Month: November 2022

Malware Analysis – persistence – 0767bc8cc533f832eef496ab13095332

November 26, 2022

Score: 8 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 0767bc8cc533f832eef496ab13095332SHA1: 48861f37a411d480409719730f037b3666c342a7ANALYSIS DATE: 2022-11-26T03:44:18ZTTPS: T1491, T1112, T1082, T1060, T1012 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – evasion – ee53b422d70c28deaa09cee30775b554

November 26, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomwareMD5: ee53b422d70c28deaa09cee30775b554SHA1: fe98afd2217238056038959762556b95a8a6ddf7ANALYSIS DATE: 2022-11-26T04:11:08ZTTPS: T1004, T1112, T1042, T1158, T1012, T1120, T1082, T1060, T1491...

Malware Analysis – xorist – 6f5d6e4d71c035c688983f9e9de791ef

November 26, 2022

Score: 10 MALWARE FAMILY: xoristTAGS:family:xorist, ransomwareMD5: 6f5d6e4d71c035c688983f9e9de791efSHA1: 533f647fbdcd67ab69069674fae241e374aa32a5ANALYSIS DATE: 2022-11-26T04:44:38ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – ransomware – a9927372adb1bbab4d9feda4973b99bb

November 26, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: a9927372adb1bbab4d9feda4973b99bbSHA1: afe047b6cb99dc22fe5861b38bc01499204f4aedANALYSIS DATE: 2022-11-26T04:08:13ZTTPS: T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – persistence – d09d7017fdde81cb3b117e3276119cc5

November 26, 2022

Score: 8 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: d09d7017fdde81cb3b117e3276119cc5SHA1: 582eabb0aa0a8c80350ffdc38f69821d87daf249ANALYSIS DATE: 2022-11-26T04:16:06ZTTPS: T1082, T1060, T1112, T1012, T1491 ScoreMeaningExample10Known badA malware family was...

HackerOne Bug Bounty Disclosure: profile-of-disabled-user-stays-accessiblebymikaelgundersen

November 26, 2022

Programme HackerOne Nextcloud Nextcloud Submitted by mikaelgundersen mikaelgundersen Report Profile of disabled user stays accessible Full Report A considerable amount...

HackerOne Bug Bounty Disclosure: cve-2022-32221:-post-following-put-confusionbyrobbotic

November 26, 2022

Programme HackerOne curl curl Submitted by robbotic robbotic Report CVE-2022-32221: POST following PUT confusion Full Report A considerable amount of...

HackerOne Bug Bounty Disclosure: exception-logging-in-sharepoint-app-reveals-clear-text-connection-detailsbykichernde_erbse

November 26, 2022

Programme HackerOne Nextcloud Nextcloud Submitted by kichernde_erbse kichernde_erbse Report Exception logging in Sharepoint app reveals clear-text connection details Full Report...

HackerOne Bug Bounty Disclosure: cve-2022-42915:-http-proxy-double-freebybagder

November 26, 2022

Programme HackerOne curl curl Submitted by bagder bagder Report CVE-2022-42915: HTTP proxy double-free Full Report A considerable amount of time...

HackerOne Bug Bounty Disclosure: database-resource-exhaustion-for-logged-in-users-via-sharee-recommendations-with-circlesbymichag86

November 26, 2022

Programme HackerOne Nextcloud Nextcloud Submitted by michag86 michag86 Report Database resource exhaustion for logged-in users via sharee recommendations with circles...

Malware Analysis – collection – 09cca1e41da3f7fc57e90706d8212e29

November 26, 2022

Score: 9 MALWARE FAMILY: collectionTAGS:collection, evasion, persistence, ransomware, trojanMD5: 09cca1e41da3f7fc57e90706d8212e29SHA1: 1000bbb6d7a2330ee345e1126d5a5e1e2192a75eANALYSIS DATE: 2022-11-26T04:45:00ZTTPS: T1082, T1107, T1490, T1060, T1112, T1114 ScoreMeaningExample10Known...

