Year: 2022

Malware Analysis – blackbasta – 2ec0c42040440cddd1ff99ebe2b7d94f

December 7, 2022

Score: 10 MALWARE FAMILY: blackbastaTAGS:family:blackbasta, ransomwareMD5: 2ec0c42040440cddd1ff99ebe2b7d94fSHA1: bb1f269fc9c136d6caeda579482b2b8548795625ANALYSIS DATE: 2022-12-07T11:50:00ZTTPS: T1107, T1490, T1491, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – dd2193abb2f82d60a7c2bf612c7ad6a0

December 7, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: dd2193abb2f82d60a7c2bf612c7ad6a0SHA1: 3e6de2aae3aefd649d267c4ee43f9b0bce0db667ANALYSIS DATE: 2022-12-07T11:26:06ZTTPS: T1060, T1112, T1130, T1222,...

Malware Analysis – djvu – d00508b99c98be2802ac83a02f316c3f

December 7, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: d00508b99c98be2802ac83a02f316c3fSHA1: d574649b203bd71556b11f212816f1b5baf23b0fANALYSIS DATE: 2022-12-07T11:26:06ZTTPS: T1005, T1081, T1012, T1222,...

Malware Analysis – djvu – a62132d1123af4e31d44171ab47046a9

December 7, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: a62132d1123af4e31d44171ab47046a9SHA1: 65344c174a79c30a4075455d106173ea2cefec3eANALYSIS DATE: 2022-12-07T11:13:13ZTTPS: T1060, T1112, T1222, T1082, T1012 ScoreMeaningExample10Known badA malware...

Year: 2022

Malware Analysis – blackbasta – 2ec0c42040440cddd1ff99ebe2b7d94f

Malware Analysis – djvu – dd2193abb2f82d60a7c2bf612c7ad6a0

Malware Analysis – djvu – d00508b99c98be2802ac83a02f316c3f

Malware Analysis – djvu – a62132d1123af4e31d44171ab47046a9

Lazy Mouse app for Android code execution | CVE-2022-45481

House Rental System file upload | CVE-2022-4276

GitPython code execution | CVE-2022-24439

PC Keyboard WiFi and Bluetooth app for Android code execution | CVE-2022-45479

Microsoft Edge (Chromium-based) privilege escalation | CVE-2022-44708

Alarm instance management command execution | CVE-2022-45462

Cacti command injection | CVE-2022-46169

Daily Vulnerability Trends: Wed Dec 07 2022

Sophos fixed a critical flaw in its Sophos Firewall version 19.5

Main phishing and scamming trends and techniques

Royal Ransomware Victim: Adams-Friendship Area School District

BlackCat/ALPHV Ransomware Victim: pro office Büro + Wohnkultur GmbH

LockBit 3.0 Ransomware Victim: myersontooth[.]com

LockBit 3.0 Ransomware Victim: g4s[.]com

Cobalt Stike Beacon Detected – 194[.]135[.]24[.]250:443

Cobalt Stike Beacon Detected – 154[.]209[.]74[.]234:443

Cobalt Stike Beacon Detected – 31[.]172[.]83[.]154:80

BlackCat/ALPHV Ransomware Victim: pro office Büro + Wohnkultur GmbH

Cobalt Stike Beacon Detected – 121[.]36[.]165[.]78:443

Cobalt Stike Beacon Detected – 101[.]43[.]116[.]175:8989

CVE Alert: CVE-2024-12527

CVE Alert: CVE-2024-12519

CVE Alert: CVE-2024-12520

CVE Alert: CVE-2024-12407

CVE Alert: CVE-2024-12412

You may have missed