Month: January 2023

Eta code execution | CVE-2022-25967

January 31, 2023

NAME__________Eta code executionPlatforms Affected:Eta Eta 1.14.2Risk Level:8.1Exploitability:Proof of ConceptConsequences:Gain Access DESCRIPTION__________Eta could allow a remote attacker to execute arbitrary code...

Discourse denial of service | CVE-2023-23621

January 31, 2023

NAME__________Discourse denial of servicePlatforms Affected:Risk Level:8.6Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________Discourse is vulnerable to a denial of service, caused by a regular...

BaiCells Nova 227, Nova 233, Nova 243, and Nova 246 LTE TDD eNodeB devices code execution | CVE-2023-24508

January 31, 2023

NAME__________BaiCells Nova 227, Nova 233, Nova 243, and Nova 246 LTE TDD eNodeB devices code executionPlatforms Affected:BaiCells Nova 246 RTS/RTD...

OpenMage LTS code execution | CVE-2021-41144

January 31, 2023

NAME__________OpenMage LTS code executionPlatforms Affected:OpenMage Magento-lts 20.0.8 OpenMage Magento-lts 19.4.12Risk Level:8.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________OpenMage LTS could allow a remote authenticated attacker...

OpenMage LTS command execution | CVE-2021-39217

January 31, 2023

NAME__________OpenMage LTS command executionPlatforms Affected:OpenMage Magento-lts 20.0.8 OpenMage Magento-lts 19.4.12Risk Level:9.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________OpenMage LTS could allow a remote authenticated attacker...

QNAP running QTS and running QTS code execution | CVE-2022-27596

January 31, 2023

NAME__________QNAP running QTS and running QTS code executionPlatforms Affected:QNAP QTS 5.0.1 QNAP QuTS hero h5.0.1Risk Level:9.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________QNAP running QTS...

Daily Vulnerability Trends: Tue Jan 31 2023

January 31, 2023

Daily Vulnerability Trends (sourced from VulnMon) CVE NAMECVE DescriptionCVE-2021-35394Realtek Jungle SDK version v2.x up to v3.4.14B provides a diagnostic tool...

Malware Analysis – smokeloader – 796eec633508016212d9c0fba6ebcb34

January 31, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 796eec633508016212d9c0fba6ebcb34SHA1: 6f7f80791fe510406e741aa4e857311119135424ANALYSIS DATE: 2023-01-31T03:14:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – banker – 79c49abc1b3f7fd73ab505f4d7632963

January 31, 2023

Score: 8 MALWARE FAMILY: bankerTAGS:banker, evasion, ransomwareMD5: 79c49abc1b3f7fd73ab505f4d7632963SHA1: cf8c728f48c805bd9def4128f9d1b3aa22c78b90ANALYSIS DATE: 2023-01-31T03:30:51ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – discovery – 328ed3428d79bb38ec9d29a5cb27a5a7

January 31, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: 328ed3428d79bb38ec9d29a5cb27a5a7SHA1: cd905b22794ca277a14d512fde28f1c20d01bdabANALYSIS DATE: 2023-01-31T03:30:56ZTTPS: T1012, T1082, T1112, T1042, T1060 ScoreMeaningExample10Known badA malware family...

Malware Analysis – bootkit – 858ee6ceb590822f57d2d98a32e3c5af

January 31, 2023

Score: 8 MALWARE FAMILY: bootkitTAGS:bootkit, discovery, persistenceMD5: 858ee6ceb590822f57d2d98a32e3c5afSHA1: 0cd9e539e919dd0367c1d04e2644bc3e8ad109e5ANALYSIS DATE: 2023-01-31T03:45:42ZTTPS: T1012, T1067, T1130, T1112, T1082 ScoreMeaningExample10Known badA malware family...