Malware Analysis – collection – 8987f2adf0229cd9c3766947dc350834

November 26, 2022

Score: 9 MALWARE FAMILY: collectionTAGS:collection, evasion, persistence, ransomware, trojanMD5: 8987f2adf0229cd9c3766947dc350834SHA1: 5ab596b16ef2b6cb67aa6dbd6f651df9569fa902ANALYSIS DATE: 2022-11-26T04:45:02ZTTPS: T1107, T1490, T1114, T1082, T1060, T1112 ScoreMeaningExample10Known...

Malware Analysis – collection – e1b8c016fa86959df4f74450f081b829

November 26, 2022

Score: 9 MALWARE FAMILY: collectionTAGS:collection, evasion, persistence, ransomware, trojanMD5: e1b8c016fa86959df4f74450f081b829SHA1: 459bf5b91f70ece5837c5f04eb2a95a46e47b2f1ANALYSIS DATE: 2022-11-26T04:44:55ZTTPS: T1082, T1060, T1112, T1107, T1490, T1114 ScoreMeaningExample10Known...

Malware Analysis – collection – 11ff8a8e9a643deff1dcf58e7e2fdf20

November 26, 2022

Score: 9 MALWARE FAMILY: collectionTAGS:collection, evasion, persistence, ransomware, trojanMD5: 11ff8a8e9a643deff1dcf58e7e2fdf20SHA1: 40b1d84b341bae23dc5cfa8dd1c44cf96294cd54ANALYSIS DATE: 2022-11-26T04:44:57ZTTPS: T1114, T1082, T1107, T1490, T1060, T1112 ScoreMeaningExample10Known...

Malware Analysis – collection – 206b5136095cb2bcfb902c8ffb218163

November 26, 2022

Score: 9 MALWARE FAMILY: collectionTAGS:collection, evasion, persistence, ransomware, trojanMD5: 206b5136095cb2bcfb902c8ffb218163SHA1: c7c74e59e23e3c5cb38f77de2a60c36f12554f81ANALYSIS DATE: 2022-11-26T04:45:07ZTTPS: T1107, T1490, T1060, T1112, T1114, T1082 ScoreMeaningExample10Known...

Malware Analysis – ransomware – 1d297af49fd29c74395f27b48be2b3ba

November 26, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 1d297af49fd29c74395f27b48be2b3baSHA1: 90619427877e3755e99901caf76ba4672364ef38ANALYSIS DATE: 2022-11-26T04:47:33ZTTPS: T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – collection – 2b5d4368a8c867f65f0570b92d490c35

November 26, 2022

Score: 9 MALWARE FAMILY: collectionTAGS:collection, evasion, persistence, ransomware, trojanMD5: 2b5d4368a8c867f65f0570b92d490c35SHA1: 8bc37c75684f508605e6b450e38d895bcd3eb20aANALYSIS DATE: 2022-11-26T04:45:05ZTTPS: T1114, T1082, T1060, T1112, T1107, T1490 ScoreMeaningExample10Known...

Malware Analysis – evasion – 9c46f44b7c7cf65a978f23bf969973b7

November 26, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 9c46f44b7c7cf65a978f23bf969973b7SHA1: 75f5b1c271247068b6e9ac828f095c31b6ad9235ANALYSIS DATE: 2022-11-26T04:45:10ZTTPS: T1107, T1490, T1082, T1060, T1112 ScoreMeaningExample10Known badA malware...

Malware Analysis – persistence – 12a2da01ed2dbe86f5ff0895aaaf0fbd

November 26, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 12a2da01ed2dbe86f5ff0895aaaf0fbdSHA1: 8fdddc4719b91f75508c32293c3762935c8a4dc7ANALYSIS DATE: 2022-11-26T04:59:46ZTTPS: T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ransomware – b8c0eedfe9d2b511cd073910c7e42f10

November 26, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: b8c0eedfe9d2b511cd073910c7e42f10SHA1: fe74589e2c22e0af63365236d01c467c77ee097aANALYSIS DATE: 2022-11-26T04:59:44ZTTPS: T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – infostealer – c88974f5a7840c4b015f0be3022927e4

