Month: November 2022

Malware Analysis – djvu – 6f60b9997d06030dba66cb6906052770

November 19, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 6f60b9997d06030dba66cb6906052770SHA1: 9be16feea12623a1a745f6cb34bd0e552edaa6d1ANALYSIS DATE: 2022-11-19T17:15:42ZTTPS: T1012, T1082, T1060, T1112,...

Malware Analysis – dcrat – e812b559b4f0a8fd5d11c86e2b7bbdea

November 19, 2022

Score: 10 MALWARE FAMILY: dcratTAGS:family:dcrat, family:djvu, family:redline, family:smokeloader, family:vidar, botnet:517, botnet:mario23_10, backdoor, collection, discovery, infostealer, persistence, ransomware, rat, spyware, stealer,...

Malware Analysis – smokeloader – c6e438c54033096a47d752040658de04

November 19, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: c6e438c54033096a47d752040658de04SHA1: 9856b7ab9e99830f5819408b61527b5f422d8f45ANALYSIS DATE: 2022-11-19T17:51:16ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 6836ea5f1dd9575394d3d549e29729f7

November 19, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: 6836ea5f1dd9575394d3d549e29729f7SHA1: 941860f0b34142aa11a1e5e4bbf10035568f1d7dANALYSIS DATE: 2022-11-19T17:29:41ZTTPS: T1130, T1112, T1060, T1222, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 49e12e0bd76941ab54dec0db51cd6e22

November 19, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 49e12e0bd76941ab54dec0db51cd6e22SHA1: da575ad370d523ed8017f354645dbae9f22180a7ANALYSIS DATE: 2022-11-19T17:34:38ZTTPS: T1107, T1490, T1005, T1081 ScoreMeaningExample10Known badA malware family was...

Black Friday and Cyber Monday, crooks are already at work

November 19, 2022

Every year during Black Friday and Cyber Monday, crooks take advantage of the bad habits of users with fraudulent schema....

Wodat – Windows Oracle Database Attack Toolkit

November 19, 2022

Simple port of the popular Oracle Database Attack Tool (ODAT) ( TEST Module tests if the given connection string can...

Bug Bounty

BugCrowd Bug Bounty Disclosure: – Panel access at https://news-push-88.op-mobile.opera.com/. – By rahul0x01

November 19, 2022

The below information is fully automated and the information is captured from the BugCrowd Disclosure website. The information was correct...

Bug Bounty

BugCrowd Bug Bounty Disclosure: – Impersonation via Broken Link Hijacking on https://sv.hellosign.com – By CoffeeAddict_exe

November 19, 2022

The below information is fully automated and the information is captured from the BugCrowd Disclosure website. The information was correct...

Month: November 2022

Malware Analysis – djvu – 6f60b9997d06030dba66cb6906052770

Malware Analysis – dcrat – e812b559b4f0a8fd5d11c86e2b7bbdea

Malware Analysis – smokeloader – c6e438c54033096a47d752040658de04

Malware Analysis – djvu – 6836ea5f1dd9575394d3d549e29729f7

Malware Analysis – ransomware – 49e12e0bd76941ab54dec0db51cd6e22

Black Friday and Cyber Monday, crooks are already at work

Wodat – Windows Oracle Database Attack Toolkit

BugCrowd Bug Bounty Disclosure: – Panel access at https://news-push-88.op-mobile.opera.com/. – By rahul0x01

BugCrowd Bug Bounty Disclosure: – Impersonation via Broken Link Hijacking on https://sv.hellosign.com – By CoffeeAddict_exe

Cobalt Stike Beacon Detected – 147[.]78[.]242[.]119:80

Cobalt Stike Beacon Detected – 118[.]99[.]27[.]116:8080

Cobalt Stike Beacon Detected – 101[.]35[.]149[.]44:80

Cobalt Stike Beacon Detected – 123[.]60[.]223[.]157:9999

Cobalt Stike Beacon Detected – 119[.]23[.]61[.]144:80

Cobalt Stike Beacon Detected – 101[.]35[.]149[.]44:443

Cobalt Stike Beacon Detected – 107[.]189[.]6[.]84:443

Cobalt Stike Beacon Detected – 139[.]196[.]171[.]222:443

Cobalt Stike Beacon Detected – 120[.]79[.]252[.]209:80

Cobalt Stike Beacon Detected – 194[.]165[.]16[.]92:443

Cobalt Stike Beacon Detected – 116[.]196[.]108[.]157:80

Cobalt Stike Beacon Detected – 79[.]133[.]56[.]243:443

New improved versions of LodaRAT spotted in the wild

Daily Vulnerability Trends: Sat Nov 19 2022

IT threat evolution in Q3 2022. Non-mobile statistics

[BLACKSUIT] – Ransomware Victim: SVP Worldwide

[QILIN] – Ransomware Victim: Imprimerie Peau

[KILLSEC] – Ransomware Victim: Sumitomo

Cobalt Strike Beacon Detected – 47[.]108[.]112[.]243:8443

Cobalt Strike Beacon Detected – 39[.]100[.]108[.]3:80

You may have missed