Daily Vulnerability Trends: Thu Nov 03 2022
Daily Vulnerability Trends (sourced from VulnMon) CVE NAMECVE DescriptionCVE-2022-22241An Improper Input Validation vulnerability in the J-Web component of Juniper Networks...
Month: November 2022
Server-side attacks, C&C in public clouds and other MDR cases we observed
Introduction This report describes several interesting incidents observed by the Kaspersky Managed Detection and Response (MDR) team. The goal of the...
Malware Analysis – wannacry – 58088f35c31731e82afdc9157e1418c8
Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: 58088f35c31731e82afdc9157e1418c8SHA1: fc6fc4739db9e837618ec5d5047cc1a8d5d4a57eANALYSIS DATE: 2022-11-03T03:00:25ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...
Malware Analysis – djvu – bd8f00d5443c21442f9e9ee7dc656504
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, botnet:mario23_10, botnet:slovarik1btc, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5: bd8f00d5443c21442f9e9ee7dc656504SHA1: 87335c5e32b8a6609e5e53e50ee47c2167f21f37ANALYSIS...
Malware Analysis – amadey – 432c4e1f72cb160beceac60a75add7fc
Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:redline, family:smokeloader, botnet:mario23_10, botnet:slovarik1btc, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5: 432c4e1f72cb160beceac60a75add7fcSHA1:...
Malware Analysis – djvu – e28c92d67de5b0e50656cd64bc43d609
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: e28c92d67de5b0e50656cd64bc43d609SHA1: ae111a18223d9c9b84b3d46b58b383edd17b7d78ANALYSIS DATE: 2022-11-03T03:31:45ZTTPS: T1222, T1005, T1081, T1012, T1082, T1060,...
Malware Analysis – djvu – 0f3a951d4b9f1c2717429eb512b6a35f
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, botnet:mario23_10, botnet:slovarik1btc, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5: 0f3a951d4b9f1c2717429eb512b6a35fSHA1: de70f63ab89c1eaace1e8ba295883853bbf40168ANALYSIS...
Malware Analysis – djvu – 7940034ef696a5864e8987d5831f5982
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 7940034ef696a5864e8987d5831f5982SHA1: c2341db13c0d705c8f6b0c0096a45f112bafe92bANALYSIS DATE: 2022-11-03T05:40:38ZTTPS: T1012, T1082, T1005, T1081, T1222, T1053,...
Malware Analysis – djvu – 7d281af034cbaaf29f1c7683d83b0816
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 7d281af034cbaaf29f1c7683d83b0816SHA1: 8ef1c438915f07f323243011c849169666111642ANALYSIS DATE: 2022-11-03T05:00:41ZTTPS: T1082, T1053, T1005, T1081, T1012, T1222,...
Malware Analysis – amadey – 60be5c9c87907487fe1314ccaa7a5779
Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:redline, family:smokeloader, botnet:google2, botnet:mario23_10, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5: 60be5c9c87907487fe1314ccaa7a5779SHA1:...
Cobalt Stike Beacon Detected – 192[.]3[.]153[.]207:808
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 23[.]227[.]198[.]232:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 164[.]92[.]190[.]196:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 80[.]66[.]76[.]77:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 84[.]32[.]128[.]141:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 43[.]224[.]249[.]36:80
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 43[.]143[.]133[.]46:80
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 159[.]223[.]6[.]128:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 124[.]223[.]90[.]246:6666
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 212[.]224[.]88[.]71:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 174[.]139[.]150[.]20:8008
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Vitali Kremez passed away
I’m deeply saddened by the absurd death of Vitali Kremez, he died during a scuba diving off the coast of...
4 Malicious apps on Play Store totaled +1M downloads
Four malicious Android apps uploaded by the same developer to Google Play totaled at least one million downloads. Malwarebytes researchers...
SandStrike, a previously undocumented Android malware targets a Persian-speaking religion minority
Threat actors are using previously undocumented Android spyware, dubbed SandStrike, to spy on a Persian-speaking religion minority. In Q3 2022,...
