Month: March 2023

Malware Analysis – djvu – 333a83fe4e74d20da20c63685a54129d

March 10, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:laplas, family:pseudomanuscrypt, family:smokeloader, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, botnet:pub1, botnet:sprg, backdoor, clipper, discovery, loader, persistence, ransomware, stealer, trojanMD5:...

Malware Analysis – djvu – 740febd82702ec1d6ba51fac9c513d35

March 10, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 740febd82702ec1d6ba51fac9c513d35SHA1: de088f293d0207e02116a93d8b5952891410ee14ANALYSIS DATE: 2023-03-09T23:42:20ZTTPS: T1053, T1005, T1081, T1012,...

Malware Analysis – djvu – bb1cdee0eeada031ab821574a69bcea9

March 10, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: bb1cdee0eeada031ab821574a69bcea9SHA1: d3c81062777dcc8b1a7ad4418bbe78fce70a0adfANALYSIS DATE: 2023-03-09T23:41:44ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – djvu – 21376bb731ac7d0403d50a0123b8f744

March 10, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 21376bb731ac7d0403d50a0123b8f744SHA1: a141c674796134273f41aa457f10f17fbe45b95cANALYSIS DATE: 2023-03-09T23:23:56ZTTPS: T1082, T1053, T1005, T1081,...

LockBit 3.0 Ransomware Victim: delawarelife[.]com

March 9, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Malware Analysis – djvu – 1ee6258a95eede1f094f8df190bdd6e0

March 9, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 1ee6258a95eede1f094f8df190bdd6e0SHA1: d7d4ad0ec8fc037901415a32259d78356f63f858ANALYSIS DATE: 2023-03-09T14:58:42ZTTPS: T1060, T1112, T1012, T1082,...

Malware Analysis – djvu – 182fe34b1f0462a9e1cd16da7e407343

March 9, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 182fe34b1f0462a9e1cd16da7e407343SHA1: 53c3f029d3ff7f58ca9954f749edb6e44114a02fANALYSIS DATE: 2023-03-09T15:25:52ZTTPS: T1060, T1112, T1082, T1053,...

Malware Analysis – djvu – c7cd0cfab160d2c50eca232bbebb9ec0

March 9, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: c7cd0cfab160d2c50eca232bbebb9ec0SHA1: ced9ebf65abc14747b31118182acc859b537c3beANALYSIS DATE: 2023-03-09T15:19:05ZTTPS: T1130, T1112, T1005, T1081,...

Malware Analysis – smokeloader – f30433ddb4f9db7afc0d5a61d6730e4a

March 9, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: f30433ddb4f9db7afc0d5a61d6730e4aSHA1: 74ab86a37e6f164e2d9c07c248f7bb07111b339fANALYSIS DATE: 2023-03-09T15:22:05ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 3770d4e8c8b7e2a4c37a0ba09f28e2be

March 9, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 3770d4e8c8b7e2a4c37a0ba09f28e2beSHA1: 0495a7a5dbbe35a232f1bc7ed4d5da214bf2bf35ANALYSIS DATE: 2023-03-09T15:27:04ZTTPS: T1130, T1112, T1222, T1053,...

HackerOne Bug Bounty Disclosure: improper-handling-of-null-bytes-in-github-actions-runner-allows-an-attacker-to-set-arbitrary-environment-variablesbyryotak

March 9, 2023

Programme HackerOne GitHub GitHub Submitted by ryotak ryotak Report Improper handling of null bytes in GitHub Actions Runner allows an...

Malware Analysis – amadey – 8d990e00f9718a8d43195a38865a1462

March 9, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:laplas, family:pseudomanuscrypt, family:smokeloader, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, botnet:pub1, botnet:sprg, backdoor, clipper, discovery, evasion, loader, persistence, ransomware,...

Malware Analysis – ransomware – f261a5e674a442842c7e581122256fb3

March 9, 2023

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: f261a5e674a442842c7e581122256fb3SHA1: e9e92b942c8f6092ae55b3e2b98e1a3a9667695aANALYSIS DATE: 2023-03-09T16:34:58ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – evasion – 928fd385b000799b395957768079f032

March 9, 2023

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 928fd385b000799b395957768079f032SHA1: 1f902ca013cad6e4e1482ba7b08b8c50bf8ec40aANALYSIS DATE: 2023-03-09T16:09:20ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – amadey – 177b4a7c81cecf64811c06aba1bd56df

March 9, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:laplas, family:smokeloader, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, botnet:pub1, botnet:sprg, backdoor, clipper, discovery, evasion, persistence, pyinstaller, ransomware, stealer,...

Malware Analysis – djvu – 5f0ba5567cbd04f4528289d3fa64075d

March 9, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 5f0ba5567cbd04f4528289d3fa64075dSHA1: 745147caf91e2c4aefbf68e75156e19e8f7400f6ANALYSIS DATE: 2023-03-09T16:41:13ZTTPS: T1060, T1112, T1082, T1012,...

