Month: March 2023

Malware Analysis – djvu – 2fb4eb3d4977b5d8bdc1754e231cd3d1

March 13, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 2fb4eb3d4977b5d8bdc1754e231cd3d1SHA1: aef4245a60ecc0ba7574da44e8ca8648242cc4f2ANALYSIS DATE: 2023-03-13T10:02:45ZTTPS: T1012, T1082, T1222, T1005,...

Malware Analysis – djvu – faf77921b63e813ccc3e0327d290bcda

March 13, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: faf77921b63e813ccc3e0327d290bcdaSHA1: d378c133ee71f48cd948be709770c9f97d44dc13ANALYSIS DATE: 2023-03-13T10:11:48ZTTPS: T1005, T1081, T1060, T1112,...

Malware Analysis – discovery – b3843723c9238af6d0c2a5d93305eadc

March 13, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: b3843723c9238af6d0c2a5d93305eadcSHA1: 3796a64fe59ada4167e5c9cb9b60897a36f3eed5ANALYSIS DATE: 2023-03-13T10:52:55ZTTPS: T1060, T1012, T1120, T1082, T1112, T1042 ScoreMeaningExample10Known badA malware...

Malware Analysis – smokeloader – 566aed1f7c190b04471e2aec95e56c01

March 13, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 566aed1f7c190b04471e2aec95e56c01SHA1: 6f1f8a555cd88083de606e924ff6c665b3a43413ANALYSIS DATE: 2023-03-13T10:43:50ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 7b98163456bd1a3effd8d1e5ef64298b

March 13, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 7b98163456bd1a3effd8d1e5ef64298bSHA1: 6694db078af630fab3ae2e86f1ae5f1b6ddc39cdANALYSIS DATE: 2023-03-13T10:44:00ZTTPS: T1012, T1005, T1081, T1060,...

Malware Analysis – djvu – c6cd667d13846d0fb443c136e5e3f1a6

March 13, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: c6cd667d13846d0fb443c136e5e3f1a6SHA1: 8b3d3ce0928da0914930779e2ef225d2caa148f7ANALYSIS DATE: 2023-03-13T10:44:35ZTTPS: T1222, T1082, T1053, T1005,...

Malware Analysis – djvu – d310a6f0d6695c5db6467b8cc7a869fd

March 13, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: d310a6f0d6695c5db6467b8cc7a869fdSHA1: 27e98c3c5339891cb03b3e84b81651ff04a62508ANALYSIS DATE: 2023-03-13T10:57:02ZTTPS: T1222, T1082, T1012, T1130,...

Malware Analysis – amadey – 7e295e95ecb478810238bf9426635ad2

March 13, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:laplas, family:pseudomanuscrypt, family:redline, family:smokeloader, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, botnet:pub1, backdoor, clipper, discovery, infostealer, loader, persistence, ransomware,...

Malware Analysis – smokeloader – d21e88369dc69042d256dc59263d5b61

March 13, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: d21e88369dc69042d256dc59263d5b61SHA1: 575e789b0b3bc16a4f44fe6151af4d41cfd630b5ANALYSIS DATE: 2023-03-13T10:54:58ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – evasion – f7cbc00aaa716599bcf6a24f65b3302e

March 13, 2023

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: f7cbc00aaa716599bcf6a24f65b3302eSHA1: ea2d7a7b46c02a406fc2c0e9340e2ca3f82339e3ANALYSIS DATE: 2023-03-13T11:06:16ZTTPS: T1031, T1562, T1489, T1112, T1012, T1082, T1120, T1107, T1490 ScoreMeaningExample10Known...

Malware Analysis – chaos – 5e312e4f60bf214a45df187cc1cd5f5c

March 13, 2023

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, evasion, ransomware, spyware, stealerMD5: 5e312e4f60bf214a45df187cc1cd5f5cSHA1: 9bc19e38178a05eb39d579d979ac8520435b511cANALYSIS DATE: 2023-03-13T11:09:04ZTTPS: T1490, T1059, T1107, T1005, T1081, T1012, T1082,...

Malware Analysis – djvu – 61ba3dae1a44c36309224d931ac995d1

March 13, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 61ba3dae1a44c36309224d931ac995d1SHA1: 36aae6b91d3d110199b4c89168d0a0f4c98e387fANALYSIS DATE: 2023-03-13T11:22:22ZTTPS: T1005, T1081, T1060, T1112,...

Malware Analysis – chaos – 61d14b682f39e6558a706a3dacafaeca

March 13, 2023

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, evasion, ransomwareMD5: 61d14b682f39e6558a706a3dacafaecaSHA1: bcc32366f6b98f0fbd474643fa54c5a4ff173dfaANALYSIS DATE: 2023-03-13T11:09:04ZTTPS: T1490, T1059, T1107, T1082, T1012 ScoreMeaningExample10Known badA malware family...

Malware Analysis – dharma – 99c451001b4a530a578952665ec526be

March 13, 2023

Score: 10 MALWARE FAMILY: dharmaTAGS:family:dharma, persistence, ransomware, spyware, stealerMD5: 99c451001b4a530a578952665ec526beSHA1: 6fb938ac4f76843d4ff37fc9d822f76a86f7feb2ANALYSIS DATE: 2023-03-13T11:09:04ZTTPS: T1107, T1490, T1060, T1112, T1005, T1081, T1082...

Zero trust migration: How will I know if I can remove my VPN?

March 13, 2023

Zero trust migration: How will I know if I can remove my VPN? As your organisation makes the transition to...