Malware Analysis – evasion – e75d7d7af4d7065b289f24922c092847

January 31, 2023

Score: 8 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: e75d7d7af4d7065b289f24922c092847SHA1: 536b17bd6834640aa6adea1ff8607790248f2134ANALYSIS DATE: 2023-01-31T04:14:29ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – evasion – 59d403798663c3cf889cab4605eca33a

January 31, 2023

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 59d403798663c3cf889cab4605eca33aSHA1: 67b18581e8b4476209eabe85361790706e8acf21ANALYSIS DATE: 2023-01-31T03:51:26ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – djvu – 4f7cd4bd04c4b2c6419bab5e4b8cc7ee

January 31, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 4f7cd4bd04c4b2c6419bab5e4b8cc7eeSHA1: c32fdf8831286b78fbb8cb10bd6ae8509740efe4ANALYSIS DATE: 2023-01-31T04:17:37ZTTPS: T1060, T1112, T1005, T1081,...

Malware Analysis – smokeloader – 27bb9abd524480ce1b30123ee769270a

January 31, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 27bb9abd524480ce1b30123ee769270aSHA1: 682cb6bf50f2c662165a241413343c9170d907fbANALYSIS DATE: 2023-01-31T04:30:05ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 54284e6ecb72c4ecd0a4e33c8afe8541

January 31, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 54284e6ecb72c4ecd0a4e33c8afe8541SHA1: 55cf4c0183bdb3f1f2dba397dad8d11a4a219889ANALYSIS DATE: 2023-01-31T05:37:39ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – discovery – 551321ba31ec119801d4a3fb3612cbfe

January 31, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: 551321ba31ec119801d4a3fb3612cbfeSHA1: d169e3d5bb0e3abee31030a6332ded2e7fdf189bANALYSIS DATE: 2023-01-31T05:53:10ZTTPS: T1060, T1012, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Month: January 2023

Eta code execution | CVE-2022-25967

Discourse denial of service | CVE-2023-23621

BaiCells Nova 227, Nova 233, Nova 243, and Nova 246 LTE TDD eNodeB devices code execution | CVE-2023-24508

OpenMage LTS code execution | CVE-2021-41144

OpenMage LTS command execution | CVE-2021-39217

QNAP running QTS and running QTS code execution | CVE-2022-27596

Daily Vulnerability Trends: Tue Jan 31 2023

Malware Analysis – smokeloader – 796eec633508016212d9c0fba6ebcb34

Malware Analysis – banker – 79c49abc1b3f7fd73ab505f4d7632963

Malware Analysis – discovery – 328ed3428d79bb38ec9d29a5cb27a5a7

Malware Analysis – bootkit – 858ee6ceb590822f57d2d98a32e3c5af

Malware Analysis – evasion – e75d7d7af4d7065b289f24922c092847

Malware Analysis – evasion – 59d403798663c3cf889cab4605eca33a

Malware Analysis – djvu – 4f7cd4bd04c4b2c6419bab5e4b8cc7ee

Malware Analysis – smokeloader – 27bb9abd524480ce1b30123ee769270a

Malware Analysis – smokeloader – 54284e6ecb72c4ecd0a4e33c8afe8541

Malware Analysis – discovery – 551321ba31ec119801d4a3fb3612cbfe

Analyzing and remediating a malware infested T95 TV box from Amazon

Winnti APT group docks in Sri Lanka for new campaign

LockBit 3.0 Ransomware Victim: parkavedoors[.]com

LockBit 3.0 Ransomware Victim: tcels[.]or[.]th

LockBit 3.0 Ransomware Victim: geraardsbergen[.]be

LockBit 3.0 Ransomware Victim: 2cara[.]fr

Planet Ice – 240,488 breached accounts

HackerOne Bug Bounty Disclosure: dom-based-cookie-bomb-in-acronis-com-via-x-clickref-get-parameter-mr-medi

HackerOne Bug Bounty Disclosure: external-storage-global-credentials-returned-to-the-client-side-in-plaintext-tuyenee

CISA: CISA Releases Seven Industrial Control Systems Advisories

CISA: CISA Releases Insights from Red Team Assessment of a U.S. Critical Infrastructure Sector Organization

[RANSOMHUB] – Ransomware Victim: www[.]damcapital[.]in

You may have missed