Month: March 2023

Malware Analysis – chaos – 2430019335d88321467e82ab8f51546b

March 11, 2023

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, evasion, ransomware, spyware, stealerMD5: 2430019335d88321467e82ab8f51546bSHA1: 7d233a893492e0efd4d7e919941325b5d44abeb7ANALYSIS DATE: 2023-03-11T04:22:04ZTTPS: T1490, T1059, T1107, T1082, T1012, T1005, T1081...

Malware Analysis – lockbit – 4fca4d754e6dda3c6d0a2e0c6ec70f20

March 11, 2023

Score: 10 MALWARE FAMILY: lockbitTAGS:family:lockbit, ransomwareMD5: 4fca4d754e6dda3c6d0a2e0c6ec70f20SHA1: 3f6179eccd1f79b61db349186106cbc58bb6ba20ANALYSIS DATE: 2023-03-11T04:15:05ZTTPS: T1491, T1112, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – – deebbea18401e8b5e83c410c6d3a8b4e

March 11, 2023

Score: 8 MALWARE FAMILY: TAGS:MD5: deebbea18401e8b5e83c410c6d3a8b4eSHA1: 96d81e77b6af8f54a5ac07b2c613a5655dd05353ANALYSIS DATE: 2023-03-11T04:18:05ZTTPS: T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – medusalocker – 19ddac9782acd73f66c5fe040e86ddee

March 11, 2023

Score: 10 MALWARE FAMILY: medusalockerTAGS:family:medusalocker, evasion, ransomware, spyware, stealer, trojanMD5: 19ddac9782acd73f66c5fe040e86ddeeSHA1: 24ceba1e2951cde8e41939da21c6ba3030fc531dANALYSIS DATE: 2023-03-11T04:46:04ZTTPS: T1107, T1490, T1082, T1088, T1089, T1112,...

Malware Analysis – evasion – b7e2303419be1561979a92cde8e16670

March 11, 2023

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, ransomware, trojanMD5: b7e2303419be1561979a92cde8e16670SHA1: 5d1ec037dcb468ba9b08f1293f1fb1ff62034a12ANALYSIS DATE: 2023-03-11T04:52:03ZTTPS: T1112, T1107, T1490, T1082, T1012, T1088, T1089 ScoreMeaningExample10Known badA...

Malware Analysis – persistence – 0d730b155b46fe1ec3e4503ae55db4d0

March 11, 2023

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 0d730b155b46fe1ec3e4503ae55db4d0SHA1: b32739129fac8810ebc99cf12a45b8c2c2e17176ANALYSIS DATE: 2023-03-11T04:22:05ZTTPS: T1107, T1490, T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – dharma – 2bbb2d9be1a993a8dfef0dd719c589a0

March 11, 2023

Score: 10 MALWARE FAMILY: dharmaTAGS:family:dharma, persistence, ransomware, spyware, stealerMD5: 2bbb2d9be1a993a8dfef0dd719c589a0SHA1: c03d6401902a7b07ac88dbde7f93c6cc74e57221ANALYSIS DATE: 2023-03-11T04:46:42ZTTPS: T1005, T1081, T1107, T1490, T1060, T1112, T1082...

Malware Analysis – dharma – 0880430c257ce49d7490099d2a8dd01a

March 11, 2023

Score: 10 MALWARE FAMILY: dharmaTAGS:family:dharma, persistence, ransomware, spyware, stealerMD5: 0880430c257ce49d7490099d2a8dd01aSHA1: 2720d2d386027b0036bfcf9f340e325cd348e0d0ANALYSIS DATE: 2023-03-11T04:58:03ZTTPS: T1060, T1112, T1107, T1490, T1005, T1081, T1082...

Malware Analysis – amadey – a01c6ec9fdd07310f4f04c2ecc1d2813

March 11, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:laplas, family:pseudomanuscrypt, family:smokeloader, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, botnet:pub1, botnet:sprg, backdoor, clipper, discovery, loader, persistence, ransomware, stealer,...

