Month: March 2023

abstract malware 990x400 1

Malware Analysis – djvu – 6e5d63927d07aaf51c4753a5c49d8ab4

March 14, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, discovery, persistence, ransomware, spyware, stealerMD5: 6e5d63927d07aaf51c4753a5c49d8ab4SHA1: d3c1ad8cd28eb6578134f0278d2ea1ac885abc6eANALYSIS DATE: 2023-03-13T23:28:17ZTTPS: T1005, T1081, T1012, T1082,...

abstract malware 990x400 1

Malware Analysis – amadey – c8bf3dc0ff1bacf16287e1b880e24865

March 14, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:laplas, family:pseudomanuscrypt, family:redline, family:smokeloader, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, botnet:pub1, backdoor, clipper, discovery, infostealer, loader, persistence, ransomware,...

abstract malware 990x400 1

Malware Analysis – evasion – 55752288c5e69f78debf402153ae0812

March 14, 2023

Score: 6 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 55752288c5e69f78debf402153ae0812SHA1: 36c76b2fe69f36f81259d08c0f0efad1cd1841d8ANALYSIS DATE: 2023-03-13T23:36:18ZTTPS: T1102 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

cl0p

Cl0p Ransomware Victim: MARNELLCOMPANIES[.]COM

March 14, 2023

Cl0p Logo NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of...

cl0p

Cl0p Ransomware Victim: QUALYS[.]COM

March 14, 2023

Cl0p Logo NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of...

cl0p

Cl0p Ransomware Victim: UNIVERSITYOFCALIFORNIA[.]EDU

March 14, 2023

Cl0p Logo NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of...

cl0p

Cl0p Ransomware Victim: DURHAM[.]CA

March 14, 2023

Cl0p Logo NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of...

cl0p

Cl0p Ransomware Victim: EDAG[.]COM

March 14, 2023

Cl0p Logo NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of...

cl0p

Cl0p Ransomware Victim: YU[.]EDU

March 14, 2023

Cl0p Logo NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of...

cl0p

Cl0p Ransomware Victim: UMD[.]EDU

March 14, 2023

Cl0p Logo NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of...

cl0p

Cl0p Ransomware Victim: MMOSER[.]COM

March 14, 2023

Cl0p Logo NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of...

cl0p

Cl0p Ransomware Victim: WRIGHT[.]COM

March 14, 2023

Cl0p Logo NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of...

cl0p

Cl0p Ransomware Victim: RACETRAC[.]COM

March 14, 2023

Cl0p Logo NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of...

cl0p

Cl0p Ransomware Victim: AMEY[.]CO[.]UK

March 13, 2023

Cl0p Logo NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of...

cl0p

Cl0p Ransomware Victim: INRIX[.]COM

March 13, 2023

Cl0p Logo NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of...

LockBit 3.0 Ransomware Victim: maximumind[.]com

March 13, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

LockBit 3.0 Ransomware Victim: plasticproductsco[.]com

March 13, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

abstract malware 990x400 1

Malware Analysis – locky – 0d0823d9a5d000b80e27090754f59ee5

March 13, 2023

Score: 10 MALWARE FAMILY: lockyTAGS:family:locky, ransomwareMD5: 0d0823d9a5d000b80e27090754f59ee5SHA1: b1f495b707ffaf53188c13f19a487dd94e7a0735ANALYSIS DATE: 2023-03-13T15:08:54ZTTPS: T1112, T1012, T1082, T1491 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

hackerone

HackerOne Bug Bounty Disclosure: traffic-amplification-attack-via-discovery-protocolbyluk-matczak

March 13, 2023

Programme HackerOne IOVLabs IOVLabs Submitted by luk-matczak luk-matczak Report Traffic amplification attack via discovery protocol Full Report A considerable amount...

abstract malware 990x400 1

Malware Analysis – ransomware – 7b2197365c92c5cfd19a56f5fdddc185

March 13, 2023

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 7b2197365c92c5cfd19a56f5fdddc185SHA1: d8f505ff1205ed79d5d958c9928c9795114ef68eANALYSIS DATE: 2023-03-13T16:27:04ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

abstract malware 990x400 1

Malware Analysis – djvu – 7bb50bb1d3ffe6e3f720bd99b3936bad

March 13, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, discovery, persistence, ransomware, spyware, stealerMD5: 7bb50bb1d3ffe6e3f720bd99b3936badSHA1: 3c405add3d14af0d86c00f3492a8682348d0ee3cANALYSIS DATE: 2023-03-13T16:24:23ZTTPS: T1222, T1005, T1081, T1060,...

abstract malware 990x400 1

Malware Analysis – djvu – c52e18372586916023dc2d507088da9c

March 13, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, discovery, persistence, ransomware, spyware, stealerMD5: c52e18372586916023dc2d507088da9cSHA1: 025758f4f9c7088ba8d74fa54fabda590b50c9bdANALYSIS DATE: 2023-03-13T15:35:07ZTTPS: T1005, T1081, T1012, T1082,...

abstract malware 990x400 1

Malware Analysis – amadey – cb38b3968861698ea7d7463d296e859f

March 13, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, botnet:pub1, backdoor, discovery, ransomware, trojanMD5: cb38b3968861698ea7d7463d296e859fSHA1: 8255a7b71f1d9ce631060a26ed9b9bf82ff493baANALYSIS DATE: 2023-03-13T15:30:15ZTTPS: T1012, T1222, T1053, T1120,...

abstract malware 990x400 1

Malware Analysis – djvu – 89b3f1699a62b906f571a89e1fe12436

March 13, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, discovery, persistence, ransomware, spyware, stealerMD5: 89b3f1699a62b906f571a89e1fe12436SHA1: 8bf0fcfd778c25606b0106c749efc3102438365bANALYSIS DATE: 2023-03-13T16:36:25ZTTPS: T1222, T1012, T1082, T1005,...

[INCRANSOM] – Ransomware Victim: Pastor Real Estate

November 24, 2024

CVE Alert: CVE-2024-11387

November 24, 2024

CVE Alert: CVE-2024-10873

November 24, 2024

CVE Alert: CVE-2024-11332

November 24, 2024

CVE Alert: CVE-2024-11361

November 24, 2024