Month: January 2023

Malware Analysis – djvu – c82d642d03203afc33ec1bf6c736b5c5

January 25, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: c82d642d03203afc33ec1bf6c736b5c5SHA1: 45385bbb8d54c5adc84e49450c7ec1f69b60906bANALYSIS DATE: 2023-01-25T03:43:41ZTTPS: T1012, T1082, T1005, T1081,...

Malware Analysis – darkcomet – 0370e5464c8f4718128f18548ca236aa

January 25, 2023

Score: 10 MALWARE FAMILY: darkcometTAGS:family:darkcomet, ransomware, rat, trojanMD5: 0370e5464c8f4718128f18548ca236aaSHA1: a7dc7c6526971d70b887b937bd6965ee82e5fdd0ANALYSIS DATE: 2023-01-25T03:51:31ZTTPS: T1012, T1082, T1491, T1112 ScoreMeaningExample10Known badA malware family...

Malware Analysis – wannacry – e8340564caba7a2635af2c79cb7103eb

January 25, 2023

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, bootkit, discovery, persistence, ransomware, spyware, stealer, wormMD5: e8340564caba7a2635af2c79cb7103ebSHA1: 8c62c79508abe5ffa36608d1846dcb20b2a27137ANALYSIS DATE: 2023-01-25T05:05:54ZTTPS: T1112, T1060, T1222, T1012,...

Malware Analysis – wannacry – bc5ee0bcefce9d21f9a17c60a19c2b18

January 25, 2023

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, persistence, ransomware, spyware, stealer, wormMD5: bc5ee0bcefce9d21f9a17c60a19c2b18SHA1: 6b207ad03911865694e5f4c3059c2a5f0242c6daANALYSIS DATE: 2023-01-25T05:04:09ZTTPS: T1491, T1112, T1060, T1107, T1490,...

Malware Analysis – djvu – 333bcc4a842670afc9f50160d7e3055c

January 25, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 333bcc4a842670afc9f50160d7e3055cSHA1: b72cdacbb3e38a705344cdaab0454996563e98fdANALYSIS DATE: 2023-01-25T05:09:28ZTTPS: T1082, T1012, T1005, T1081,...

Malware Analysis – djvu – f297068017e333ac96d70756a87babf6

January 25, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, stealerMD5: f297068017e333ac96d70756a87babf6SHA1: 6dbfc207b81246788e0cab826b3dd96a31dfb276ANALYSIS DATE: 2023-01-25T04:11:03ZTTPS: T1130, T1112, T1060, T1222, T1082...

News

US-CERT Bulletin (SB23-023):Vulnerability Summary for the Week of January 16, 2023

January 24, 2023

The CISA Vulnerability Bulletin provides a summary of new vulnerabilities that have been recorded by the National Institute of Standards...

Month: January 2023

Malware Analysis – djvu – c82d642d03203afc33ec1bf6c736b5c5

Malware Analysis – darkcomet – 0370e5464c8f4718128f18548ca236aa

Malware Analysis – wannacry – e8340564caba7a2635af2c79cb7103eb

Malware Analysis – wannacry – bc5ee0bcefce9d21f9a17c60a19c2b18

Malware Analysis – djvu – 333bcc4a842670afc9f50160d7e3055c

Malware Analysis – djvu – f297068017e333ac96d70756a87babf6

GoTo says hackers stole customers’ backups and encryption key

Hackers use Golang source code interpreter to evade detection

Microsoft shares workaround for unresponsive Windows Start Menu

VMware fixes critical security bugs in vRealize log analysis tool

75k WordPress sites impacted by critical online course plugin flaws

Russia’s largest ISP says 2022 broke all DDoS attack records

FBI: North Korean hackers stole $100 million in Harmony crypto hack

Ransomware access brokers use Google ads to breach your network

Riot Games receives ransom demand from hackers, refuses to pay

U.S. sues Google for abusing dominance over online ad market

Cobalt Stike Beacon Detected – 179[.]43[.]162[.]31:80

Cobalt Stike Beacon Detected – 198[.]154[.]94[.]36:443

Cobalt Stike Beacon Detected – 3[.]73[.]0[.]134:80

Cobalt Stike Beacon Detected – 120[.]48[.]99[.]90:80

Cobalt Stike Beacon Detected – 91[.]213[.]50[.]35:443

Cobalt Stike Beacon Detected – 43[.]138[.]21[.]132:8808

Brute Ratel C4 Detected – 54[.]249[.]216[.]44:80

US-CERT Bulletin (SB23-023):Vulnerability Summary for the Week of January 16, 2023

CISA: Foreign Threat Actor Conducting Large-Scale Spearphishing Campaign with RDP Attachments

[RANSOMHUB] – Ransomware Victim: blr[.]com

HackerOne Bug Bounty Disclosure: std-process-command-batch-files-argument-escaping-could-be-bypassed-with-trailing-whitespace-or-periods–xpl-r-r

[LOCKBIT3] – Ransomware Victim: madison-home[.]com

[CHORT] – Ransomware Victim: sheboyganwi[.]gov

You may have missed