Year: 2022

Malware Analysis – – ac38a1394afcb482971389143276a76d

November 15, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: ac38a1394afcb482971389143276a76dSHA1: 5425bc88a602900b1e1c329e9b5bbd135afeaff6ANALYSIS DATE: 2022-11-15T17:42:01ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – eb2feaca9eb74fbfde53174b2727e664

November 15, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: eb2feaca9eb74fbfde53174b2727e664SHA1: ab6e3ec972c99630c38f26aa8911527aa668263eANALYSIS DATE: 2022-11-15T17:29:11ZTTPS: T1012, T1082, T1005, T1081,...

Experts revealed details of critical SQLi and access issues in Zendesk Explore

November 15, 2022

Researchers disclosed technical details of critical SQLi and access vulnerabilities in the Zendesk Explore Service. Cybersecurity researchers at Varonis disclosed...

China-linked APT Billbug breached a certificate authority in Asia

November 15, 2022

A suspected China-linked APT group breached a digital certificate authority in Asia as part of a campaign aimed at government...

LockBit 3.0 Ransomware Victim: linkplus[.]com[.]hk

November 15, 2022

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

LockBit 3.0 Ransomware Victim: amend[.]com[.]br

November 15, 2022

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Dismember – Scan Memory For Secrets And More

November 15, 2022

Dismember is a command-line toolkit for Linux that can be used to scan the memory of all processes (or particular...

Cobalt Stike Beacon Detected – 13[.]231[.]199[.]195:80

November 15, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 39[.]108[.]248[.]6:443

November 15, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 13[.]231[.]199[.]195:443

November 15, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Bug Bounty

BugCrowd Bug Bounty Disclosure: – Panel access at https://news-push-88.op-mobile.opera.com/. – By rahul0x01

November 15, 2022

The below information is fully automated and the information is captured from the BugCrowd Disclosure website. The information was correct...

Cobalt Stike Beacon Detected – 40[.]112[.]57[.]238:8080

November 15, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 34[.]81[.]97[.]209:8443

November 15, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 192[.]144[.]200[.]160:443

November 15, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 81[.]68[.]85[.]250:443

November 15, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – 52740e55ccb3887f6910e879b4fe7147

November 15, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 52740e55ccb3887f6910e879b4fe7147SHA1: 2d7106663a0e247f988a8abcd1cc2f18af8235a5ANALYSIS DATE: 2022-11-15T09:02:27ZTTPS: T1005, T1081, T1053, T1082,...

Malware Analysis – azov – 2009a024db69830d3e2154199c547bed

November 15, 2022

Score: 10 MALWARE FAMILY: azovTAGS:family:azov, persistence, ransomware, spyware, stealer, wiperMD5: 2009a024db69830d3e2154199c547bedSHA1: 560e504a951149d8eb7a90c8d087ea45cd2fde40ANALYSIS DATE: 2022-11-15T09:11:38ZTTPS: T1012, T1120, T1082, T1060, T1112, T1005,...

Malware Analysis – quasar – 5c15c3545fa841deb975d3c0d7fdbe1e

November 15, 2022

Score: 10 MALWARE FAMILY: quasarTAGS:family:quasar, botnet:venom client, agilenet, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 5c15c3545fa841deb975d3c0d7fdbe1eSHA1: 4e3c5266247aa594671eba955c940268e95e5025ANALYSIS DATE: 2022-11-15T08:59:15ZTTPS: T1012, T1120,...

Malware Analysis – evasion – 4b2e849543b0ecaec1885170a5ef5243

November 15, 2022

Score: 8 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 4b2e849543b0ecaec1885170a5ef5243SHA1: fc70407cbe422a8ee12be63a520d8638e382e9aaANALYSIS DATE: 2022-11-15T10:06:05ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Year: 2022

Malware Analysis – – ac38a1394afcb482971389143276a76d

Malware Analysis – djvu – eb2feaca9eb74fbfde53174b2727e664

Experts revealed details of critical SQLi and access issues in Zendesk Explore

China-linked APT Billbug breached a certificate authority in Asia

LockBit 3.0 Ransomware Victim: linkplus[.]com[.]hk

LockBit 3.0 Ransomware Victim: amend[.]com[.]br

Dismember – Scan Memory For Secrets And More

Cobalt Stike Beacon Detected – 13[.]231[.]199[.]195:80

Cobalt Stike Beacon Detected – 39[.]108[.]248[.]6:443

Cobalt Stike Beacon Detected – 13[.]231[.]199[.]195:443

BugCrowd Bug Bounty Disclosure: – Panel access at https://news-push-88.op-mobile.opera.com/. – By rahul0x01

Cobalt Stike Beacon Detected – 40[.]112[.]57[.]238:8080

Cobalt Stike Beacon Detected – 34[.]81[.]97[.]209:8443

Cobalt Stike Beacon Detected – 192[.]144[.]200[.]160:443

Cobalt Stike Beacon Detected – 81[.]68[.]85[.]250:443

Malware Analysis – djvu – 52740e55ccb3887f6910e879b4fe7147

Malware Analysis – azov – 2009a024db69830d3e2154199c547bed

Malware Analysis – quasar – 5c15c3545fa841deb975d3c0d7fdbe1e

Malware Analysis – evasion – 4b2e849543b0ecaec1885170a5ef5243

Black Basta Ransomware Victim: Kessing Rechtsanwälte und Fachanwälte in PartGmbB

Cobalt Stike Beacon Detected – 5[.]181[.]86[.]248:443

Cobalt Stike Beacon Detected – 124[.]71[.]145[.]63:443

Cobalt Stike Beacon Detected – 194[.]165[.]16[.]91:80

Cobalt Stike Beacon Detected – 5[.]44[.]42[.]46:443

Cobalt Strike Beacon Detected – 111[.]119[.]198[.]247:9998

Cobalt Strike Beacon Detected – 36[.]156[.]124[.]29:8099

Cobalt Strike Beacon Detected – 8[.]219[.]86[.]28:80

Cobalt Strike Beacon Detected – 111[.]231[.]22[.]61:443

[BIANLIAN] – Ransomware Victim: MassDevelopment

You may have missed