Month: November 2022

Malware Analysis – djvu – 793adb3bc34fe1c5685c789cb1873343

November 14, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, family:vidar, botnet:517, botnet:google2, botnet:mario23_10, botnet:new1113, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer,...

Malware Analysis – djvu – 4f983455b20c64a382e15940c78688df

November 14, 2022

Malware Analysis – djvu – 97abb80bf20fbd4165c08a1d94b5946f

November 14, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, family:vidar, botnet:517, botnet:mario23_10, botnet:new1113, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojan,...

Malware Analysis – djvu – 73851fffda776177fea69a3678984b5e

November 14, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 73851fffda776177fea69a3678984b5eSHA1: 91b3403104d5eb0a45cc74b8f07bf28d5e215c63ANALYSIS DATE: 2022-11-13T22:35:49ZTTPS: T1082, T1005, T1081, T1060,...

Malware Analysis – ransomware – 8ed939e0251f7e2da73f2a911bb021f7

November 14, 2022

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 8ed939e0251f7e2da73f2a911bb021f7SHA1: c81f5641328253f093d046874c77f173cfc9fba3ANALYSIS DATE: 2022-11-13T23:14:07ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – ca0366014df6b386b16e0335f0ac2463

November 14, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: ca0366014df6b386b16e0335f0ac2463SHA1: 2d547b279c5f626b45d995a455a539ef7797a077ANALYSIS DATE: 2022-11-13T23:36:22ZTTPS: T1060, T1112, T1222, T1012,...

BlackCat/ALPHV Ransomware Victim: CENTRAL BANK OF GAMBIA HACKED[.] 2 TB OF CRITICAL DATA WAS STOLEN[.]

November 13, 2022

BlackCat / ALPHV Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the...

Malware Analysis – azov – 56114b51b4db37d266304b35a8ded6ad

November 13, 2022

Score: 10 MALWARE FAMILY: azovTAGS:family:azov, persistence, ransomware, spyware, stealer, wiperMD5: 56114b51b4db37d266304b35a8ded6adSHA1: 06f213336a50e8564bf24246f5d7971fdc21a9cbANALYSIS DATE: 2022-11-13T15:32:05ZTTPS: T1060, T1112, T1012, T1120, T1082, T1005,...

Malware Analysis – azov – 82211bc7d27b7a5320d8f2810660c9c1

November 13, 2022

Score: 10 MALWARE FAMILY: azovTAGS:family:azov, persistence, ransomware, wiperMD5: 82211bc7d27b7a5320d8f2810660c9c1SHA1: 4a3ae7b95f2ce520d567564be8d387b337ec30b7ANALYSIS DATE: 2022-11-13T15:33:07ZTTPS: T1060, T1112, T1012, T1120, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – azov – c84978a220b2b871198a3db451615500

November 13, 2022

Score: 10 MALWARE FAMILY: azovTAGS:family:azov, persistence, ransomware, wiperMD5: c84978a220b2b871198a3db451615500SHA1: b3849898825e31ca9786f452934a9e40eba0bc56ANALYSIS DATE: 2022-11-13T15:32:06ZTTPS: T1060, T1112, T1012, T1120, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – azov – f2a75b25f7e0cfee3fa861754d01bee2

November 13, 2022

Score: 10 MALWARE FAMILY: azovTAGS:family:azov, persistence, ransomware, spyware, stealer, wiperMD5: f2a75b25f7e0cfee3fa861754d01bee2SHA1: 107692789d688eede43064c44b6a07958cbc3eddANALYSIS DATE: 2022-11-13T15:32:07ZTTPS: T1012, T1120, T1082, T1005, T1081, T1060,...

Malware Analysis – azov – eb707c2864b47875cf7e183c738f6d1e

November 13, 2022

Score: 10 MALWARE FAMILY: azovTAGS:family:azov, persistence, ransomware, wiperMD5: eb707c2864b47875cf7e183c738f6d1eSHA1: c32b4d0f7083091113991b08cd23601d9cee2c61ANALYSIS DATE: 2022-11-13T15:32:05ZTTPS: T1060, T1112, T1012, T1120, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – azov – 53acba6e2bd5c5cebeb5d07512cfb221

November 13, 2022

Score: 10 MALWARE FAMILY: azovTAGS:family:azov, persistence, ransomware, wiperMD5: 53acba6e2bd5c5cebeb5d07512cfb221SHA1: e8f2b5f3eae1b64f52906eee3c0f32286281b9a2ANALYSIS DATE: 2022-11-13T15:33:07ZTTPS: T1012, T1120, T1082, T1060, T1112 ScoreMeaningExample10Known badA malware...

Malware Analysis – azov – c4e7ddc4f4de56d81cb9a1155b427cc0

November 13, 2022

Score: 10 MALWARE FAMILY: azovTAGS:family:azov, persistence, ransomware, spyware, stealer, wiperMD5: c4e7ddc4f4de56d81cb9a1155b427cc0SHA1: c6457b8e4d2a1c5665c1aa03b0e4c47ac8f01c67ANALYSIS DATE: 2022-11-13T15:33:08ZTTPS: T1012, T1120, T1082, T1005, T1081, T1060,...

Malware Analysis – smokeloader – f5c178148b3caf9df80d0ebdad21247f

November 13, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: f5c178148b3caf9df80d0ebdad21247fSHA1: ff30214f2095dc71308dac946fe15e087cfd6e14ANALYSIS DATE: 2022-11-13T15:36:05ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – azov – fb211c2ac0f37a104de1b4377e87982c

November 13, 2022

Score: 10 MALWARE FAMILY: azovTAGS:family:azov, persistence, ransomware, spyware, stealer, wiperMD5: fb211c2ac0f37a104de1b4377e87982cSHA1: 39fc0b935b35c6d2ffd5664467606765cb207c45ANALYSIS DATE: 2022-11-13T15:33:07ZTTPS: T1012, T1120, T1082, T1005, T1081, T1060,...