Malware Analysis – djvu – fa3ffaf5e547407347b758edb0b959aa

March 11, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: fa3ffaf5e547407347b758edb0b959aaSHA1: 9eee56d3ac31365d806a7ecc45f6249dccfd2bd6ANALYSIS DATE: 2023-03-11T04:52:09ZTTPS: T1222, T1060, T1112, T1082,...

Malware Analysis – djvu – 7eb2367fe8b1c3d81e4a3698ca504201

March 11, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 7eb2367fe8b1c3d81e4a3698ca504201SHA1: 6435fc8cab12caa63c6f56c7c6c0f36f736af4dbANALYSIS DATE: 2023-03-11T05:16:57ZTTPS: T1082, T1053, T1005, T1081,...

Malware Analysis – djvu – a67c30efdd7940f034852302dcbf493d

March 11, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: a67c30efdd7940f034852302dcbf493dSHA1: 118d9b5bfa530f65dec204bc075db6ec15c7cb43ANALYSIS DATE: 2023-03-10T22:10:12ZTTPS: T1012, T1082, T1053, T1060,...

Malware Analysis – djvu – 74660444c99b457537291dcac33f5307

March 11, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 74660444c99b457537291dcac33f5307SHA1: 8bcc8d0c6a57c51fc9c37cfc7c3a6b1bed7ba087ANALYSIS DATE: 2023-03-10T21:58:43ZTTPS: T1060, T1112, T1222, T1053,...

Malware Analysis – amadey – 5bf3877b8fd815085586d2de55398d00

March 11, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:pseudomanuscrypt, family:smokeloader, family:vidar, botnet:pub1, botnet:sprg, backdoor, discovery, loader, ransomware, stealer, trojanMD5: 5bf3877b8fd815085586d2de55398d00SHA1: c542cf69aee77009d8a4727e423a88900726979fANALYSIS DATE:...

Malware Analysis – djvu – 6d825cec46935a1b76c26bcb752053c9

March 11, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 6d825cec46935a1b76c26bcb752053c9SHA1: 6740dff3a6b49ac67778753ce6a7e452a1445f98ANALYSIS DATE: 2023-03-10T23:47:09ZTTPS: T1012, T1082, T1053, T1005,...

Malware Analysis – blackcat – 8f2b7a45a93ee6f4806918aaa99c1b1b

March 11, 2023

Score: 10 MALWARE FAMILY: blackcatTAGS:family:blackcat, ransomwareMD5: 8f2b7a45a93ee6f4806918aaa99c1b1bSHA1: 3a71e11a742a1ba1b7c088ce1377bd9eeb0f63f0ANALYSIS DATE: 2023-03-10T23:29:48ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – djvu – cd584418ce391a1196c4d4363d974705

March 11, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: cd584418ce391a1196c4d4363d974705SHA1: 2a5aa89caf43a27d66e9f66395527f3c6072374fANALYSIS DATE: 2023-03-10T23:22:24ZTTPS: T1053, T1005, T1081, T1012,...

Malware Analysis – amadey – deaf892bd1b4cbf1ff3a7f5449f4c4ea

March 11, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:pseudomanuscrypt, family:smokeloader, family:vidar, botnet:pub1, botnet:sprg, backdoor, discovery, loader, ransomware, stealer, trojanMD5: deaf892bd1b4cbf1ff3a7f5449f4c4eaSHA1: 73c21e3539ca408e21fc1e643e1a922d628825c7ANALYSIS DATE:...

Brute Ratel C4 Detected – 18[.]182[.]126[.]252:80

March 11, 2023

The Information provided at the time of posting was detected as "Brute Ratel C4". Depending on when you are viewing...

LockBit 3.0 Ransomware Victim: eprinsa[.]es

March 10, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

HackerOne Bug Bounty Disclosure: stored-xss-on-www-hackerone-com-due-to-deleted-s3-bucket-from-old-page_widgetbyfransrosen

March 10, 2023

Programme HackerOne HackerOne HackerOne Submitted by fransrosen fransrosen Report Stored XSS on www.hackerone.com due to deleted S3-bucket from old page_widget...

