Month: January 2023

Malware Analysis – chaos – 5cf2f6510103b9abcd69d00f35eca969

January 30, 2023

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, evasion, persistence, ransomware, spyware, stealerMD5: 5cf2f6510103b9abcd69d00f35eca969SHA1: 9f6f248b048238a6550eee4e2b57b7159245fd92ANALYSIS DATE: 2023-01-30T05:25:03ZTTPS: T1490, T1059, T1107, T1005, T1081, T1082,...

Vice Society Ransomware Victim: NPTC Group of Colleges

January 30, 2023

Vice Society Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

c95fd287bc0cd7ad3e59a1c6366ef24692369502a2465241ad648a39e5e6c43a

Yaralyzer – Visually Inspect And Force Decode YARA And Regex Matches Found In Both Binary And Text Data, With Colors

January 30, 2023

Visually inspect all of the regex matches (and their sexier, more cloak and dagger cousins, the YARA matches) found in...

0a6d5f23e2d69c5e1cf244dc0e4f17cd3fdef1c791000dc34cbc4ad95383e9e6

BlueHound – Tool That Helps Blue Teams Pinpoint The Security Issues That Actually Matter

January 30, 2023

BlueHound is an open-source tool that helps blue teams pinpoint the security issues that actually matter. By combining information about...

SSTImap – Automatic SSTI Detection Tool With Interactive Interface

January 30, 2023

SSTImap is a penetration testing software that can check websites for Code Injection and Server-Side Template Injection vulnerabilities and...

Vice Society Ransomware Victim: Seguros Equinoccial

January 29, 2023

Vice Society Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Vice Society Ransomware Victim: NPTC Group of Colleges

January 29, 2023

Vice Society Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

HackerOne Bug Bounty Disclosure: rails-actionview-sanitize-helper-bypass-leading-to-xss-using-svg-tag-byhaqpl

January 29, 2023

Programme HackerOne Internet Bug Bounty Internet Bug Bounty Submitted by haqpl haqpl Report Rails ActionView sanitize helper bypass leading to...

LockBit 3.0 Ransomware Victim: azliver[.]com

January 29, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Vice Society Ransomware Victim: Seguros Equinoccial

January 29, 2023

Vice Society Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Malware Analysis – djvu – a3dd84a411b7edddae84278455400dd5

January 29, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: a3dd84a411b7edddae84278455400dd5SHA1: 4e9ba9788414d152ae656adf75939d3724c4ec0eANALYSIS DATE: 2023-01-29T09:23:23ZTTPS: T1053, T1012, T1060, T1112,...

Malware Analysis – ransomware – fee7c379f3a555c5c821e872ec384a91

January 29, 2023

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: fee7c379f3a555c5c821e872ec384a91SHA1: 7346e2e29faddd63ae5c610c07acab46b2b1b176ANALYSIS DATE: 2023-01-29T09:48:34ZTTPS: T1107, T1490, T1005, T1081 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – – fc50e05b611db89a9c7eb359e68ebc5f

January 29, 2023

Score: 10 MALWARE FAMILY: TAGS:MD5: fc50e05b611db89a9c7eb359e68ebc5fSHA1: 72e31f940f1214e1c36a34a69b53b0d07d4c61efANALYSIS DATE: 2023-01-29T09:34:19ZTTPS: T1012, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – smokeloader – 84afdad4a70a6122c3f157100a197db7

January 29, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 84afdad4a70a6122c3f157100a197db7SHA1: 22afcb3520b8bfe314e7f505ccee14ae81f8e547ANALYSIS DATE: 2023-01-29T09:49:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – d16e82ba2c319750e888f763d98a3a8c

January 29, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:19, backdoor, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: d16e82ba2c319750e888f763d98a3a8cSHA1: f2be4e0a2b06c80db9f3320b7db1c8c15e80aa19ANALYSIS DATE: 2023-01-29T10:48:08ZTTPS:...

Malware Analysis – djvu – f6d4d4b428393d0d8b55165c2a9076dd

January 29, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: f6d4d4b428393d0d8b55165c2a9076ddSHA1: 75a3f25169fd56e7932a5ddfc3ec7616558791f1ANALYSIS DATE: 2023-01-29T11:05:05ZTTPS: T1060, T1112, T1082, T1005,...

