Month: November 2022

Malware Analysis – persistence – 9aa95b27ff879d63f093759239086a50

November 26, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 9aa95b27ff879d63f093759239086a50SHA1: 889325176e8c14cf31f0d940abcb0c027af5072bANALYSIS DATE: 2022-11-26T00:21:55ZTTPS: T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Cobalt Stike Beacon Detected – 146[.]70[.]147[.]29:443

November 26, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 87[.]120[.]254[.]95:80

November 26, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 120[.]55[.]77[.]27:443

November 26, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Bug Bounty

BugCrowd Bug Bounty Disclosure: – Impersonation via Broken Link Hijacking on https://sv.hellosign.com – By CoffeeAddict_exe

November 26, 2022

The below information is fully automated and the information is captured from the BugCrowd Disclosure website. The information was correct...

Bug Bounty

BugCrowd Bug Bounty Disclosure: – Panel access at https://news-push-88.op-mobile.opera.com/. – By rahul0x01

November 26, 2022

The below information is fully automated and the information is captured from the BugCrowd Disclosure website. The information was correct...

Malware Analysis – djvu – 9100c922c30fa97bfd28bca79b05370f

November 26, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 9100c922c30fa97bfd28bca79b05370fSHA1: 631d68e1a96c9d45d27991c6f913375cd44d44bbANALYSIS DATE: 2022-11-26T10:07:02ZTTPS: T1005, T1081, T1012, T1060,...

Malware Analysis – amadey – e9f6fccda69077cfc6d220e0f665264c

November 26, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, collection, spyware, stealer, trojanMD5: e9f6fccda69077cfc6d220e0f665264cSHA1: 87be46433353c2f746df5f84f14fd21bcd50e55bANALYSIS DATE: 2022-11-26T10:01:05ZTTPS: T1082, T1053, T1005, T1081, T1114 ScoreMeaningExample10Known badA...

Malware Analysis – djvu – 3c30d848c6bfd14d392dc1f896bdd2bd

November 26, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 3c30d848c6bfd14d392dc1f896bdd2bdSHA1: 01652e13cacdd2a27fddb724567287a8a5f9ffe0ANALYSIS DATE: 2022-11-26T10:22:57ZTTPS:...

Malware Analysis – – f41e454bd8f94376f0fe048abfe9b593

November 26, 2022

Score: 7 MALWARE FAMILY: TAGS:MD5: f41e454bd8f94376f0fe048abfe9b593SHA1: f8ad417688ce8954e11052c681fc10db203f932dANALYSIS DATE: 2022-11-26T10:32:04ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Cobalt Stike Beacon Detected – 38[.]54[.]32[.]75:443

November 26, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 117[.]50[.]190[.]207:443

November 26, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 1[.]12[.]55[.]126:1111

November 26, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 194[.]135[.]24[.]250:80

November 26, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

ZTE PON OLT denial of service | CVE-2022-39070

November 26, 2022

NAME ZTE PON OLT denial of service Platforms Affected:ZTE ZXA10 C3XXRisk Level:9Exploitability:UnprovenConsequences:Bypass Security DESCRIPTION ZTE PON OLT is could allow...

Daily Vulnerability Trends: Sat Nov 26 2022

November 26, 2022

Daily Vulnerability Trends (sourced from VulnMon) CVE NAMECVE DescriptionCVE-2022-3602A buffer overrun can be triggered in X.509 certificate verification, specifically in...

sl abstract screens big data resized 990x400 1

Who tracked internet users in 2021–2022

November 26, 2022

Every time you go online, someone is watching over you. The services you use, the websites you visit, the apps...

Royal Ransomware Victim: Law Firm of Friedman + Bartoumian

November 26, 2022

RoyalRansomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the...

