Month: March 2023

Cl0p Ransomware Victim: INTERTERMINALS[.]COM

March 25, 2023

Cl0p Logo NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of...

Cl0p Ransomware Victim: SPI[.]CO[.]ZA

March 25, 2023

Cl0p Logo NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of...

Cl0p Ransomware Victim: THECYPRINUS[.]COM

March 25, 2023

Cl0p Logo NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of...

Cl0p Ransomware Victim: COLMAC[.]COM

March 25, 2023

Cl0p Logo NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of...

Cl0p Ransomware Victim: INVESTORCOM[.]COM

March 25, 2023

Cl0p Logo NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of...

Cl0p Ransomware Victim: DETECH[.]COM[.]TR

March 25, 2023

Cl0p Logo NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of...

Cl0p Ransomware Victim: IMAGINE360[.]COM

March 25, 2023

Cl0p Logo NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of...

Cl0p Ransomware Victim: GOA[.]GOV[.]IN

March 25, 2023

Cl0p Logo NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of...

Cl0p Ransomware Victim: GRUPOFLORAPLANT[.]COM

March 25, 2023

Cl0p Logo NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of...

Cl0p Ransomware Victim: BRIDGEWAY[.]COM[.]PH

March 25, 2023

Cl0p Logo NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of...

Cl0p Ransomware Victim: TLG[.]COM

March 25, 2023

Cl0p Logo NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of...

Cl0p Ransomware Victim: PROGRESSION[.]COM

March 25, 2023

Cl0p Logo NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of...

Cl0p Ransomware Victim: REDBOXVOICE[.]COM

March 25, 2023

Cl0p Logo NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of...

Cl0p Ransomware Victim: TGW[.]COM

March 25, 2023

Cl0p Logo NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of...

Cl0p Ransomware Victim: ATOS[.]NET

March 25, 2023

Cl0p Logo NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of...

Cl0p Ransomware Victim: UNIMELB[.]EDU[.]AU

March 25, 2023

Cl0p Logo NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of...

Cl0p Ransomware Victim: GLOBALFARM[.]COM[.]AR

March 25, 2023

Cl0p Logo NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of...

Cl0p Ransomware Victim: CROWNRESORT[.]COM[.]AU

March 25, 2023

Cl0p Logo NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of...

Cl0p Ransomware Victim: DERK[.]CL

March 25, 2023

Cl0p Logo NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of...

RansomHouse Ransomware Victim: Cospec Srl

March 25, 2023

RansomHouse Logo NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

US-CERT Vulnerability Summary for the Week of March 13, 2023

March 24, 2023

The CISA Vulnerability Bulletin provides a summary of new vulnerabilities that have been recorded by the National Institute of Standards and...

Malware Analysis – wannacry – c5a9f57fee2d9dbba767f67bee2dafe4

March 24, 2023

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: c5a9f57fee2d9dbba767f67bee2dafe4SHA1: c7b9304389b6504fb41dcd486c77c7ddf03e237cANALYSIS DATE: 2023-03-24T15:52:24ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – smokeloader – 966165e4becd35b65cd6b4c79816241d

March 24, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 966165e4becd35b65cd6b4c79816241dSHA1: 66d5cbcde976c5ca6f7c02fbefca031d267cd752ANALYSIS DATE: 2023-03-24T16:12:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 55282dd0a8decfac5d7ce8dfa3a8c73d

March 24, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:00d92484c9b27bc8482a2cc94cacc508, discovery, persistence, ransomware, spyware, stealerMD5: 55282dd0a8decfac5d7ce8dfa3a8c73dSHA1: c37470fae1b492851df0fcf395a92cf7da7831c1ANALYSIS DATE: 2023-03-24T16:41:06ZTTPS: T1053, T1005, T1081, T1012,...

Month: March 2023

Cl0p Ransomware Victim: INTERTERMINALS[.]COM

Cl0p Ransomware Victim: SPI[.]CO[.]ZA

Cl0p Ransomware Victim: THECYPRINUS[.]COM

Cl0p Ransomware Victim: COLMAC[.]COM

Cl0p Ransomware Victim: INVESTORCOM[.]COM

Cl0p Ransomware Victim: DETECH[.]COM[.]TR

Cl0p Ransomware Victim: IMAGINE360[.]COM

Cl0p Ransomware Victim: GOA[.]GOV[.]IN

Cl0p Ransomware Victim: GRUPOFLORAPLANT[.]COM

Cl0p Ransomware Victim: BRIDGEWAY[.]COM[.]PH

Cl0p Ransomware Victim: TLG[.]COM

Cl0p Ransomware Victim: PROGRESSION[.]COM

Cl0p Ransomware Victim: REDBOXVOICE[.]COM

Cl0p Ransomware Victim: TGW[.]COM

Cl0p Ransomware Victim: ATOS[.]NET

Cl0p Ransomware Victim: UNIMELB[.]EDU[.]AU

Cl0p Ransomware Victim: GLOBALFARM[.]COM[.]AR

Cl0p Ransomware Victim: CROWNRESORT[.]COM[.]AU

Cl0p Ransomware Victim: DERK[.]CL

RansomHouse Ransomware Victim: Cospec Srl

US-CERT Vulnerability Summary for the Week of March 13, 2023

Malware Analysis – wannacry – c5a9f57fee2d9dbba767f67bee2dafe4

Malware Analysis – smokeloader – 966165e4becd35b65cd6b4c79816241d

Malware Analysis – djvu – 55282dd0a8decfac5d7ce8dfa3a8c73d

[FUNKSEC] – Ransomware Victim: 10M israeli data for sell

[FUNKSEC] – Ransomware Victim: asiapacfish[.]org

[FOG] – Ransomware Victim: Gallade Chemical (galladechem[.]com)

[AKIRA] – Ransomware Victim: Billet Precision

[FOG] – Ransomware Victim: Industria e Comercio Jolitex Ltda (jolitex[.]com)

You may have missed