New ‘supply chain mapping’ guidance

March 13, 2023

New ‘supply chain mapping’ guidance Supply chain mapping is the process of recording, storing and using information gathered from suppliers...

Malware Analysis – djvu – 139bd947da6d9aae1a27aaad9f25b721

March 13, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 139bd947da6d9aae1a27aaad9f25b721SHA1: 2dc25ec38c0f2d9790d0b82009bd3f8e84beed65ANALYSIS DATE: 2023-03-13T03:03:25ZTTPS: T1082, T1005, T1081, T1012,...

Malware Analysis – evasion – 4a1d88603b1007825a9c6b36d1e5de44

March 13, 2023

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealerMD5: 4a1d88603b1007825a9c6b36d1e5de44SHA1: 78a6e76ab32039576b52153b56f2e8bd035222c3ANALYSIS DATE: 2023-03-13T04:26:04ZTTPS: T1490, T1107, T1005, T1081, T1112, T1060, T1082...

Malware Analysis – djvu – db3b1259282cd38553edf7422ac9d94f

March 13, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: db3b1259282cd38553edf7422ac9d94fSHA1: 527fcb3da0e7f70d580e9d5f1e65ac83b16ef95dANALYSIS DATE: 2023-03-13T03:44:20ZTTPS: T1222, T1060, T1112, T1053,...

Malware Analysis – djvu – bed41626e3c2e63c2116b8a1ebdd0040

March 13, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: bed41626e3c2e63c2116b8a1ebdd0040SHA1: 65ffee674168fe776806ca1893fa23a33d728f4fANALYSIS DATE: 2023-03-13T04:22:58ZTTPS: T1060, T1112, T1005, T1081,...

Malware Analysis – amadey – 0dcd1571d3a66b2e1f3caf07b13be580

March 13, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:laplas, family:smokeloader, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, botnet:pub1, botnet:sprg, backdoor, clipper, discovery, evasion, persistence, ransomware, spyware, stealer,...

Malware Analysis – amadey – c9d61c7680069f7915d24d65993fe18d

March 13, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:laplas, family:smokeloader, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, botnet:pub1, botnet:sprg, backdoor, clipper, discovery, ransomware, stealer, trojanMD5: c9d61c7680069f7915d24d65993fe18dSHA1: 0942de8a000fcad764f8a72386a2d3564c312414ANALYSIS...

Malware Analysis – djvu – 72cc285ac9110f915fe6717e29f90d93

March 13, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 72cc285ac9110f915fe6717e29f90d93SHA1: aba409cb226e570630e57430ff1d5b9a3ea63b1cANALYSIS DATE: 2023-03-13T05:17:54ZTTPS: T1005, T1081, T1222, T1082,...

Malware Analysis – neshta – 778607f5f1fd624ee1d4416ca564480c

March 13, 2023

Score: 10 MALWARE FAMILY: neshtaTAGS:family:neshta, evasion, persistence, ransomware, spyware, stealer, trojanMD5: 778607f5f1fd624ee1d4416ca564480cSHA1: 2efadc7b6cb0050028b93ce5b323b9134190c4cdANALYSIS DATE: 2023-03-13T04:35:03ZTTPS: T1107, T1490, T1112, T1042, T1005,...

Month: March 2023

Malware Analysis – djvu – 2fb4eb3d4977b5d8bdc1754e231cd3d1

Malware Analysis – djvu – faf77921b63e813ccc3e0327d290bcda

Malware Analysis – discovery – b3843723c9238af6d0c2a5d93305eadc

Malware Analysis – smokeloader – 566aed1f7c190b04471e2aec95e56c01

Malware Analysis – djvu – 7b98163456bd1a3effd8d1e5ef64298b

Malware Analysis – djvu – c6cd667d13846d0fb443c136e5e3f1a6

Malware Analysis – djvu – d310a6f0d6695c5db6467b8cc7a869fd

Malware Analysis – amadey – 7e295e95ecb478810238bf9426635ad2

Malware Analysis – smokeloader – d21e88369dc69042d256dc59263d5b61

Malware Analysis – evasion – f7cbc00aaa716599bcf6a24f65b3302e

Malware Analysis – chaos – 5e312e4f60bf214a45df187cc1cd5f5c

Malware Analysis – djvu – 61ba3dae1a44c36309224d931ac995d1

Malware Analysis – chaos – 61d14b682f39e6558a706a3dacafaeca

Malware Analysis – dharma – 99c451001b4a530a578952665ec526be

Zero trust migration: How will I know if I can remove my VPN?

New ‘supply chain mapping’ guidance

Malware Analysis – djvu – 139bd947da6d9aae1a27aaad9f25b721

Malware Analysis – evasion – 4a1d88603b1007825a9c6b36d1e5de44

Malware Analysis – djvu – db3b1259282cd38553edf7422ac9d94f

Malware Analysis – djvu – bed41626e3c2e63c2116b8a1ebdd0040

Malware Analysis – amadey – 0dcd1571d3a66b2e1f3caf07b13be580

Malware Analysis – amadey – c9d61c7680069f7915d24d65993fe18d

Malware Analysis – djvu – 72cc285ac9110f915fe6717e29f90d93

Malware Analysis – neshta – 778607f5f1fd624ee1d4416ca564480c

[EVEREST] – Ransomware Victim: Concord Orthopaedics

[EVEREST] – Ransomware Victim: STIIIZY

[INCRANSOM] – Ransomware Victim: Pastor Real Estate

CVE Alert: CVE-2024-11387

CVE Alert: CVE-2024-10873

You may have missed