Malware Analysis – discovery – 0acd5fdeb1332e99679f9c5403fd5dbe

March 9, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, evasion, persistence, ransomware, trojanMD5: 0acd5fdeb1332e99679f9c5403fd5dbeSHA1: 9941abbb97c285b8528830cae8762b251e16991aANALYSIS DATE: 2023-03-09T16:57:34ZTTPS: T1102, T1112, T1107, T1490, T1060, T1031, T1562,...

Malware Analysis – djvu – 8f815dd83d1432167479a2ec981834fd

March 9, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 8f815dd83d1432167479a2ec981834fdSHA1: 8ea74de3209010e6dd81dd3dc66214a7878dd5ebANALYSIS DATE: 2023-03-09T16:42:57ZTTPS: T1060, T1112, T1082, T1005,...

Malware Analysis – amadey – 018791f76b98abc15177ca780693eeb5

March 9, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:laplas, family:smokeloader, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, botnet:pub1, botnet:sprg, backdoor, clipper, discovery, persistence, pyinstaller, ransomware, stealer, trojanMD5:...

Malware Analysis – djvu – 58556e2d969b55db9c1731ee540cb31f

March 9, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 58556e2d969b55db9c1731ee540cb31fSHA1: e36eafc1c83133c0b4f322017b1be84e7c11eb9aANALYSIS DATE: 2023-03-09T17:38:47ZTTPS: T1060, T1112, T1012, T1005,...

Malware Analysis – djvu – 6bdc4ff9c91e4846d8924c28d7e909da

March 9, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 6bdc4ff9c91e4846d8924c28d7e909daSHA1: c504e74669f65893874e77d70d78c01526694d54ANALYSIS DATE: 2023-03-09T17:47:29ZTTPS: T1222, T1060, T1112, T1005,...

Malware Analysis – amadey – 7b8fa1719da67f606547a11c93356b2e

March 9, 2023

Malware Analysis – djvu – f65c1bc6f57a0964c1cb68ef89ad44c6

March 9, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: f65c1bc6f57a0964c1cb68ef89ad44c6SHA1: d46497b7e0200fc399e964339b0a7805f2551ab4ANALYSIS DATE: 2023-03-09T17:34:46ZTTPS: T1082, T1005, T1081, T1012,...

Hackers Exploiting Remote Desktop Software Flaws to Deploy PlugX Malware

March 9, 2023

Security vulnerabilities in remote desktop programs such as Sunlogin and AweSun are being exploited by threat actors to deploy the...

Month: March 2023

Malware Analysis – djvu – 333a83fe4e74d20da20c63685a54129d

Malware Analysis – djvu – 740febd82702ec1d6ba51fac9c513d35

Malware Analysis – djvu – bb1cdee0eeada031ab821574a69bcea9

Malware Analysis – djvu – 21376bb731ac7d0403d50a0123b8f744

LockBit 3.0 Ransomware Victim: delawarelife[.]com

Malware Analysis – djvu – 1ee6258a95eede1f094f8df190bdd6e0

Malware Analysis – djvu – 182fe34b1f0462a9e1cd16da7e407343

Malware Analysis – djvu – c7cd0cfab160d2c50eca232bbebb9ec0

Malware Analysis – smokeloader – f30433ddb4f9db7afc0d5a61d6730e4a

Malware Analysis – djvu – 3770d4e8c8b7e2a4c37a0ba09f28e2be

HackerOne Bug Bounty Disclosure: improper-handling-of-null-bytes-in-github-actions-runner-allows-an-attacker-to-set-arbitrary-environment-variablesbyryotak

Malware Analysis – amadey – 8d990e00f9718a8d43195a38865a1462

Malware Analysis – ransomware – f261a5e674a442842c7e581122256fb3

Malware Analysis – evasion – 928fd385b000799b395957768079f032

Malware Analysis – amadey – 177b4a7c81cecf64811c06aba1bd56df

Malware Analysis – djvu – 5f0ba5567cbd04f4528289d3fa64075d

Malware Analysis – discovery – 0acd5fdeb1332e99679f9c5403fd5dbe

Malware Analysis – djvu – 8f815dd83d1432167479a2ec981834fd

Malware Analysis – amadey – 018791f76b98abc15177ca780693eeb5

Malware Analysis – djvu – 58556e2d969b55db9c1731ee540cb31f

Malware Analysis – djvu – 6bdc4ff9c91e4846d8924c28d7e909da

Malware Analysis – amadey – 7b8fa1719da67f606547a11c93356b2e

Malware Analysis – djvu – f65c1bc6f57a0964c1cb68ef89ad44c6

Hackers Exploiting Remote Desktop Software Flaws to Deploy PlugX Malware

[RAWORLD] – Ransomware Victim: Co****nt

[KILLSEC] – Ransomware Victim: inv[[.][.][.]]nator

[KILLSEC] – Ransomware Victim: Ithbar

[KILLSEC] – Ransomware Victim: RiverRestHome

[KILLSEC] – Ransomware Victim: Dardoc

You may have missed