Month: April 2023

Malware Analysis – evasion – fd31bb7ea1ad81b4570011952008d009

April 1, 2023

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: fd31bb7ea1ad81b4570011952008d009SHA1: 2ab1014b079df5c4507d69d41b92fbc574156811ANALYSIS DATE: 2023-04-01T15:53:04ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – evasion – 9871e57a53d3a334aca306c4321a7d07

April 1, 2023

Score: 8 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 9871e57a53d3a334aca306c4321a7d07SHA1: 5cc48c673d0205a1335f28e687d4b66b5b7d8b97ANALYSIS DATE: 2023-04-01T16:31:59ZTTPS: T1012, T1120, T1082, T1491, T1112 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – brand:microsoft – 0a1d0cb632a7f7cde057b8c11c1248a2

April 1, 2023

Score: 10 MALWARE FAMILY: brand:microsoftTAGS:brand:microsoft, evasion, persistence, phishing, ransomware, trojanMD5: 0a1d0cb632a7f7cde057b8c11c1248a2SHA1: 651caf0aa2637d0b56411f1679eb68f43a7b00b2ANALYSIS DATE: 2023-04-01T16:19:08ZTTPS: T1012, T1120, T1082, T1088, T1089, T1112,...

Malware Analysis – evasion – 807740e3472484d420667e6c0fcfb515

April 1, 2023

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 807740e3472484d420667e6c0fcfb515SHA1: 9df328dee54e0865376efc4ab90b7cd419c1784cANALYSIS DATE: 2023-04-01T16:28:46ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – djvu – f1a4fadf22886ea65120de4d9a227d78

April 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5df88deb5dde677ba658b77ad5f60248, discovery, persistence, ransomware, spyware, stealerMD5: f1a4fadf22886ea65120de4d9a227d78SHA1: f6fa9b1c2010638a4a939774d2b0090d03e08d8eANALYSIS DATE: 2023-04-01T16:40:50ZTTPS: T1012, T1082, T1005, T1081,...

Malware Analysis – – 7866d944436d7983d61024fbbf38256b

April 1, 2023

Score: 3 MALWARE FAMILY: TAGS:MD5: 7866d944436d7983d61024fbbf38256bSHA1: 7e79db996465dfe542fc2d16f14fb8e92da7b75dANALYSIS DATE: 2023-04-01T16:58:41ZTTPS: T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – djvu – 61804db8a814f17f5cdc8243e6c609cf

April 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5df88deb5dde677ba658b77ad5f60248, discovery, persistence, ransomware, spyware, stealerMD5: 61804db8a814f17f5cdc8243e6c609cfSHA1: 815b35ca9dba75b0f8906b8e838599c757c3ab77ANALYSIS DATE: 2023-04-01T16:54:11ZTTPS: T1082, T1012, T1053, T1005,...

Malware Analysis – brand:pubg – f7b8cff13de0de32fa0f438c3aab7eae

April 1, 2023

Score: 10 MALWARE FAMILY: brand:pubgTAGS:brand:pubg, evasion, phishing, ransomwareMD5: f7b8cff13de0de32fa0f438c3aab7eaeSHA1: a6c449f9a3e1bce13c54159e9575aa66c4462b4eANALYSIS DATE: 2023-04-01T16:46:16ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – evasion – 660708319a500f1865fa9d2fadfa712d

April 1, 2023

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 660708319a500f1865fa9d2fadfa712dSHA1: b2ae3aef17095ab26410e0f1792a379a4a2966f8ANALYSIS DATE: 2023-04-01T16:52:30ZTTPS: T1004, T1112, T1082, T1491, T1088, T1089 ScoreMeaningExample10Known badA...

Malware Analysis – djvu – 4dc20f9e8a797dac6a43de2b18975aef

April 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5df88deb5dde677ba658b77ad5f60248, discovery, persistence, ransomware, spyware, stealerMD5: 4dc20f9e8a797dac6a43de2b18975aefSHA1: 0bc513fa63bb285ecca914a144d40d27d3e485deANALYSIS DATE: 2023-04-01T17:34:23ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – amadey – b27b89b27b109e38cbf776096847b093

April 1, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:vidar, botnet:5df88deb5dde677ba658b77ad5f60248, botnet:pub1, backdoor, discovery, evasion, persistence, ransomware, spyware, stealer, trojanMD5: b27b89b27b109e38cbf776096847b093SHA1: d22ae194c0244a5791171972b4e17e03b65a74e2ANALYSIS...

