Year: 2022

Malware Analysis – djvu – dd440b0a64f6268557a038f74d0710e4

November 2, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: dd440b0a64f6268557a038f74d0710e4SHA1: 4d40e91cb2e8767e97a68bc4d1799c0e71d6dfb1ANALYSIS DATE: 2022-11-01T23:30:17ZTTPS: T1222, T1082, T1053, T1005, T1081, T1060,...

Malware Analysis – discovery – 6691c3106d5319f108114a48f5177396

November 2, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, evasion, exploitMD5: 6691c3106d5319f108114a48f5177396SHA1: 1ce92f03b5e7bd1c1d591141693f6e0261f3afeeANALYSIS DATE: 2022-11-01T22:38:03ZTTPS: T1031, T1562, T1489, T1112, T1222, T1082, T1053 ScoreMeaningExample10Known badA...

Malware Analysis – djvu – 9cdaeb6cbff19813f4981abbdab1d1ee

November 2, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 9cdaeb6cbff19813f4981abbdab1d1eeSHA1: e95435139444895346d50814ceb60a7f1510c565ANALYSIS DATE: 2022-11-01T23:50:20ZTTPS: T1012, T1005, T1081, T1082, T1060, T1112,...

LockBit 3.0 gang claims to have stolen data from Thales

November 1, 2022

The ransomware group LockBit 3.0 claimed to have stolen data from the French defence and technology group Thales. Thales is...

Malware Analysis – chaos – 5aa991c89a6564a3c6351052e157f9d8

November 1, 2022

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, family:xorist, evasion, persistence, ransomware, spyware, stealerMD5: 5aa991c89a6564a3c6351052e157f9d8SHA1: f481e3cd126a429c33568070c2ff56d27c41a8ceANALYSIS DATE: 2022-11-01T15:20:08ZTTPS: T1490, T1059, T1107, T1005, T1081,...

Malware Analysis – amadey – 682844b02e1f64362575bb820cfc7346

November 1, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:redline, family:smokeloader, botnet:mario23_10, botnet:slovarik1btc, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojan, upxMD5:...

Malware Analysis – djvu – e996dac5e194b1c3562f70ee411a9d86

November 1, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: e996dac5e194b1c3562f70ee411a9d86SHA1: e3d6c1f9a87d53275fe6654ccf1b99483c7767a4ANALYSIS DATE: 2022-11-01T15:30:27ZTTPS: T1005, T1081, T1060, T1112, T1222, T1012,...

Malware Analysis – amadey – 5be10047bb7742addd4cdfc5acabb13c

November 1, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:redline, family:smokeloader, botnet:google2, botnet:mario23_10, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojan, upxMD5:...

Malware Analysis – djvu – 01f463bb367a066c24c75ca8a49cdd63

November 1, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 01f463bb367a066c24c75ca8a49cdd63SHA1: cedb821f62e805cdc9b53258d0e154e4580e0ac6ANALYSIS DATE: 2022-11-01T16:20:12ZTTPS: T1222, T1005, T1081, T1012, T1082, T1060,...

Malware Analysis – wannacry – a0b5f65e56a84da5b8ddd75a76e633dd

November 1, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: a0b5f65e56a84da5b8ddd75a76e633ddSHA1: 8818e492fa69ad76d2002862b79b3d831f8ba867ANALYSIS DATE: 2022-11-01T16:20:29ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – evasion – d3f4a4778119ac034157cdc7c1ff850e

November 1, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: d3f4a4778119ac034157cdc7c1ff850eSHA1: 45b695aa62a96785f165839786e58d59b0cf0af1ANALYSIS DATE: 2022-11-01T16:44:26ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – wannacry – ab7c81526be6b0daadab86fff788c383

November 1, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, ransomware, wormMD5: ab7c81526be6b0daadab86fff788c383SHA1: c0b1107f2590d2a25637e173d8bb01797b267bd6ANALYSIS DATE: 2022-11-01T16:20:21ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – ransomware – d44f62f8c8573d75a1f78989cc7bf2d7