HackerOne Bug Bounty Disclosure: scope-information-is-leaked-when-visiting-policy-scopes-tab-of-any-external-programbyburaaqsec

March 10, 2023

Programme HackerOne HackerOne HackerOne Submitted by buraaqsec buraaqsec Report Scope information is leaked when visiting policy scopes tab of any...

Malware Analysis – djvu – ff05365f6a607f44f30f0e926f2d08ec

March 10, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: ff05365f6a607f44f30f0e926f2d08ecSHA1: a8e020dd7e64c16e9af8444aa005341082d5bebbANALYSIS DATE: 2023-03-10T16:21:19ZTTPS: T1222, T1053, T1012, T1082,...

Malware Analysis – djvu – 7cefb72243c731675df371bb892b40b9

March 10, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 7cefb72243c731675df371bb892b40b9SHA1: 64543f0ae0994f2e80fd1b355f3e7e5ca5e9036dANALYSIS DATE: 2023-03-10T16:21:40ZTTPS: T1082, T1053, T1005, T1081,...

Month: March 2023

Malware Analysis – chaos – 2430019335d88321467e82ab8f51546b

Malware Analysis – lockbit – 4fca4d754e6dda3c6d0a2e0c6ec70f20

Malware Analysis – – deebbea18401e8b5e83c410c6d3a8b4e

Malware Analysis – medusalocker – 19ddac9782acd73f66c5fe040e86ddee

Malware Analysis – evasion – b7e2303419be1561979a92cde8e16670

Malware Analysis – persistence – 0d730b155b46fe1ec3e4503ae55db4d0

Malware Analysis – dharma – 2bbb2d9be1a993a8dfef0dd719c589a0

Malware Analysis – dharma – 0880430c257ce49d7490099d2a8dd01a

Malware Analysis – amadey – a01c6ec9fdd07310f4f04c2ecc1d2813

Malware Analysis – djvu – fa3ffaf5e547407347b758edb0b959aa

Malware Analysis – djvu – 7eb2367fe8b1c3d81e4a3698ca504201

Malware Analysis – djvu – a67c30efdd7940f034852302dcbf493d

Malware Analysis – djvu – 74660444c99b457537291dcac33f5307

Malware Analysis – amadey – 5bf3877b8fd815085586d2de55398d00

Malware Analysis – djvu – 6d825cec46935a1b76c26bcb752053c9

Malware Analysis – blackcat – 8f2b7a45a93ee6f4806918aaa99c1b1b

Malware Analysis – djvu – cd584418ce391a1196c4d4363d974705

Malware Analysis – amadey – deaf892bd1b4cbf1ff3a7f5449f4c4ea

Brute Ratel C4 Detected – 18[.]182[.]126[.]252:80

LockBit 3.0 Ransomware Victim: eprinsa[.]es

HackerOne Bug Bounty Disclosure: stored-xss-on-www-hackerone-com-due-to-deleted-s3-bucket-from-old-page_widgetbyfransrosen

HackerOne Bug Bounty Disclosure: scope-information-is-leaked-when-visiting-policy-scopes-tab-of-any-external-programbyburaaqsec

Malware Analysis – djvu – ff05365f6a607f44f30f0e926f2d08ec

Malware Analysis – djvu – 7cefb72243c731675df371bb892b40b9

CISA: JCDC’s Industry-Government Collaboration Speeds Mitigation of CrowdStrike IT Outage

CISA: CISA Releases Four Industrial Control Systems Advisories

CISA: Fortinet Updates Guidance and Indicators of Compromise following FortiManager Vulnerability Exploitation

CISA: CISA Releases Three Industrial Control Systems Advisories

CISA: Foreign Threat Actor Conducting Large-Scale Spearphishing Campaign with RDP Attachments

You may have missed