Malware Analysis – – 45f3f9b201644ddadf6204497c9adb49

January 29, 2023

Score: 3 MALWARE FAMILY: TAGS:MD5: 45f3f9b201644ddadf6204497c9adb49SHA1: 78a9c9c95fceaa63083eb466d013c16da9c07f4cANALYSIS DATE: 2023-01-29T09:54:56ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – discovery – 4b51df4028f1d801c45f07daa07d9c90

January 29, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: 4b51df4028f1d801c45f07daa07d9c90SHA1: 0a46c206f4abd891bb67d9ebfd55d572aa0456d3ANALYSIS DATE: 2023-01-29T11:01:21ZTTPS: T1012, T1082, T1112, T1042, T1060 ScoreMeaningExample10Known badA malware family...

Cobalt Stike Beacon Detected – 47[.]244[.]167[.]171:4545

January 29, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – spyware – 5e887fdac8a3cac0b047a737043789a8

January 29, 2023

Score: 7 MALWARE FAMILY: spywareTAGS:spyware, stealerMD5: 5e887fdac8a3cac0b047a737043789a8SHA1: 8c9745138d835b783278cb61170a7153bb003784ANALYSIS DATE: 2023-01-29T11:17:02ZTTPS: T1005, T1081 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Cobalt Stike Beacon Detected – 20[.]189[.]74[.]59:8443

January 29, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – smokeloader – da627411e7e85229355ed325520a7d4e

January 29, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: da627411e7e85229355ed325520a7d4eSHA1: 3a603f52b7285be51b1533815eecc67b0447af35ANALYSIS DATE: 2023-01-29T11:35:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – discovery – 360ef53ce1b09b03998bf2ab743f7dc7

January 29, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomware, spyware, stealerMD5: 360ef53ce1b09b03998bf2ab743f7dc7SHA1: 9166c3760b1d1cf9a395e344858e4e01158795bcANALYSIS DATE: 2023-01-29T11:09:44ZTTPS: T1060, T1012, T1005, T1081, T1082, T1059, T1102,...

Malware Analysis – – bfe6ee8069f6e7c572382a97fd16d104

January 29, 2023

Score: 3 MALWARE FAMILY: TAGS:MD5: bfe6ee8069f6e7c572382a97fd16d104SHA1: e017c8f52a53cd0374d7867af14e567b79d6cffdANALYSIS DATE: 2023-01-29T11:33:49ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Month: January 2023

Malware Analysis – chaos – 5cf2f6510103b9abcd69d00f35eca969

Vice Society Ransomware Victim: NPTC Group of Colleges

Yaralyzer – Visually Inspect And Force Decode YARA And Regex Matches Found In Both Binary And Text Data, With Colors

BlueHound – Tool That Helps Blue Teams Pinpoint The Security Issues That Actually Matter

SSTImap – Automatic SSTI Detection Tool With Interactive Interface

Vice Society Ransomware Victim: Seguros Equinoccial

Vice Society Ransomware Victim: NPTC Group of Colleges

HackerOne Bug Bounty Disclosure: rails-actionview-sanitize-helper-bypass-leading-to-xss-using-svg-tag-byhaqpl

LockBit 3.0 Ransomware Victim: azliver[.]com

Vice Society Ransomware Victim: Seguros Equinoccial

Malware Analysis – djvu – a3dd84a411b7edddae84278455400dd5

Malware Analysis – ransomware – fee7c379f3a555c5c821e872ec384a91

Malware Analysis – – fc50e05b611db89a9c7eb359e68ebc5f

Malware Analysis – smokeloader – 84afdad4a70a6122c3f157100a197db7

Malware Analysis – djvu – d16e82ba2c319750e888f763d98a3a8c

Malware Analysis – djvu – f6d4d4b428393d0d8b55165c2a9076dd

Malware Analysis – – 45f3f9b201644ddadf6204497c9adb49

Malware Analysis – discovery – 4b51df4028f1d801c45f07daa07d9c90

Cobalt Stike Beacon Detected – 47[.]244[.]167[.]171:4545

Malware Analysis – spyware – 5e887fdac8a3cac0b047a737043789a8

Cobalt Stike Beacon Detected – 20[.]189[.]74[.]59:8443

Malware Analysis – smokeloader – da627411e7e85229355ed325520a7d4e

Malware Analysis – discovery – 360ef53ce1b09b03998bf2ab743f7dc7

Malware Analysis – – bfe6ee8069f6e7c572382a97fd16d104

CVE Alert: CVE-2023-31279

CVE Alert: CVE-2024-11349

CVE Alert: CVE-2024-12846

CVE Alert: CVE-2024-11196

CVE Alert: CVE-2024-11977

You may have missed