Year: 2022

Malware Analysis – eternity – 27063953e8334bc1d395274a3ff8e66f

December 28, 2022

Score: 10 MALWARE FAMILY: eternityTAGS:family:eternity, evasion, ransomwareMD5: 27063953e8334bc1d395274a3ff8e66fSHA1: c99c0c640f2cf83d15a5d77851b01f46351925dbANALYSIS DATE: 2022-12-28T09:21:24ZTTPS: T1107, T1490, T1018, T1053, T1082 ScoreMeaningExample10Known badA malware family...

Malware Analysis – ransomware – 4f6173eb23deaff1670b1b2f0f6882fe

December 28, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 4f6173eb23deaff1670b1b2f0f6882feSHA1: 8b0aa4a785803ebcd71fa71dfe5b3671c1ab6c13ANALYSIS DATE: 2022-12-28T09:21:54ZTTPS: T1005, T1081 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Cobalt Stike Beacon Detected – 134[.]209[.]72[.]110:80

December 28, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – 8bcebcc40ee67875c2c3fa3007d65944

December 28, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 8bcebcc40ee67875c2c3fa3007d65944SHA1: 5eea1993e7fa9d3786a64cea8116e6c51ff2533dANALYSIS DATE: 2022-12-28T10:11:24ZTTPS: T1012, T1005, T1081, T1222, T1082, T1060,...

Cobalt Stike Beacon Detected – 39[.]105[.]168[.]110:9443

December 28, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – 986637d89c3260cc32e19f5559e44fe9

December 28, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 986637d89c3260cc32e19f5559e44fe9SHA1: c8ff5c2d89107a6db7548386428a001ab948b8f5ANALYSIS DATE: 2022-12-28T09:50:52ZTTPS: T1005, T1081, T1012, T1082, T1222, T1053,...

Cobalt Stike Beacon Detected – 164[.]90[.]152[.]132:443

December 28, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – discovery – b201b3d3c587847475d569e7226810c5

December 28, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, ransomwareMD5: b201b3d3c587847475d569e7226810c5SHA1: 2376e7f5f2fa4ef0d38e1dd69840ac8c26bd6941ANALYSIS DATE: 2022-12-28T10:08:40ZTTPS: T1012, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – spyware – 0958f9982100af9d8e172524fdc0d47c

December 28, 2022

Score: 7 MALWARE FAMILY: spywareTAGS:spyware, stealerMD5: 0958f9982100af9d8e172524fdc0d47cSHA1: ce560a4372421d282eb799c7e4a9e68c1f01d526ANALYSIS DATE: 2022-12-28T09:22:37ZTTPS: T1005, T1081 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Cobalt Stike Beacon Detected – 209[.]127[.]27[.]17:80

December 28, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 39[.]98[.]115[.]22:8988

December 28, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 39[.]101[.]67[.]58:443

December 28, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 120[.]48[.]139[.]240:8011

December 28, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Daily Vulnerability Trends: Wed Dec 28 2022

December 28, 2022

Daily Vulnerability Trends (sourced from VulnMon) CVE NAMECVE DescriptionCVE-2022-29455DOM-based Reflected Cross-Site Scripting (XSS) vulnerability in Elementor's Elementor Website Builder plugin

BlueNoroff introduces new methods bypassing MoTW

December 28, 2022

BlueNoroff group is a financially motivated threat actor eager to profit from its cyberattack capabilities. We have published technical details...

BlackCat/ALPHV Ransomware Victim: ELOTECH – HACKED AND MORE THEN 100 GB DATA LEAKED!

December 28, 2022

BlackCat / ALPHV Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the...

Malware Analysis – – cd183f486dd18961805e9f4badecce69

December 28, 2022

Score: 6 MALWARE FAMILY: TAGS:MD5: cd183f486dd18961805e9f4badecce69SHA1: 55eadf655f975bc3652ed3f26d5424e53fd1d4d9ANALYSIS DATE: 2022-12-28T03:49:26ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – discovery – 4234902e03d0de35cfdf2e325804a4b0

December 28, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: 4234902e03d0de35cfdf2e325804a4b0SHA1: e339fc0e19bbc25c5e9c32b5dbaee48b54c92f2bANALYSIS DATE: 2022-12-28T04:31:59ZTTPS: T1060, T1112, T1012, T1082, T1130 ScoreMeaningExample10Known badA malware family...