November 1, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: d44f62f8c8573d75a1f78989cc7bf2d7SHA1: e051ef1f33fc779599d385ca9b9ab0548d7fc331ANALYSIS DATE: 2022-11-01T16:28:41ZTTPS: T1082, T1012 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – ransomware – fbbb40defd1c971112be14f1de681c0c

November 1, 2022

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: fbbb40defd1c971112be14f1de681c0cSHA1: 88902d65274f40f3dd180c25d38f4bfec5cdeac1ANALYSIS DATE: 2022-11-01T17:00:17ZTTPS: T1005, T1081 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – djvu – c61348069c1c45629fab6ba3a5eb4e95

November 1, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: c61348069c1c45629fab6ba3a5eb4e95SHA1: 38d45f0e66893726023c2c760c8df5cc6b634071ANALYSIS DATE: 2022-11-01T17:00:26ZTTPS: T1082, T1053, T1005, T1081, T1012, T1222,...

Malware Analysis – djvu – b4328f4d470ae547a347d14f7bfec5f2

November 1, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, botnet:mario23_10, botnet:slovarik1btc, backdoor, discovery, infostealer, ransomware, trojanMD5: b4328f4d470ae547a347d14f7bfec5f2SHA1: 8c523be9ac76d68cbcf12e450cbbbe5e770d4146ANALYSIS DATE: 2022-11-01T17:26:43ZTTPS: T1053, T1012,...

Malware Analysis – djvu – 000ba535803f06084c9b4aec05b10c6c

November 1, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 000ba535803f06084c9b4aec05b10c6cSHA1: 501c1308dcbce9000f70143bb31e785f3d389c11ANALYSIS DATE: 2022-11-01T17:50:27ZTTPS: T1222, T1012, T1082, T1005, T1081, T1060,...

Year: 2022

Malware Analysis – djvu – dd440b0a64f6268557a038f74d0710e4

Malware Analysis – discovery – 6691c3106d5319f108114a48f5177396

Malware Analysis – djvu – 9cdaeb6cbff19813f4981abbdab1d1ee

LockBit 3.0 gang claims to have stolen data from Thales

Malware Analysis – chaos – 5aa991c89a6564a3c6351052e157f9d8

Malware Analysis – amadey – 682844b02e1f64362575bb820cfc7346

Malware Analysis – djvu – e996dac5e194b1c3562f70ee411a9d86

Malware Analysis – amadey – 5be10047bb7742addd4cdfc5acabb13c

Malware Analysis – djvu – 01f463bb367a066c24c75ca8a49cdd63

Malware Analysis – wannacry – a0b5f65e56a84da5b8ddd75a76e633dd

Malware Analysis – evasion – d3f4a4778119ac034157cdc7c1ff850e

Malware Analysis – wannacry – ab7c81526be6b0daadab86fff788c383

Malware Analysis – ransomware – d44f62f8c8573d75a1f78989cc7bf2d7

Malware Analysis – ransomware – fbbb40defd1c971112be14f1de681c0c

Malware Analysis – djvu – c61348069c1c45629fab6ba3a5eb4e95

Malware Analysis – djvu – b4328f4d470ae547a347d14f7bfec5f2

Malware Analysis – djvu – 000ba535803f06084c9b4aec05b10c6c

CISA: CISA Releases One Industrial Control Systems Advisory

CISA: CISA Upgrades to TLP 2.0

Experts warn of critical RCE in ConnectWise Server Backup Solution

Ransomware activity and network access sales in Q3 2022

Cicd-Goat – A Deliberately Vulnerable CI/CD Environment

Cobalt Stike Beacon Detected – 172[.]245[.]27[.]233:8080

Cobalt Stike Beacon Detected – 5[.]44[.]42[.]48:443

[SARCOMA] – Ransomware Victim: Jacquet Weston Engineering

[SARCOMA] – Ransomware Victim: compass-underwriting-ltd

[SARCOMA] – Ransomware Victim: cana group corp

[LYNX] – Ransomware Victim: Sentinel Systems

[LYNX] – Ransomware Victim: Angotti & Reilly

You may have missed