Month: November 2022

Malware Analysis – ransomware – 7563b69f5b4a68a415de003f090ce8ee

November 23, 2022

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 7563b69f5b4a68a415de003f090ce8eeSHA1: fdab9a9625fc71ee4078e46705be3c4313eac571ANALYSIS DATE: 2022-11-23T15:21:53ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – 66f46cd0347f2ec73a97d25785714a2e

November 23, 2022

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 66f46cd0347f2ec73a97d25785714a2eSHA1: f48270f7d82981811eb0edf171fffc76d6c2b416ANALYSIS DATE: 2022-11-23T15:21:50ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – banker – 5816131ee36a5d08686c9ab9babc59c1

November 23, 2022

Score: 8 MALWARE FAMILY: bankerTAGS:banker, evasion, ransomwareMD5: 5816131ee36a5d08686c9ab9babc59c1SHA1: 67b42cc66d8562510985ee9c4b3ad7d2447f389aANALYSIS DATE: 2022-11-23T15:21:03ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – djvu – 764bee482f158a88b3e1d8413f050711

November 23, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 764bee482f158a88b3e1d8413f050711SHA1: 820b614b42e89af0f602b33bb3dfe12472bd3c1bANALYSIS DATE: 2022-11-23T15:21:18ZTTPS: T1082, T1060, T1112, T1053,...

Malware Analysis – adware – f693274485f1ef10524eaee98f7d6a4b

November 23, 2022

Score: 8 MALWARE FAMILY: adwareTAGS:adware, discovery, exploit, persistence, stealer, upxMD5: f693274485f1ef10524eaee98f7d6a4bSHA1: bd6a49605d9e71c97bacff6e3efadc1ef03f9320ANALYSIS DATE: 2022-11-23T15:44:45ZTTPS: T1060, T1112, T1222, T1082, T1012, T1120,...

Malware Analysis – adware – b508754cdaee0838f52c468e4550ddb3

November 23, 2022

Score: 8 MALWARE FAMILY: adwareTAGS:adware, discovery, exploit, persistence, stealerMD5: b508754cdaee0838f52c468e4550ddb3SHA1: e25fc3fda3e54c39969a490223e5c01a213716bbANALYSIS DATE: 2022-11-23T15:38:14ZTTPS: T1222, T1012, T1120, T1082, T1112, T1176, T1060...

Malware Analysis – collection – 2cca32c4cf7dc6d10a2462fa9b74ae40

November 23, 2022

Score: 9 MALWARE FAMILY: collectionTAGS:collection, evasion, persistence, ransomware, trojanMD5: 2cca32c4cf7dc6d10a2462fa9b74ae40SHA1: 74f0125e8e0526b0e465d16668884006a4ee774aANALYSIS DATE: 2022-11-23T15:53:43ZTTPS: T1060, T1112, T1107, T1490, T1114, T1082 ScoreMeaningExample10Known...

Malware Analysis – collection – a78423e9f6dd118ba745f5923de41cd5

November 23, 2022

Score: 9 MALWARE FAMILY: collectionTAGS:collection, evasion, persistence, ransomware, trojanMD5: a78423e9f6dd118ba745f5923de41cd5SHA1: e7ce99ba2a1fec0920d309ad3644359b0706e9afANALYSIS DATE: 2022-11-23T15:53:51ZTTPS: T1114, T1082, T1060, T1112, T1107, T1490 ScoreMeaningExample10Known...

Malware Analysis – smokeloader – 77b493dabbd25c9509b3f82bf3a7efb7

November 23, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 77b493dabbd25c9509b3f82bf3a7efb7SHA1: eb7c03c6583dcfa53a9bf293ee2b31178412105dANALYSIS DATE: 2022-11-23T16:27:02ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 472862b6834a8e5207a46995a87f1995

November 23, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 472862b6834a8e5207a46995a87f1995SHA1: 3b7c92eacb6453bd828b184f5bdfa651aec58246ANALYSIS DATE: 2022-11-23T16:32:36ZTTPS: T1012, T1082, T1222, T1005,...

Malware Analysis – discovery – 0a668a17b820bb20065e8e979cea7b39

November 23, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, evasion, exploitMD5: 0a668a17b820bb20065e8e979cea7b39SHA1: b0607dbb2b3da5293f9465cf3143882873786ce0ANALYSIS DATE: 2022-11-23T16:52:19ZTTPS: T1082, T1031, T1562, T1489, T1112, T1222 ScoreMeaningExample10Known badA malware...

Malware Analysis – djvu – 09667e600ccb2be87c76e8af45417464

November 23, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 09667e600ccb2be87c76e8af45417464SHA1: 5d988dc88cc35115a00b6cef13204402a44665aeANALYSIS DATE: 2022-11-23T17:36:25ZTTPS: T1082, T1053, T1012, T1060,...

Month: November 2022

Malware Analysis – ransomware – 7563b69f5b4a68a415de003f090ce8ee

Malware Analysis – ransomware – 66f46cd0347f2ec73a97d25785714a2e

Malware Analysis – banker – 5816131ee36a5d08686c9ab9babc59c1

Malware Analysis – djvu – 764bee482f158a88b3e1d8413f050711

Malware Analysis – adware – f693274485f1ef10524eaee98f7d6a4b

Malware Analysis – adware – b508754cdaee0838f52c468e4550ddb3

Malware Analysis – collection – 2cca32c4cf7dc6d10a2462fa9b74ae40

Malware Analysis – collection – a78423e9f6dd118ba745f5923de41cd5

Malware Analysis – smokeloader – 77b493dabbd25c9509b3f82bf3a7efb7

Malware Analysis – djvu – 472862b6834a8e5207a46995a87f1995

Malware Analysis – discovery – 0a668a17b820bb20065e8e979cea7b39

Malware Analysis – djvu – 09667e600ccb2be87c76e8af45417464

HIVE Ransomware Victim: Norman Public Schools

Experts claim that iPhone’s analytics data is not anonymous

Not Acxiom (unverified) – 51,730,831 breached accounts

LockBit 3.0 Ransomware Victim: scottindustrialsystems[.]com

Scrcpy – Display And Control Your Android Device

Cobalt Stike Beacon Detected – 195[.]189[.]99[.]114:8443

Cobalt Stike Beacon Detected – 107[.]189[.]14[.]155:80

Cobalt Stike Beacon Detected – 39[.]104[.]165[.]139:80

Cobalt Stike Beacon Detected – 116[.]63[.]195[.]13:80

Cobalt Stike Beacon Detected – 43[.]139[.]78[.]157:80

Cobalt Stike Beacon Detected – 144[.]48[.]240[.]104:443

Cobalt Stike Beacon Detected – 185[.]143[.]223[.]76:80

[QILIN] – Ransomware Victim: DieTech North America

CISA: Avoid Scams After Disaster Strikes

CISA: CISA Adds Three Known Exploited Vulnerabilities to Catalog

CISA: CISA and FBI Release Fact Sheet on Protecting Against Iranian Targeting of Accounts Associated with National Political Organizations

CISA: Microsoft Releases October 2024 Security Updates

You may have missed