Malware Analysis – ransomware – 5f01792a9084e926ffd9004d90dfa3c4

November 26, 2022

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 5f01792a9084e926ffd9004d90dfa3c4SHA1: c2f34ffd3ffe6a19bd348b5e5cb85848db3dee7bANALYSIS DATE: 2022-11-25T18:54:35ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – infostealer – 9b3ba6776b2aa31472e7894ea3b5b2b5

November 26, 2022

Score: 7 MALWARE FAMILY: infostealerTAGS:infostealer, ransomwareMD5: 9b3ba6776b2aa31472e7894ea3b5b2b5SHA1: 578f4c9bee0f2f9f8fd4cbe3a394bc0cd26dbcb5ANALYSIS DATE: 2022-11-25T18:58:53ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – infostealer – 1947bef533b3cad7c7ffa5f2351d3b2e

November 26, 2022

Score: 7 MALWARE FAMILY: infostealerTAGS:infostealer, ransomwareMD5: 1947bef533b3cad7c7ffa5f2351d3b2eSHA1: 770e6783b100196f463d6467dbdb015b36f27c5fANALYSIS DATE: 2022-11-25T18:57:32ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – infostealer – 04ed7aab42570d8fadd7c198758be716

November 26, 2022

Score: 7 MALWARE FAMILY: infostealerTAGS:infostealer, ransomwareMD5: 04ed7aab42570d8fadd7c198758be716SHA1: 070609fcdabd223d8359458014aa247a4c0b9e53ANALYSIS DATE: 2022-11-25T19:03:18ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – ransomware – e5e9b813d2029861a525e5d0c5eb5e73

November 26, 2022

Score: 5 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: e5e9b813d2029861a525e5d0c5eb5e73SHA1: 4bfe3a9dfc8c81ecb5eb62ef52e93328e2d6bdaeANALYSIS DATE: 2022-11-25T19:05:43ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – evasion – 7ffc2f56be26eb249106c3456e0d88b6

November 26, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 7ffc2f56be26eb249106c3456e0d88b6SHA1: aa7d64b328d255ffc09e03493d1995396a30d0d9ANALYSIS DATE: 2022-11-25T19:11:21ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Month: November 2022

Malware Analysis – persistence – 9aa95b27ff879d63f093759239086a50

Cobalt Stike Beacon Detected – 146[.]70[.]147[.]29:443

Cobalt Stike Beacon Detected – 87[.]120[.]254[.]95:80

Cobalt Stike Beacon Detected – 120[.]55[.]77[.]27:443

BugCrowd Bug Bounty Disclosure: – Impersonation via Broken Link Hijacking on https://sv.hellosign.com – By CoffeeAddict_exe

BugCrowd Bug Bounty Disclosure: – Panel access at https://news-push-88.op-mobile.opera.com/. – By rahul0x01

Malware Analysis – djvu – 9100c922c30fa97bfd28bca79b05370f

Malware Analysis – amadey – e9f6fccda69077cfc6d220e0f665264c

Malware Analysis – djvu – 3c30d848c6bfd14d392dc1f896bdd2bd

Malware Analysis – – f41e454bd8f94376f0fe048abfe9b593

Cobalt Stike Beacon Detected – 38[.]54[.]32[.]75:443

Cobalt Stike Beacon Detected – 117[.]50[.]190[.]207:443

Cobalt Stike Beacon Detected – 1[.]12[.]55[.]126:1111

Cobalt Stike Beacon Detected – 194[.]135[.]24[.]250:80

ZTE PON OLT denial of service | CVE-2022-39070

Daily Vulnerability Trends: Sat Nov 26 2022

Who tracked internet users in 2021–2022

Royal Ransomware Victim: Law Firm of Friedman + Bartoumian

Malware Analysis – ransomware – 5f01792a9084e926ffd9004d90dfa3c4

Malware Analysis – infostealer – 9b3ba6776b2aa31472e7894ea3b5b2b5

Malware Analysis – infostealer – 1947bef533b3cad7c7ffa5f2351d3b2e

Malware Analysis – infostealer – 04ed7aab42570d8fadd7c198758be716

Malware Analysis – ransomware – e5e9b813d2029861a525e5d0c5eb5e73

Malware Analysis – evasion – 7ffc2f56be26eb249106c3456e0d88b6

CISA: Fortinet Updates Guidance and Indicators of Compromise following FortiManager Vulnerability Exploitation

CISA: CISA Releases Four Industrial Control Systems Advisories

CISA: JCDC’s Industry-Government Collaboration Speeds Mitigation of CrowdStrike IT Outage

CISA: CISA Releases Three Industrial Control Systems Advisories

CISA: Foreign Threat Actor Conducting Large-Scale Spearphishing Campaign with RDP Attachments

You may have missed