Month: November 2022

Dell Connectrix (Brocade) switches unspecified | CVE-2022-33186

November 13, 2022

NAME Dell Connectrix (Brocade) switches unspecified Platforms Affected:Risk Level:9.8Exploitability:UnprovenConsequences:Unknown DESCRIPTION An unspecified error in Dell Connectrix (Brocade) switches could allow...

POWER METER SICAM Q100 code execution | CVE-2022-43546

November 13, 2022

NAME POWER METER SICAM Q100 code execution Platforms Affected:Risk Level:9.9Exploitability:UnprovenConsequences:Gain Access DESCRIPTION POWER METER SICAM Q100 could allow a remote...

Intel Active Management Technology (AMT) SDK, Endpoint Management Assistant (EMA), and Manageability Commander privilege escalation | CVE-2022-26341

November 13, 2022

NAME Intel Active Management Technology (AMT) SDK, Endpoint Management Assistant (EMA), and Manageability Commander privilege escalation Platforms Affected:Risk Level:8.2Exploitability:UnprovenConsequences:Gain Privilege...

Citrix ADC and Citrix Gateway security bypass | CVE-2022-27510

November 13, 2022

NAME Citrix ADC and Citrix Gateway security bypass Platforms Affected:Citrix Gateway 12.1 Citrix Gateway 13.0 Citrix ADC 13.0 Citrix ADC...

Daily Vulnerability Trends: Sun Nov 13 2022

November 13, 2022

Daily Vulnerability Trends (sourced from VulnMon) CVE NAMECVE DescriptionCVE-2022-27510Unauthorized access to Gateway user capabilitiesCVE-2021-1961Possible buffer overflow due to lack of...

LockBit 3.0 Ransomware Victim: sinopecthc[.]com

November 13, 2022

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the...

LockBit 3.0 Ransomware Victim: oehc[.]corsica

November 13, 2022

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

LockBit 3.0 Ransomware Victim: adnec[.]ae

November 13, 2022

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

LockBit 3.0 Ransomware Victim: stavbar[.]cz

November 13, 2022

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

LockBit 3.0 Ransomware Victim: chahousing[.]org

November 13, 2022

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Malware Analysis – djvu – f5c2841aa3c4f73419578a3155f14f8b

November 13, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: f5c2841aa3c4f73419578a3155f14f8bSHA1: c50a926ebcfabc9c4b1174adaacb29b1ca71f6b9ANALYSIS DATE: 2022-11-13T03:03:24ZTTPS: T1060, T1112, T1082, T1012,...

Malware Analysis – azov – 9c4c2f4f00522c9ebe08905270b2ac4b

November 13, 2022

Score: 10 MALWARE FAMILY: azovTAGS:family:azov, persistence, ransomware, spyware, stealer, wiperMD5: 9c4c2f4f00522c9ebe08905270b2ac4bSHA1: 63e0b1975eaadd99a742fc279ee1956377686f10ANALYSIS DATE: 2022-11-13T05:01:05ZTTPS: T1012, T1120, T1082, T1060, T1112, T1005,...

Malware Analysis – azov – 0a79ead8fad6e0365a90587afcd6ff10

November 13, 2022

Score: 10 MALWARE FAMILY: azovTAGS:family:azov, persistence, ransomware, spyware, stealer, wiperMD5: 0a79ead8fad6e0365a90587afcd6ff10SHA1: 72daf9625dc1d0ed57719193f1716f9432b65a06ANALYSIS DATE: 2022-11-13T05:01:05ZTTPS: T1005, T1081, T1060, T1112, T1012, T1120,...

Malware Analysis – azov – 4e363abe84806737799677097880529c

November 13, 2022

Score: 10 MALWARE FAMILY: azovTAGS:family:azov, persistence, ransomware, wiperMD5: 4e363abe84806737799677097880529cSHA1: d75cef7e653213c4688a25baf316baae7b55c739ANALYSIS DATE: 2022-11-13T05:01:05ZTTPS: T1060, T1112, T1012, T1120, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – azov – a029befa6a4679c3a724d759022e57d9

November 13, 2022

Score: 10 MALWARE FAMILY: azovTAGS:family:azov, persistence, ransomware, wiperMD5: a029befa6a4679c3a724d759022e57d9SHA1: 4c44b4de48bb7969e57b2561a80913cacdc1d97cANALYSIS DATE: 2022-11-13T05:01:05ZTTPS: T1012, T1120, T1082, T1060, T1112 ScoreMeaningExample10Known badA malware...

Malware Analysis – azov – 24b6dcaa8998f7478e80b33f438ea830

November 13, 2022

Score: 10 MALWARE FAMILY: azovTAGS:family:azov, persistence, ransomware, wiperMD5: 24b6dcaa8998f7478e80b33f438ea830SHA1: 6af7f3d7627ab41a1b897388dd71c6cf42017d7aANALYSIS DATE: 2022-11-13T05:01:05ZTTPS: T1060, T1112, T1012, T1120, T1082 ScoreMeaningExample10Known badA malware...

Bug Bounty

BugCrowd Bug Bounty Disclosure: – Panel access at https://news-push-88.op-mobile.opera.com/. – By rahul0x01

November 13, 2022

The below information is fully automated and the information is captured from the BugCrowd Disclosure website. The information was correct...

