of being the administrator of ‘Deutschland im Deep Web’ (DiDW) darknet marketplace....

BlackCat/ALPHV Ransomware Victim: Kolas Law Firm

October 30, 2022

BlackCat / ALPHV Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the...

BlackCat/ALPHV Ransomware Victim: Network Communications Inc

October 30, 2022

BlackCat / ALPHV Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the...

Malware Analysis – djvu – 4154fc7a72570db72966dccccb93f5ca

October 30, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, family:vidar, botnet:1752, botnet:517, botnet:google2, botnet:mario23_10, botnet:slovarik15btc, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware,...

Malware Analysis – evasion – 931bd3160c08b92c4ff90b66b8efcec5

October 30, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 931bd3160c08b92c4ff90b66b8efcec5SHA1: c816e7d1a082f6b4ae8798958e3bf0daeb5c407bANALYSIS DATE: 2022-10-30T05:39:02ZTTPS: T1491, T1112, T1490, T1082, T1012, T1120, T1088, T1089,...

Malware Analysis – persistence – a2bf3ceb879904e6fe6fdaa80a6db39b

October 30, 2022

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: a2bf3ceb879904e6fe6fdaa80a6db39bSHA1: dba07637840b84133a3cf8e9012d6a9b5c50d7f0ANALYSIS DATE: 2022-10-30T04:47:36ZTTPS: T1112, T1060, T1107, T1490, T1082 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – ransomware – 9ca46c92ae6ab9a127917be16cbbf337

October 30, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 9ca46c92ae6ab9a127917be16cbbf337SHA1: b80a2ed9fe34575f709dff7badc5ea1d31eef986ANALYSIS DATE: 2022-10-30T15:40:39ZTTPS: T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – hive – 177417be748814f6168171a42545f9dd

October 30, 2022

Score: 10 MALWARE FAMILY: hiveTAGS:family:hive, evasion, ransomware, spyware, stealer, trojanMD5: 177417be748814f6168171a42545f9ddSHA1: 9c8b988e66e0fe6f9dab69b1055e4ee200531094ANALYSIS DATE: 2022-10-30T15:56:09ZTTPS: T1490, T1070, T1005, T1081, T1107, T1018,...

Malware Analysis – ransomware – 30c121c3995d7d7c5597b0b4d3047aa2

October 30, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 30c121c3995d7d7c5597b0b4d3047aa2SHA1: 4c80abe95de3788a5ff6b2e16175a68b76413643ANALYSIS DATE: 2022-10-30T15:40:33ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – d9956991845e1e275e0fc823133eebf2

October 30, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: d9956991845e1e275e0fc823133eebf2SHA1: d5c9a236ea6a8af8af49f1b95d9065d5d31be737ANALYSIS DATE: 2022-10-30T15:40:47ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – smokeloader – c7b987a36262b72c27d1e3282186f235

October 30, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: c7b987a36262b72c27d1e3282186f235SHA1: f6722992a55c8d7ab60986725b0d07204b14c4a3ANALYSIS DATE: 2022-10-30T17:36:38ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ransomware – 1bd2517f25e7ba3a3b9568c2768b66d9

October 30, 2022

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 1bd2517f25e7ba3a3b9568c2768b66d9SHA1: a7cd993dd6b820b4c8f4fd9973a29e1f779c5ac1ANALYSIS DATE: 2022-10-30T16:16:56ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Month: October 2022

Malware Analysis – discovery – 47fa2b1225ab31d71a22e040e61ad6e0

Malware Analysis – evasion – a1d6aa4d4c3ec2b228f160b4f0eff260

Malware Analysis – djvu – 8a3e5138988aba37af7bf7b46a1856c7

Cobalt Stike Beacon Detected – 38[.]6[.]157[.]112:80

Cobalt Stike Beacon Detected – 52[.]172[.]224[.]253:80

Cobalt Stike Beacon Detected – 102[.]129[.]214[.]35:80

Cobalt Stike Beacon Detected – 45[.]9[.]148[.]135:443

Malware Analysis – djvu – 24b0c85674ba78acb5a1874ecbaeba1b

Malware Analysis – djvu – 9a95a7b355c69424882b236a582bf2be

Malware Analysis – evasion – a13660524fc3d9a379a2b1945ba0e3d0

Malware Analysis – evasion – a22a6791465a9a578b5476af1d3af3c0

Former British Prime Minister Liz Truss ‘s phone was allegedly hacked by Russian spies

German BKA arrested the alleged operator of Deutschland im Deep Web darknet market

BlackCat/ALPHV Ransomware Victim: Kolas Law Firm

BlackCat/ALPHV Ransomware Victim: Network Communications Inc

Malware Analysis – djvu – 4154fc7a72570db72966dccccb93f5ca

Malware Analysis – evasion – 931bd3160c08b92c4ff90b66b8efcec5

Malware Analysis – persistence – a2bf3ceb879904e6fe6fdaa80a6db39b

Malware Analysis – ransomware – 9ca46c92ae6ab9a127917be16cbbf337

Malware Analysis – hive – 177417be748814f6168171a42545f9dd

Malware Analysis – ransomware – 30c121c3995d7d7c5597b0b4d3047aa2

Malware Analysis – ransomware – d9956991845e1e275e0fc823133eebf2

Malware Analysis – smokeloader – c7b987a36262b72c27d1e3282186f235

Malware Analysis – ransomware – 1bd2517f25e7ba3a3b9568c2768b66d9

[INCRANSOM] – Ransomware Victim: United Bakery Equipment

[ARCUSMEDIA] – Ransomware Victim: Symantric IT

[ARCUSMEDIA] – Ransomware Victim: MGEMAL

HackerOne Bug Bounty Disclosure: dom-based-cookie-bomb-in-acronis-com-via-x-clickref-get-parameter-mr-medi

HackerOne Bug Bounty Disclosure: external-storage-global-credentials-returned-to-the-client-side-in-plaintext-tuyenee

You may have missed