Month: November 2022

Malware Analysis – amadey – 0336dbda5cc02d19df642fe601b80663

November 15, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:dcrat, family:djvu, family:raccoon, family:redline, family:smokeloader, family:vidar, botnet:517, botnet:dbffbdbc9786a5c270e6dd2d647e18ea, botnet:mario23_10, backdoor, collection, discovery, evasion, infostealer, persistence,...

Malware Analysis – djvu – 9649ce37c11a913d3895a6e0b6afb4d2

November 15, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 9649ce37c11a913d3895a6e0b6afb4d2SHA1: c7bf4ae4bea1c2466d81857d13c498ac6d366e96ANALYSIS DATE: 2022-11-15T16:50:37ZTTPS: T1060, T1112, T1053, T1012,...

Malware Analysis – djvu – 81919e4ec02b17887b81734b8c666199

November 15, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:nymaim, family:redline, family:smokeloader, family:vidar, botnet:517, botnet:mario23_10, backdoor, collection, discovery, evasion, infostealer, persistence, ransomware, spyware, stealer,...

Malware Analysis – djvu – 69aa7889fb018ab02aa828d3a936c399

November 15, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 69aa7889fb018ab02aa828d3a936c399SHA1: ab7891047c78bf227ca8bcba37dfbf223a76e345ANALYSIS DATE: 2022-11-15T17:51:03ZTTPS: T1012, T1082, T1005, T1081,...

Malware Analysis – – ac38a1394afcb482971389143276a76d

November 15, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: ac38a1394afcb482971389143276a76dSHA1: 5425bc88a602900b1e1c329e9b5bbd135afeaff6ANALYSIS DATE: 2022-11-15T17:42:01ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – eb2feaca9eb74fbfde53174b2727e664

November 15, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: eb2feaca9eb74fbfde53174b2727e664SHA1: ab6e3ec972c99630c38f26aa8911527aa668263eANALYSIS DATE: 2022-11-15T17:29:11ZTTPS: T1012, T1082, T1005, T1081,...

Experts revealed details of critical SQLi and access issues in Zendesk Explore

November 15, 2022

Researchers disclosed technical details of critical SQLi and access vulnerabilities in the Zendesk Explore Service. Cybersecurity researchers at Varonis disclosed...

China-linked APT Billbug breached a certificate authority in Asia

November 15, 2022

A suspected China-linked APT group breached a digital certificate authority in Asia as part of a campaign aimed at government...

LockBit 3.0 Ransomware Victim: linkplus[.]com[.]hk

November 15, 2022

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

LockBit 3.0 Ransomware Victim: amend[.]com[.]br

November 15, 2022

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Dismember – Scan Memory For Secrets And More

November 15, 2022

Dismember is a command-line toolkit for Linux that can be used to scan the memory of all processes (or particular...

Cobalt Stike Beacon Detected – 13[.]231[.]199[.]195:80

November 15, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 39[.]108[.]248[.]6:443

November 15, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 13[.]231[.]199[.]195:443

November 15, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Bug Bounty

BugCrowd Bug Bounty Disclosure: – Panel access at https://news-push-88.op-mobile.opera.com/. – By rahul0x01

November 15, 2022

The below information is fully automated and the information is captured from the BugCrowd Disclosure website. The information was correct...

Cobalt Stike Beacon Detected – 40[.]112[.]57[.]238:8080

November 15, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 34[.]81[.]97[.]209:8443

November 15, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 192[.]144[.]200[.]160:443

November 15, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 81[.]68[.]85[.]250:443

November 15, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – 52740e55ccb3887f6910e879b4fe7147

November 15, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 52740e55ccb3887f6910e879b4fe7147SHA1: 2d7106663a0e247f988a8abcd1cc2f18af8235a5ANALYSIS DATE: 2022-11-15T09:02:27ZTTPS: T1005, T1081, T1053, T1082,...

Malware Analysis – azov – 2009a024db69830d3e2154199c547bed

November 15, 2022

Score: 10 MALWARE FAMILY: azovTAGS:family:azov, persistence, ransomware, spyware, stealer, wiperMD5: 2009a024db69830d3e2154199c547bedSHA1: 560e504a951149d8eb7a90c8d087ea45cd2fde40ANALYSIS DATE: 2022-11-15T09:11:38ZTTPS: T1012, T1120, T1082, T1060, T1112, T1005,...

Malware Analysis – quasar – 5c15c3545fa841deb975d3c0d7fdbe1e

November 15, 2022

Score: 10 MALWARE FAMILY: quasarTAGS:family:quasar, botnet:venom client, agilenet, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 5c15c3545fa841deb975d3c0d7fdbe1eSHA1: 4e3c5266247aa594671eba955c940268e95e5025ANALYSIS DATE: 2022-11-15T08:59:15ZTTPS: T1012, T1120,...

Malware Analysis – evasion – 4b2e849543b0ecaec1885170a5ef5243

November 15, 2022

Score: 8 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 4b2e849543b0ecaec1885170a5ef5243SHA1: fc70407cbe422a8ee12be63a520d8638e382e9aaANALYSIS DATE: 2022-11-15T10:06:05ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Black Basta Ransomware Victim: Kessing Rechtsanwälte und Fachanwälte in PartGmbB

November 15, 2022

Black Basta Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Month: November 2022

Malware Analysis – amadey – 0336dbda5cc02d19df642fe601b80663

Malware Analysis – djvu – 9649ce37c11a913d3895a6e0b6afb4d2

Malware Analysis – djvu – 81919e4ec02b17887b81734b8c666199

Malware Analysis – djvu – 69aa7889fb018ab02aa828d3a936c399

Malware Analysis – – ac38a1394afcb482971389143276a76d

Malware Analysis – djvu – eb2feaca9eb74fbfde53174b2727e664

Experts revealed details of critical SQLi and access issues in Zendesk Explore

China-linked APT Billbug breached a certificate authority in Asia

LockBit 3.0 Ransomware Victim: linkplus[.]com[.]hk

LockBit 3.0 Ransomware Victim: amend[.]com[.]br

Dismember – Scan Memory For Secrets And More

Cobalt Stike Beacon Detected – 13[.]231[.]199[.]195:80

Cobalt Stike Beacon Detected – 39[.]108[.]248[.]6:443

Cobalt Stike Beacon Detected – 13[.]231[.]199[.]195:443

BugCrowd Bug Bounty Disclosure: – Panel access at https://news-push-88.op-mobile.opera.com/. – By rahul0x01

Cobalt Stike Beacon Detected – 40[.]112[.]57[.]238:8080

Cobalt Stike Beacon Detected – 34[.]81[.]97[.]209:8443

Cobalt Stike Beacon Detected – 192[.]144[.]200[.]160:443

Cobalt Stike Beacon Detected – 81[.]68[.]85[.]250:443

Malware Analysis – djvu – 52740e55ccb3887f6910e879b4fe7147

Malware Analysis – azov – 2009a024db69830d3e2154199c547bed

Malware Analysis – quasar – 5c15c3545fa841deb975d3c0d7fdbe1e

Malware Analysis – evasion – 4b2e849543b0ecaec1885170a5ef5243

Black Basta Ransomware Victim: Kessing Rechtsanwälte und Fachanwälte in PartGmbB

[KILLSEC] – Ransomware Victim: Nationwide Legal

[KILLSEC] – Ransomware Victim: Eassy Life

[INCRANSOM] – Ransomware Victim: Service Avicole JGL

[KILLSEC] – Ransomware Victim: Vogue Homes

[KILLSEC] – Ransomware Victim: Efi Sales

You may have missed