November 26, 2022

Score: 7 MALWARE FAMILY: infostealerTAGS:infostealer, ransomwareMD5: c88974f5a7840c4b015f0be3022927e4SHA1: d1885da33f4da5135ba5e03f4a74f55cb7a89c71ANALYSIS DATE: 2022-11-26T05:11:42ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – infostealer – ab79cc6ad8a796388f7bef953588a00f

November 26, 2022

Score: 7 MALWARE FAMILY: infostealerTAGS:infostealer, ransomwareMD5: ab79cc6ad8a796388f7bef953588a00fSHA1: 1a7d973296709806d223d167c379e2bc9c05bbadANALYSIS DATE: 2022-11-26T05:14:50ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – djvu – 65c77508547ff791d86e6647bea789d0

November 26, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 65c77508547ff791d86e6647bea789d0SHA1: 7d420f8623b3d25d6b542cd0e1c29d581aa80bcdANALYSIS DATE: 2022-11-26T15:34:04ZTTPS: T1053, T1005, T1081, T1012,...

Malware Analysis – amadey – be7e3c9c60ba450c1c223facf6d663a6

November 26, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:vidar, botnet:1859, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: be7e3c9c60ba450c1c223facf6d663a6SHA1: b30c637aecfb24e7c304225f58197c59928fe854ANALYSIS...

Month: November 2022

Malware Analysis – persistence – 0767bc8cc533f832eef496ab13095332

Malware Analysis – evasion – ee53b422d70c28deaa09cee30775b554

Malware Analysis – xorist – 6f5d6e4d71c035c688983f9e9de791ef

Malware Analysis – ransomware – a9927372adb1bbab4d9feda4973b99bb

Malware Analysis – persistence – d09d7017fdde81cb3b117e3276119cc5

HackerOne Bug Bounty Disclosure: profile-of-disabled-user-stays-accessiblebymikaelgundersen

HackerOne Bug Bounty Disclosure: cve-2022-32221:-post-following-put-confusionbyrobbotic

HackerOne Bug Bounty Disclosure: exception-logging-in-sharepoint-app-reveals-clear-text-connection-detailsbykichernde_erbse

HackerOne Bug Bounty Disclosure: cve-2022-42915:-http-proxy-double-freebybagder

HackerOne Bug Bounty Disclosure: database-resource-exhaustion-for-logged-in-users-via-sharee-recommendations-with-circlesbymichag86

Malware Analysis – collection – 09cca1e41da3f7fc57e90706d8212e29

Malware Analysis – collection – 8987f2adf0229cd9c3766947dc350834

Malware Analysis – collection – e1b8c016fa86959df4f74450f081b829

Malware Analysis – collection – 11ff8a8e9a643deff1dcf58e7e2fdf20

Malware Analysis – collection – 206b5136095cb2bcfb902c8ffb218163

Malware Analysis – ransomware – 1d297af49fd29c74395f27b48be2b3ba

Malware Analysis – collection – 2b5d4368a8c867f65f0570b92d490c35

Malware Analysis – evasion – 9c46f44b7c7cf65a978f23bf969973b7

Malware Analysis – persistence – 12a2da01ed2dbe86f5ff0895aaaf0fbd

Malware Analysis – ransomware – b8c0eedfe9d2b511cd073910c7e42f10

Malware Analysis – infostealer – c88974f5a7840c4b015f0be3022927e4

Malware Analysis – infostealer – ab79cc6ad8a796388f7bef953588a00f

Malware Analysis – djvu – 65c77508547ff791d86e6647bea789d0

Malware Analysis – amadey – be7e3c9c60ba450c1c223facf6d663a6

[INTERLOCK] – Ransomware Victim: McCormick & Priore

CVE Alert: CVE-2024-12032

CVE Alert: CVE-2024-12413

[AKIRA] – Ransomware Victim: Rio Negro

[AKIRA] – Ransomware Victim: McFarlane

You may have missed