Month: January 2023

Malware Analysis – chaos – d36637d2e08e4c001d39699cedb6248a

January 6, 2023

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, evasion, ransomwareMD5: d36637d2e08e4c001d39699cedb6248aSHA1: d2b4f5326781dce97cadf039d3e58124c838cb20ANALYSIS DATE: 2023-01-06T17:45:47ZTTPS: T1490, T1059, T1107, T1082 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – evasion – 8da384b2427b8397a5934182c159c257

January 6, 2023

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 8da384b2427b8397a5934182c159c257SHA1: 7bcd2d32a19c1ac7bd014dc9e64b806fdff5f5deANALYSIS DATE: 2023-01-06T17:46:43ZTTPS: T1490, T1491, T1112, T1012, T1120, T1082, T1107 ScoreMeaningExample10Known badA malware...

Malware Analysis – djvu – 4c3380ed58f4ee04d6638af670f3d834

January 6, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 4c3380ed58f4ee04d6638af670f3d834SHA1: 8ebb5a19d4163ea8231b1ff4de7b23c7e5d67919ANALYSIS DATE: 2023-01-06T17:52:50ZTTPS: T1082, T1012, T1060, T1112,...

Vice Society Ransomware Victim: LetMeRepair

January 6, 2023

Vice Society Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Vice Society Ransomware Victim: Xavier University of Louisiana

January 6, 2023

Vice Society Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Vice Society Ransomware Victim: Sub-drill Supply

January 6, 2023

Vice Society Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Vice Society Ransomware Victim: PROQUINAL Spradling Group

January 6, 2023

Vice Society Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Royal Ransomware Victim: Bevolution Group

January 6, 2023

RoyalRansomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the...

Cobalt Stike Beacon Detected – 193[.]27[.]14[.]214:80

January 6, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 43[.]143[.]237[.]87:443

January 6, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 139[.]196[.]234[.]164:9998

January 6, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – – fbd028cd6727fa3feda537db1ed703f0

January 6, 2023

Score: 1 MALWARE FAMILY: TAGS:MD5: fbd028cd6727fa3feda537db1ed703f0SHA1: 99b2f3a80a07b920ff18ee6f7234d2ffe2574871ANALYSIS DATE: 2023-01-06T09:03:56ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – 9320af1b7b22fdd4c17cca870c4ea0c4

January 6, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, stealerMD5: 9320af1b7b22fdd4c17cca870c4ea0c4SHA1: 2294407a9dedb18b7e633614761da98b35b741c6ANALYSIS DATE: 2023-01-06T09:01:03ZTTPS: T1130, T1112, T1060, T1222, T1082,...

Malware Analysis – spyware – 9c60113d492ebcf89e2b36af378654cf

January 6, 2023

Score: 8 MALWARE FAMILY: spywareTAGS:spyware, stealerMD5: 9c60113d492ebcf89e2b36af378654cfSHA1: 4b70fda198e03417c032e2f5675bc6d7b9890ec1ANALYSIS DATE: 2023-01-06T09:06:02ZTTPS: T1082, T1005, T1081 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – amadey – daa0d1b1bd828f4343b830f047343993

January 6, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:vidar, botnet:19, backdoor, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: daa0d1b1bd828f4343b830f047343993SHA1: 036b65fab9706cb52fcc7b59032d49b26bef1b7eANALYSIS DATE:...

Malware Analysis – djvu – d13c8f95955973410a07ba397d6a09d7

January 6, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: d13c8f95955973410a07ba397d6a09d7SHA1: cd2457e2d32449e0fa823c1b86d9e56df3ff448fANALYSIS DATE: 2023-01-06T10:11:56ZTTPS: T1012, T1082, T1222, T1005,...

Malware Analysis – djvu – c0ff95f938e709e83f5872c0630a9b67

January 6, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, stealerMD5: c0ff95f938e709e83f5872c0630a9b67SHA1: 35254c0de46398670b5a9b4c6b9e6e9a953cc402ANALYSIS DATE: 2023-01-06T10:01:07ZTTPS: T1130, T1112, T1060, T1222, T1082,...

Malware Analysis – discovery – cea6e89b7b3774762f7f24147665da5b

January 6, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: cea6e89b7b3774762f7f24147665da5bSHA1: bbeb91e4098491ff0a7f5b9dfea902a81c917d05ANALYSIS DATE: 2023-01-06T09:26:08ZTTPS: T1012, T1082, T1112, T1042, T1060 ScoreMeaningExample10Known badA malware family...