Malware Analysis – evasion – 26533eb236f3fb7aeef82f4920fd7af4

April 1, 2023

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 26533eb236f3fb7aeef82f4920fd7af4SHA1: 9af1504717b3a2f80f399407c660961a55bf1870ANALYSIS DATE: 2023-04-01T17:56:12ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – evasion – e13f0908d3f295ba5c61081ca835734f

April 1, 2023

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomwareMD5: e13f0908d3f295ba5c61081ca835734fSHA1: fe7972cbfde692e199017f39870032ecbe464138ANALYSIS DATE: 2023-04-01T17:01:08ZTTPS: T1491, T1112, T1012, T1120, T1082, T1060, T1158 ScoreMeaningExample10Known badA...

Microsoft Fixes New Azure AD Vulnerability Impacting Bing Search and Major Apps

April 1, 2023

Microsoft has patched a misconfiguration issue impacting the Azure Active Directory (AAD) identity and access management service that exposed several...

LockBit 3.0 Ransomware Victim: ativy[.]com

April 1, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

LockBit 3.0 Ransomware Victim: etkinllc[.]com

April 1, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

LockBit 3.0 Ransomware Victim: semsinc[.]net

April 1, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Chevrolet Equinox 2021 denial of service | CVE-2023-28885

April 1, 2023

NAME__________Chevrolet Equinox 2021 denial of servicePlatforms Affected:Risk Level:3.3Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________Chevrolet Equinox 2021 is vulnerable to a denial of service,...

Silicon Labs Gecko SDK denial of service | CVE-2023-0775

April 1, 2023

NAME__________Silicon Labs Gecko SDK denial of servicePlatforms Affected:Risk Level:6.5Exploitability:Consequences:Denial of Service DESCRIPTION__________Silicon Labs Gecko SDK is vulnerable to a denial...

MCUBO ICT information disclosure | CVE-2023-26071

April 1, 2023

NAME__________MCUBO ICT information disclosurePlatforms Affected:Risk Level:5.3Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________MCUBO ICT could allow a remote attacker to obtain sensitive information, caused by...

lambdaisland/uri security bypass | CVE-2023-28628

April 1, 2023

NAME__________lambdaisland/uri security bypassPlatforms Affected:lambdaisland/uri lambdaisland/uri 1.13.95Risk Level:5.4Exploitability:UnprovenConsequences:Bypass Security DESCRIPTION__________lambdaisland/uri could allow a remote attacker to bypass security restrictions, caused by...

Month: April 2023

Malware Analysis – evasion – fd31bb7ea1ad81b4570011952008d009

Malware Analysis – evasion – 9871e57a53d3a334aca306c4321a7d07

Malware Analysis – brand:microsoft – 0a1d0cb632a7f7cde057b8c11c1248a2

Malware Analysis – evasion – 807740e3472484d420667e6c0fcfb515

Malware Analysis – djvu – f1a4fadf22886ea65120de4d9a227d78

Malware Analysis – – 7866d944436d7983d61024fbbf38256b

Malware Analysis – djvu – 61804db8a814f17f5cdc8243e6c609cf

Malware Analysis – brand:pubg – f7b8cff13de0de32fa0f438c3aab7eae

Malware Analysis – evasion – 660708319a500f1865fa9d2fadfa712d

Malware Analysis – djvu – 4dc20f9e8a797dac6a43de2b18975aef

Malware Analysis – amadey – b27b89b27b109e38cbf776096847b093

Malware Analysis – evasion – 26533eb236f3fb7aeef82f4920fd7af4

Malware Analysis – evasion – e13f0908d3f295ba5c61081ca835734f

Microsoft Fixes New Azure AD Vulnerability Impacting Bing Search and Major Apps

LockBit 3.0 Ransomware Victim: ativy[.]com

LockBit 3.0 Ransomware Victim: etkinllc[.]com

LockBit 3.0 Ransomware Victim: semsinc[.]net

Chevrolet Equinox 2021 denial of service | CVE-2023-28885

Silicon Labs Gecko SDK denial of service | CVE-2023-0775

MCUBO ICT information disclosure | CVE-2023-26071

lambdaisland/uri security bypass | CVE-2023-28628

Snappier denial of service | CVE-2023-28638

Apple macOS Ventura, iOS and iPadOS information disclosure | CVE-2023-23527

Apiman security bypass | CVE-2023-28640

Cobalt Strike Beacon Detected – 52[.]231[.]10[.]139:8080

Cobalt Strike Beacon Detected – 54[.]224[.]145[.]120:443

Cobalt Strike Beacon Detected – 118[.]193[.]37[.]157:8889

Cobalt Strike Beacon Detected – 103[.]225[.]196[.]197:80

Cobalt Strike Beacon Detected – 101[.]201[.]247[.]232:4433

You may have missed