Month: November 2022

Malware Analysis – wannacry – 48482583c7d32290b3319faffc948969

November 6, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: 48482583c7d32290b3319faffc948969SHA1: 070a837386b10c1fc878cfaccea18a8988a02f1dANALYSIS DATE: 2022-11-06T11:40:24ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Security Affairs newsletter Round 392

November 6, 2022

A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs free for...

Daily Vulnerability Trends: Sun Nov 06 2022

November 6, 2022

Daily Vulnerability Trends (sourced from VulnMon) CVE NAMECVE DescriptionCVE-2022-42889Apache Commons Text performs variable interpolation, allowing properties to be dynamically evaluated...

Malware Analysis – wannacry – 199bcd85f09b424e79e5e971b435f029

November 6, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: 199bcd85f09b424e79e5e971b435f029SHA1: b72be60efb40b3405d9cd08e700e4769765f8b53ANALYSIS DATE: 2022-11-06T03:00:51ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – smokeloader – 9406cd9075e57c5bf28b8a5ab2eb3186

November 6, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 9406cd9075e57c5bf28b8a5ab2eb3186SHA1: de4b70864539064c383ad108e001efa8a74526ecANALYSIS DATE: 2022-11-06T03:34:50ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – adware – 31fc29eaf6a68de98f5e3f0d5ba27750

November 6, 2022

Score: 8 MALWARE FAMILY: adwareTAGS:adware, discovery, exploit, persistence, stealer, upxMD5: 31fc29eaf6a68de98f5e3f0d5ba27750SHA1: 082a15a5c65eb5049f420e0c3c7e3dce630ed816ANALYSIS DATE: 2022-11-06T04:18:58ZTTPS: T1112, T1176, T1060, T1222 ScoreMeaningExample10Known badA...

Malware Analysis – smokeloader – 38b9cb090f2a2600849848914d1a7e9d

November 6, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 38b9cb090f2a2600849848914d1a7e9dSHA1: 9a652dc66ec926e4587b406c83ed29415844c231ANALYSIS DATE: 2022-11-06T03:42:31ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 9cd308b76d8e9d815c9e8b16ac91a009

November 6, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: 9cd308b76d8e9d815c9e8b16ac91a009SHA1: 7e9778886f03970b7dd59315125568b55d1a9605ANALYSIS DATE: 2022-11-06T04:04:42ZTTPS: T1130, T1112, T1060, T1222, T1082, T1053 ScoreMeaningExample10Known badA...

Malware Analysis – evasion – 10a428250ce76a2d5e1a099237271790

November 6, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, spyware, stealer, trojan, upxMD5: 10a428250ce76a2d5e1a099237271790SHA1: 0201d09c99010311846c39024cbac153ead2c74fANALYSIS DATE: 2022-11-06T04:23:47ZTTPS: T1082, T1088, T1089, T1112, T1031, T1005,...

Malware Analysis – adware – 13797d259eae7789cb3c0284f0260b10

November 6, 2022

Score: 8 MALWARE FAMILY: adwareTAGS:adware, discovery, exploit, persistence, stealer, upxMD5: 13797d259eae7789cb3c0284f0260b10SHA1: bfca5302ac52dbec668392e3572f06ca66b5e9abANALYSIS DATE: 2022-11-06T04:19:03ZTTPS: T1112, T1176, T1060, T1222 ScoreMeaningExample10Known badA...

Malware Analysis – adware – 204bfeaaa385a07a53d0368d6ca56ad0

November 6, 2022

Score: 8 MALWARE FAMILY: adwareTAGS:adware, discovery, exploit, persistence, stealer, upxMD5: 204bfeaaa385a07a53d0368d6ca56ad0SHA1: c9de1a8d55452874be23182e4d7093e5a8521fb4ANALYSIS DATE: 2022-11-06T04:19:06ZTTPS: T1222, T1112, T1176, T1060 ScoreMeaningExample10Known badA...

Malware Analysis – adware – 30898d305c059d8c1e74b4b3bfc46db0

November 6, 2022

Score: 8 MALWARE FAMILY: adwareTAGS:adware, discovery, exploit, persistence, stealer, upxMD5: 30898d305c059d8c1e74b4b3bfc46db0SHA1: b68399ee1dc5777839879400674ac94f694aca96ANALYSIS DATE: 2022-11-06T04:19:00ZTTPS: T1222, T1112, T1176, T1060 ScoreMeaningExample10Known badA...