Malware Analysis – djvu – 5c24f6f6c86564db7ea71bf01ec5dbc5

January 6, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 5c24f6f6c86564db7ea71bf01ec5dbc5SHA1: e0c5ac9895ba2621bb3ad63a3740d678d137dc59ANALYSIS DATE: 2023-01-06T11:43:32ZTTPS: T1060, T1112, T1053, T1012,...

Malware Analysis – asyncrat – 19c677bb8cda5703f42c143bb4251e6a

January 6, 2023

Score: 10 MALWARE FAMILY: asyncratTAGS:family:asyncrat, botnet:default, discovery, evasion, persistence, ransomware, rat, spyware, stealer, trojanMD5: 19c677bb8cda5703f42c143bb4251e6aSHA1: ad85336a7304a4e58b2a4f5c40b02f578aa00923ANALYSIS DATE: 2023-01-06T10:47:46ZTTPS: T1012, T1082,...

Malware Analysis – amadey – c3b88f8dfbc849ad2a6d3253febe5905

January 6, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:vidar, botnet:19, backdoor, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: c3b88f8dfbc849ad2a6d3253febe5905SHA1: 88665567cd41b6d9a950727c16e038712dc08a07ANALYSIS DATE:...

Malware Analysis – wannacry – 115b1d97402bc50dacb74ba73c7464d2

January 6, 2023

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, ransomware, wormMD5: 115b1d97402bc50dacb74ba73c7464d2SHA1: 799abb0d4067ec605126cd40ce52949510a60cf7ANALYSIS DATE: 2023-01-06T11:00:52ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Hitachi Energy FOXMAN-UN and UNEM weak security | CVE-2022-3927

January 6, 2023

NAME__________Hitachi Energy FOXMAN-UN and UNEM weak securityPlatforms Affected:Hitachi Energy FOXMAN-UN R16A Hitachi Energy FOXMAN-UN R15B Hitachi Energy FOXMAN-UN R15A Hitachi...

MediaTek Android privilege escalation | CVE-2022-32665

January 6, 2023

NAME__________MediaTek Android privilege escalationPlatforms Affected:Risk Level:9.8Exploitability:UnprovenConsequences:Gain Privilege DESCRIPTION__________MediaTek Android could allow a remote attacker to gain elevated privileges on the...

Month: January 2023

Malware Analysis – chaos – d36637d2e08e4c001d39699cedb6248a

Malware Analysis – evasion – 8da384b2427b8397a5934182c159c257

Malware Analysis – djvu – 4c3380ed58f4ee04d6638af670f3d834

Vice Society Ransomware Victim: LetMeRepair

Vice Society Ransomware Victim: Xavier University of Louisiana

Vice Society Ransomware Victim: Sub-drill Supply

Vice Society Ransomware Victim: PROQUINAL Spradling Group

Royal Ransomware Victim: Bevolution Group

Cobalt Stike Beacon Detected – 193[.]27[.]14[.]214:80

Cobalt Stike Beacon Detected – 43[.]143[.]237[.]87:443

Cobalt Stike Beacon Detected – 139[.]196[.]234[.]164:9998

Malware Analysis – – fbd028cd6727fa3feda537db1ed703f0

Malware Analysis – djvu – 9320af1b7b22fdd4c17cca870c4ea0c4

Malware Analysis – spyware – 9c60113d492ebcf89e2b36af378654cf

Malware Analysis – amadey – daa0d1b1bd828f4343b830f047343993

Malware Analysis – djvu – d13c8f95955973410a07ba397d6a09d7

Malware Analysis – djvu – c0ff95f938e709e83f5872c0630a9b67

Malware Analysis – discovery – cea6e89b7b3774762f7f24147665da5b

Malware Analysis – djvu – 5c24f6f6c86564db7ea71bf01ec5dbc5

Malware Analysis – asyncrat – 19c677bb8cda5703f42c143bb4251e6a

Malware Analysis – amadey – c3b88f8dfbc849ad2a6d3253febe5905

Malware Analysis – wannacry – 115b1d97402bc50dacb74ba73c7464d2

Hitachi Energy FOXMAN-UN and UNEM weak security | CVE-2022-3927

MediaTek Android privilege escalation | CVE-2022-32665

[LOCKBIT3] – Ransomware Victim: madison-home[.]com

[CHORT] – Ransomware Victim: sheboyganwi[.]gov

[QILIN] – Ransomware Victim: Zimmerman & Frachtman PA Law Firm

[QILIN] – Ransomware Victim: Calvert Home Mortgage Investment

[QILIN] – Ransomware Victim: LBCO Contracting LTD

You may have missed