Malware Analysis – discovery – f62c3007eccf750d07e911fd219c2b1c

December 28, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, evasion, persistence, ransomware, spyware, stealer, trojanMD5: f62c3007eccf750d07e911fd219c2b1cSHA1: 5fe513b3d9db6a8f74613eaac7ee2ae6a75465e7ANALYSIS DATE: 2022-12-28T05:25:52ZTTPS: T1082, T1012, T1005, T1081, T1112,...

Malware Analysis – djvu – 614fc2099e6a6f27944ece6715fd46d9

December 28, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 614fc2099e6a6f27944ece6715fd46d9SHA1: d69a68f031f5679d1b4672aefe21423b37d87b4dANALYSIS DATE: 2022-12-28T05:13:47ZTTPS: T1005, T1081, T1012, T1082, T1060, T1112,...

Royal Ransomware Victim: www[.]buildersmutual[.]com

December 28, 2022

RoyalRansomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the...

BlackCat/ALPHV Ransomware Victim: ELOTECH – HACKED AND MORE THEN 100 GB DATA LEAKED!

December 28, 2022

BlackCat / ALPHV Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the...

Cobalt Stike Beacon Detected – 192[.]3[.]231[.]208:8443

December 28, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – evasion – 4b42f986dac108ed8b7751a17f402c12

December 28, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 4b42f986dac108ed8b7751a17f402c12SHA1: 8df669199a90dffb150033f2aa304932b4c56ce5ANALYSIS DATE: 2022-12-27T21:02:02ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Year: 2022

Malware Analysis – eternity – 27063953e8334bc1d395274a3ff8e66f

Malware Analysis – ransomware – 4f6173eb23deaff1670b1b2f0f6882fe

Cobalt Stike Beacon Detected – 134[.]209[.]72[.]110:80

Malware Analysis – djvu – 8bcebcc40ee67875c2c3fa3007d65944

Cobalt Stike Beacon Detected – 39[.]105[.]168[.]110:9443

Malware Analysis – djvu – 986637d89c3260cc32e19f5559e44fe9

Cobalt Stike Beacon Detected – 164[.]90[.]152[.]132:443

Malware Analysis – discovery – b201b3d3c587847475d569e7226810c5

Malware Analysis – spyware – 0958f9982100af9d8e172524fdc0d47c

Cobalt Stike Beacon Detected – 209[.]127[.]27[.]17:80

Cobalt Stike Beacon Detected – 39[.]98[.]115[.]22:8988

Cobalt Stike Beacon Detected – 39[.]101[.]67[.]58:443

Cobalt Stike Beacon Detected – 120[.]48[.]139[.]240:8011

Daily Vulnerability Trends: Wed Dec 28 2022

BlueNoroff introduces new methods bypassing MoTW

BlackCat/ALPHV Ransomware Victim: ELOTECH – HACKED AND MORE THEN 100 GB DATA LEAKED!

Malware Analysis – – cd183f486dd18961805e9f4badecce69

Malware Analysis – discovery – 4234902e03d0de35cfdf2e325804a4b0

Malware Analysis – discovery – f62c3007eccf750d07e911fd219c2b1c

Malware Analysis – djvu – 614fc2099e6a6f27944ece6715fd46d9

Royal Ransomware Victim: www[.]buildersmutual[.]com

BlackCat/ALPHV Ransomware Victim: ELOTECH – HACKED AND MORE THEN 100 GB DATA LEAKED!

Cobalt Stike Beacon Detected – 192[.]3[.]231[.]208:8443

Malware Analysis – evasion – 4b42f986dac108ed8b7751a17f402c12

Mirai Botnet Leverages Zero-Day Exploits in Routers and Smart Devices

Casio Security Breach: Employee and Customer Data Leaked in Ransomware Attack

Remote Access Tools Used by Fraudsters Claiming to be Government Officials

Microsoft 365 Phishing Scam Targets PayPal Users – What You Need to Know

Cyber Trust Mark for IoT Devices: Enhancing Security Standards

You may have missed