Bug Bounty

BugCrowd Bug Bounty Disclosure: – Panel access at https://news-push-88.op-mobile.opera.com/. – By rahul0x01

November 13, 2022

The below information is fully automated and the information is captured from the BugCrowd Disclosure website. The information was correct...

Malware Analysis – smokeloader – 1478f2913021fbe3d058d7b3f8deafb8

November 13, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 1478f2913021fbe3d058d7b3f8deafb8SHA1: 9022fdfa23e138007f4c619ac694d66c4ad9fdceANALYSIS DATE: 2022-11-13T16:18:20ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 2c1c98563468777f8212368893e1f73a

November 13, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, family:vidar, botnet:517, botnet:google2, botnet:mario23_10, botnet:new1113, backdoor, collection, discovery, evasion, exploit, infostealer, persistence, ransomware,...

Malware Analysis – discovery – 0df0ea0bbf8131122c6d615e1c64211c

November 13, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomware, spyware, stealerMD5: 0df0ea0bbf8131122c6d615e1c64211cSHA1: e9113b243fecb9225fe4f3fa30bd96d5d3fe2390ANALYSIS DATE: 2022-11-13T16:06:25ZTTPS: T1012, T1082, T1102, T1120, T1005, T1081, T1060,...

Malware Analysis – smokeloader – 401d39e7fe0115353cbde76ee50bb76b

November 13, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 401d39e7fe0115353cbde76ee50bb76bSHA1: a6f9f492400891fcf16aa385cd83e87e64758cb9ANALYSIS DATE: 2022-11-13T16:23:40ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – xmrig – 3db308a4a293420df30a444944f2ccb6

November 13, 2022

Score: 10 MALWARE FAMILY: xmrigTAGS:family:xmrig, discovery, evasion, exploit, minerMD5: 3db308a4a293420df30a444944f2ccb6SHA1: 4cae8d8a25167bc0ce3e8bfae7ccde1b82f7b0eaANALYSIS DATE: 2022-11-13T17:06:36ZTTPS: T1112, T1222, T1053, T1031, T1562, T1489 ScoreMeaningExample10Known...

Malware Analysis – ransomware – 43fef15833cf87dca57905c0f11f8f8b

November 13, 2022

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 43fef15833cf87dca57905c0f11f8f8bSHA1: 9c8cd929f27fdea71ed1abc4b0f100369747a504ANALYSIS DATE: 2022-11-13T17:00:30ZTTPS: T1082, T1012, T1491, T1112, T1120 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – a885cd95a68cdde169ccfcd8a2907820

November 13, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: a885cd95a68cdde169ccfcd8a2907820SHA1: 360109fcc8e456fbccc291bfa45083fa860168e2ANALYSIS DATE: 2022-11-13T17:13:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Month: November 2022

Malware Analysis – djvu – 793adb3bc34fe1c5685c789cb1873343

Malware Analysis – djvu – 4f983455b20c64a382e15940c78688df

Malware Analysis – djvu – 97abb80bf20fbd4165c08a1d94b5946f

Malware Analysis – djvu – 73851fffda776177fea69a3678984b5e

Malware Analysis – ransomware – 8ed939e0251f7e2da73f2a911bb021f7

Malware Analysis – djvu – ca0366014df6b386b16e0335f0ac2463

BlackCat/ALPHV Ransomware Victim: CENTRAL BANK OF GAMBIA HACKED[.] 2 TB OF CRITICAL DATA WAS STOLEN[.]

Malware Analysis – azov – 56114b51b4db37d266304b35a8ded6ad

Malware Analysis – azov – 82211bc7d27b7a5320d8f2810660c9c1

Malware Analysis – azov – c84978a220b2b871198a3db451615500

Malware Analysis – azov – f2a75b25f7e0cfee3fa861754d01bee2

Malware Analysis – azov – eb707c2864b47875cf7e183c738f6d1e

Malware Analysis – azov – 53acba6e2bd5c5cebeb5d07512cfb221

Malware Analysis – azov – c4e7ddc4f4de56d81cb9a1155b427cc0

Malware Analysis – smokeloader – f5c178148b3caf9df80d0ebdad21247f

Malware Analysis – azov – fb211c2ac0f37a104de1b4377e87982c

BugCrowd Bug Bounty Disclosure: – Panel access at https://news-push-88.op-mobile.opera.com/. – By rahul0x01

Malware Analysis – smokeloader – 1478f2913021fbe3d058d7b3f8deafb8

Malware Analysis – djvu – 2c1c98563468777f8212368893e1f73a

Malware Analysis – discovery – 0df0ea0bbf8131122c6d615e1c64211c

Malware Analysis – smokeloader – 401d39e7fe0115353cbde76ee50bb76b

Malware Analysis – xmrig – 3db308a4a293420df30a444944f2ccb6

Malware Analysis – ransomware – 43fef15833cf87dca57905c0f11f8f8b

Malware Analysis – smokeloader – a885cd95a68cdde169ccfcd8a2907820

CISA: Fortinet Updates Guidance and Indicators of Compromise following FortiManager Vulnerability Exploitation

CISA: CISA Releases Four Industrial Control Systems Advisories

CISA: JCDC’s Industry-Government Collaboration Speeds Mitigation of CrowdStrike IT Outage

CISA: CISA Releases Three Industrial Control Systems Advisories

CISA: Foreign Threat Actor Conducting Large-Scale Spearphishing Campaign with RDP Attachments

You may have missed