Malware Analysis – discovery – 306873e273f3438ba4209c587c584f10

November 6, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploitMD5: 306873e273f3438ba4209c587c584f10SHA1: 32f9869a560f1ac7e52de2233d2360d0af4ad7d3ANALYSIS DATE: 2022-11-06T05:04:41ZTTPS: T1222, T1012 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – discovery – 157e936faae225b8bb827a469d9955c0

November 6, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploit, persistenceMD5: 157e936faae225b8bb827a469d9955c0SHA1: 54dfd788c00af47c5047f5485bdc15987c89e05dANALYSIS DATE: 2022-11-06T04:26:56ZTTPS: T1060, T1112, T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 21e1eef72e17c352692ef0be36c570e4

November 6, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 21e1eef72e17c352692ef0be36c570e4SHA1: 9f86c47eae56197854c5518db9994c34fbbdca67ANALYSIS DATE: 2022-11-06T04:32:06ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – discovery – 250c1b6bcc5fe9b36a485d0debe048a0

November 6, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploitMD5: 250c1b6bcc5fe9b36a485d0debe048a0SHA1: 5ba0c24a3e61c66793e594be30ba4c2ac9401641ANALYSIS DATE: 2022-11-06T05:04:44ZTTPS: T1222, T1012 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – djvu – 1a1e17a50fc5346c17137b95629d62c8

November 6, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5: 1a1e17a50fc5346c17137b95629d62c8SHA1: 859ea4abdd308bb59136c2e21d412f8c154800e5ANALYSIS DATE: 2022-11-06T05:39:09ZTTPS:...

Malware Analysis – azov – 7129291fc3d97377200f8a24ad06930a

November 6, 2022

Score: 10 MALWARE FAMILY: azovTAGS:family:azov, persistence, ransomware, spyware, stealer, wiperMD5: 7129291fc3d97377200f8a24ad06930aSHA1: 3f858d2837529e6c973ffa7c26c643e9748e7282ANALYSIS DATE: 2022-11-06T05:24:34ZTTPS: T1005, T1081, T1012, T1120, T1082, T1060,...

Malware Analysis – discovery – 10b60193e3723958abf271e79434dd80

November 6, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploitMD5: 10b60193e3723958abf271e79434dd80SHA1: 6a6552952fe17a8e34248bd947d536bb17ac0327ANALYSIS DATE: 2022-11-06T05:04:47ZTTPS: T1222, T1012 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – ransomware – 0fb86805bc3c7e0d5ed26bbf57a4724d

November 6, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 0fb86805bc3c7e0d5ed26bbf57a4724dSHA1: 78c9b1e7c52fa37dcb4660397188ec713a2a44c7ANALYSIS DATE: 2022-11-06T05:20:32ZTTPS: T1091, T1005, T1081, T1082, T1107, T1490 ScoreMeaningExample10Known badA malware...

Month: November 2022

Malware Analysis – wannacry – 48482583c7d32290b3319faffc948969

Security Affairs newsletter Round 392

Daily Vulnerability Trends: Sun Nov 06 2022

Malware Analysis – wannacry – 199bcd85f09b424e79e5e971b435f029

Malware Analysis – smokeloader – 9406cd9075e57c5bf28b8a5ab2eb3186

Malware Analysis – adware – 31fc29eaf6a68de98f5e3f0d5ba27750

Malware Analysis – smokeloader – 38b9cb090f2a2600849848914d1a7e9d

Malware Analysis – djvu – 9cd308b76d8e9d815c9e8b16ac91a009

Malware Analysis – evasion – 10a428250ce76a2d5e1a099237271790

Malware Analysis – adware – 13797d259eae7789cb3c0284f0260b10

Malware Analysis – adware – 204bfeaaa385a07a53d0368d6ca56ad0

Malware Analysis – adware – 30898d305c059d8c1e74b4b3bfc46db0

Malware Analysis – discovery – 306873e273f3438ba4209c587c584f10

Malware Analysis – discovery – 157e936faae225b8bb827a469d9955c0

Malware Analysis – smokeloader – 21e1eef72e17c352692ef0be36c570e4

Malware Analysis – discovery – 250c1b6bcc5fe9b36a485d0debe048a0

Malware Analysis – djvu – 1a1e17a50fc5346c17137b95629d62c8

Malware Analysis – azov – 7129291fc3d97377200f8a24ad06930a

Malware Analysis – discovery – 10b60193e3723958abf271e79434dd80

Malware Analysis – ransomware – 0fb86805bc3c7e0d5ed26bbf57a4724d

Cobalt Stike Beacon Detected – 193[.]106[.]191[.]176:443

Cobalt Stike Beacon Detected – 43[.]154[.]223[.]191:80

Cobalt Stike Beacon Detected – 3[.]120[.]38[.]93:80

Cobalt Stike Beacon Detected – 20[.]7[.]201[.]45:443

HackerOne Bug Bounty Disclosure: std-process-command-batch-files-argument-escaping-could-be-bypassed-with-trailing-whitespace-or-periods–xpl-r-r

[LOCKBIT3] – Ransomware Victim: madison-home[.]com

[CHORT] – Ransomware Victim: sheboyganwi[.]gov

[QILIN] – Ransomware Victim: Zimmerman & Frachtman PA Law Firm

[QILIN] – Ransomware Victim: Calvert Home Mortgage Investment

You may have missed