Malware Analysis – azov – 85dd5fce0c097ca0d61f3e8894bb3fc3

November 13, 2022

Score: 10 MALWARE FAMILY: azovTAGS:family:azov, persistence, ransomware, spyware, stealer, wiperMD5: 85dd5fce0c097ca0d61f3e8894bb3fc3SHA1: 84de7b63b9ca39dc2b32cdef9a1431f244e29a13ANALYSIS DATE: 2022-11-13T05:02:04ZTTPS: T1060, T1112, T1012, T1120, T1082, T1005,...

Malware Analysis – azov – 5438961a5f8b3fb4f1ab25c327d032b7

November 13, 2022

Score: 10 MALWARE FAMILY: azovTAGS:family:azov, persistence, ransomware, wiperMD5: 5438961a5f8b3fb4f1ab25c327d032b7SHA1: 600928b807a35dbaec7b3ee913aba4fece17c688ANALYSIS DATE: 2022-11-13T05:04:05ZTTPS: T1060, T1112, T1012, T1120, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – azov – be6b6d25baf6bdcfb2b82982a1c02e51

November 13, 2022

Score: 10 MALWARE FAMILY: azovTAGS:family:azov, persistence, ransomware, spyware, stealer, wiperMD5: be6b6d25baf6bdcfb2b82982a1c02e51SHA1: 950f8696908ab1de8f49eb9e80a1dff469071086ANALYSIS DATE: 2022-11-13T05:04:05ZTTPS: T1060, T1112, T1012, T1120, T1082, T1005,...

Malware Analysis – azov – 0b72cdba79b42fb9f35cc35aeee84521

November 13, 2022

Score: 10 MALWARE FAMILY: azovTAGS:family:azov, persistence, ransomware, spyware, stealer, wiperMD5: 0b72cdba79b42fb9f35cc35aeee84521SHA1: b7700c891d9d3474da904eea3fda2cd4a595b4deANALYSIS DATE: 2022-11-13T05:04:24ZTTPS: T1060, T1112, T1012, T1120, T1082, T1005,...

Malware Analysis – azov – 9a5211f6e491d812d15363168783906c

November 13, 2022

Score: 10 MALWARE FAMILY: azovTAGS:family:azov, persistence, ransomware, spyware, stealer, wiperMD5: 9a5211f6e491d812d15363168783906cSHA1: 0d06ee595404de3264da3c71f489392b64fa1e2eANALYSIS DATE: 2022-11-13T05:39:03ZTTPS: T1060, T1112, T1012, T1120, T1082, T1005,...

Malware Analysis – djvu – 988bdaa991663005b67ac9b548fe5188

November 13, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, family:vidar, botnet:10k, botnet:517, botnet:mario23_10, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5:...

Malware Analysis – djvu – e22e75d5a31222d5ca54cc0efe34e77b

November 13, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: e22e75d5a31222d5ca54cc0efe34e77bSHA1: 0822b46fc90c5956581dbbeac1bafe2b3a455b57ANALYSIS DATE: 2022-11-13T05:09:56ZTTPS: T1012, T1082, T1005, T1081,...

Month: November 2022

Dell Connectrix (Brocade) switches unspecified | CVE-2022-33186

POWER METER SICAM Q100 code execution | CVE-2022-43546

Intel Active Management Technology (AMT) SDK, Endpoint Management Assistant (EMA), and Manageability Commander privilege escalation | CVE-2022-26341

Citrix ADC and Citrix Gateway security bypass | CVE-2022-27510

Daily Vulnerability Trends: Sun Nov 13 2022

LockBit 3.0 Ransomware Victim: sinopecthc[.]com

LockBit 3.0 Ransomware Victim: oehc[.]corsica

LockBit 3.0 Ransomware Victim: adnec[.]ae

LockBit 3.0 Ransomware Victim: stavbar[.]cz

LockBit 3.0 Ransomware Victim: chahousing[.]org

Malware Analysis – djvu – f5c2841aa3c4f73419578a3155f14f8b

Malware Analysis – azov – 9c4c2f4f00522c9ebe08905270b2ac4b

Malware Analysis – azov – 0a79ead8fad6e0365a90587afcd6ff10

Malware Analysis – azov – 4e363abe84806737799677097880529c

Malware Analysis – azov – a029befa6a4679c3a724d759022e57d9

Malware Analysis – azov – 24b6dcaa8998f7478e80b33f438ea830

BugCrowd Bug Bounty Disclosure: – Panel access at https://news-push-88.op-mobile.opera.com/. – By rahul0x01

Malware Analysis – azov – 85dd5fce0c097ca0d61f3e8894bb3fc3

Malware Analysis – azov – 5438961a5f8b3fb4f1ab25c327d032b7

Malware Analysis – azov – be6b6d25baf6bdcfb2b82982a1c02e51

Malware Analysis – azov – 0b72cdba79b42fb9f35cc35aeee84521

Malware Analysis – azov – 9a5211f6e491d812d15363168783906c

Malware Analysis – djvu – 988bdaa991663005b67ac9b548fe5188

Malware Analysis – djvu – e22e75d5a31222d5ca54cc0efe34e77b

Cobalt Strike Beacon Detected – 111[.]229[.]148[.]68:1443

Cobalt Strike Beacon Detected – 47[.]94[.]168[.]145:9999

Cobalt Strike Beacon Detected – 167[.]71[.]207[.]129:8080

Cobalt Strike Beacon Detected – 101[.]91[.]125[.]228:443

[RHYSIDA] – Ransomware Victim: Fylde Coast Academy Trust

You may have missed