Month: February 2023

Malware Analysis – evasion – b7f75322a5ae47dcbc0ae9c35930181f

February 27, 2023

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: b7f75322a5ae47dcbc0ae9c35930181fSHA1: c999e7c030a56b39090a5506413565cead8fa779ANALYSIS DATE: 2023-02-27T15:02:34ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – djvu – f440f4b68d8a753de17f40da8067c74c

February 27, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, backdoor, discovery, persistence, ransomware, stealer, trojan, vmprotectMD5: f440f4b68d8a753de17f40da8067c74cSHA1: fec25fe57dae2be79962fa9a3f79e62472be6d00ANALYSIS DATE: 2023-02-27T16:10:02ZTTPS: T1060, T1112,...

Malware Analysis – smokeloader – 32e664bc1683bf60db15e50df9d04d94

February 27, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 32e664bc1683bf60db15e50df9d04d94SHA1: 2f58984ab4b88eff4cf3271a9b3d9b8a0abed2ecANALYSIS DATE: 2023-02-27T15:50:05ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 14e05bdb6fb15db02e5247582084999a

February 27, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 14e05bdb6fb15db02e5247582084999aSHA1: c462df95f587ad8e7ab3f703e912aaf12762d03dANALYSIS DATE: 2023-02-27T15:11:02ZTTPS: T1012, T1082, T1005, T1081, T1060,...

Malware Analysis – djvu – d68fc03f5679d210f0a3cd70cc8c13e1

February 27, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: d68fc03f5679d210f0a3cd70cc8c13e1SHA1: a4ad2eddb55670b99a2e628205911b5ba21686e4ANALYSIS DATE: 2023-02-27T15:39:56ZTTPS: T1222, T1053, T1005, T1081, T1082,...

Malware Analysis – smokeloader – aa058c705e64a433166d975f4e9a5261

February 27, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: aa058c705e64a433166d975f4e9a5261SHA1: d286ebd54477fef7a45cc12edfb05ae0197bbdaaANALYSIS DATE: 2023-02-27T16:29:08ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – bfc03a90243efb1bbb02f65bce3b02a2

February 27, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: bfc03a90243efb1bbb02f65bce3b02a2SHA1: 1f3d840f29f5595f7db3465fa4b09b397b38f009ANALYSIS DATE: 2023-02-27T16:30:56ZTTPS: T1060, T1112, T1053, T1005, T1081,...

Malware Analysis – smokeloader – 35ccb4adbce0d03c3409df6207401429

February 27, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 35ccb4adbce0d03c3409df6207401429SHA1: 525be7f6caed949ddfa929c0a2ee75b26ba57c64ANALYSIS DATE: 2023-02-27T16:29:08ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 4ee7170c8ae51589936baaa60bfca7b7

February 27, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 4ee7170c8ae51589936baaa60bfca7b7SHA1: 98eecd829b63e29452f6f9bb40c01303ed4d58e1ANALYSIS DATE: 2023-02-27T16:37:27ZTTPS: T1222, T1082, T1012, T1053, T1005,...

Malware Analysis – djvu – 5c1055bd70425b00ccdd27fb4568aa3b

February 27, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, backdoor, discovery, persistence, pyinstaller, ransomware, spyware, stealer, trojan, vmprotectMD5: 5c1055bd70425b00ccdd27fb4568aa3bSHA1: 5643011b8cc2ed9d83d5ed3d4f508bc7bbedf811ANALYSIS DATE: 2023-02-27T17:30:36ZTTPS:...

Malware Analysis – smokeloader – 3423b310f4725f7d0954f38d346eff1e

February 27, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 3423b310f4725f7d0954f38d346eff1eSHA1: 475cdb695f781e4cbd29c5c601d52377d96503e9ANALYSIS DATE: 2023-02-27T17:00:05ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – quasar – 04c0f75fb7507ed1d87c6946698ec064

February 27, 2023

Score: 10 MALWARE FAMILY: quasarTAGS:family:quasar, evasion, persistence, ransomware, spyware, trojanMD5: 04c0f75fb7507ed1d87c6946698ec064SHA1: 577911bb677fbf7870209d4417e277e89b1263feANALYSIS DATE: 2023-02-27T16:44:51ZTTPS: T1082, T1088, T1089, T1112, T1031, T1060,...

Malware Analysis – quantum – c1fbbf273c1e4094f6bf0cdde36d2764

February 27, 2023

Score: 10 MALWARE FAMILY: quantumTAGS:family:quantum, ransomwareMD5: c1fbbf273c1e4094f6bf0cdde36d2764SHA1: bcf4ed6e49e30c5ab9e0fdfcaf5ee8e2756cc98aANALYSIS DATE: 2023-02-27T17:25:04ZTTPS: T1158, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Month: February 2023

Malware Analysis – evasion – b7f75322a5ae47dcbc0ae9c35930181f

Malware Analysis – djvu – f440f4b68d8a753de17f40da8067c74c

Malware Analysis – smokeloader – 32e664bc1683bf60db15e50df9d04d94

Malware Analysis – djvu – 14e05bdb6fb15db02e5247582084999a

Malware Analysis – djvu – d68fc03f5679d210f0a3cd70cc8c13e1

Malware Analysis – smokeloader – aa058c705e64a433166d975f4e9a5261

Malware Analysis – djvu – bfc03a90243efb1bbb02f65bce3b02a2

Malware Analysis – smokeloader – 35ccb4adbce0d03c3409df6207401429

Malware Analysis – djvu – 4ee7170c8ae51589936baaa60bfca7b7

Malware Analysis – djvu – 5c1055bd70425b00ccdd27fb4568aa3b

Malware Analysis – smokeloader – 3423b310f4725f7d0954f38d346eff1e

Malware Analysis – quasar – 04c0f75fb7507ed1d87c6946698ec064

Malware Analysis – quantum – c1fbbf273c1e4094f6bf0cdde36d2764

How to Tackle the Top SaaS Challenges of 2023

Shocking Findings from the 2023 Third-Party App Access Report

Researchers Share New Insights Into RIG Exploit Kit Malware’s Operations

LockBit 3.0 Ransomware Victim: wcso[.]us

LockBit 3.0 Ransomware Victim: moci[.]gov[.]kw

LockBit 3.0 Ransomware Victim: wsisd[.]com

LockBit 3.0 Ransomware Victim: bocca-sacs[.]com

LockBit 3.0 Ransomware Victim: hyosung[.]jp

LockBit 3.0 Ransomware Victim: rosenbauer[.]com

LockBit 3.0 Ransomware Victim: pcproductsinter[.]com

LockBit 3.0 Ransomware Victim: carveraero[.]com

CVE Alert: CVE-2024-12053

CVE Alert: CVE-2024-52544

CVE Alert: CVE-2024-52545

CVE Alert: CVE-2024-52548

CVE Alert: CVE-2024-48080

You may have missed