Month: May 2023

Malware Analysis – djvu – 0efce9fcad0fe1f645c8d162f494ca25

May 11, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:ef32d425b907146eeb9090dbc9455ab1, discovery, persistence, ransomware, spyware, stealerMD5: 0efce9fcad0fe1f645c8d162f494ca25SHA1: a25395e0b993a88d776c3b44a923289f009d1aa7ANALYSIS DATE: 2023-05-11T15:44:55ZTTPS: T1053, T1012, T1082, T1222,...

Malware Analysis – avoslocker – c9f97820c06f85a39359d97489379925

May 11, 2023

Score: 10 MALWARE FAMILY: avoslockerTAGS:family:avoslocker, evasion, ransomwareMD5: c9f97820c06f85a39359d97489379925SHA1: 631206da423a9f5a5b973831e1c7efb84c8e493eANALYSIS DATE: 2023-05-11T15:49:17ZTTPS: T1490, T1491, T1112, T1107, T1012, T1120, T1082 ScoreMeaningExample10Known badA...

Malware Analysis – ransomware – 8d9f3e223f8d5e350b87dc0908fee0a5

May 11, 2023

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 8d9f3e223f8d5e350b87dc0908fee0a5SHA1: 9fe3060e5cbe3a9ab6c3fb3dee40bd6cd385a6f6ANALYSIS DATE: 2023-05-11T15:57:37ZTTPS: T1012, T1120, T1082, T1491, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware family...

Malware Analysis – djvu – d21574363da46f66ea8a0316cce35a51

May 11, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:ef32d425b907146eeb9090dbc9455ab1, discovery, persistence, ransomware, spyware, stealerMD5: d21574363da46f66ea8a0316cce35a51SHA1: e95c85709d0469d512cc994d6615056dbe4eaa6dANALYSIS DATE: 2023-05-11T16:18:28ZTTPS: T1053, T1005, T1081, T1012,...

Malware Analysis – djvu – 416ee1715553dfb39896195e1a2b8e98

May 11, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, botnet:pub1, botnet:sprg, backdoor, discovery, persistence, ransomware, trojanMD5: 416ee1715553dfb39896195e1a2b8e98SHA1: 77a1276c6f14df39f7180e1fceee567020fbac39ANALYSIS DATE: 2023-05-11T16:08:57ZTTPS: T1012, T1120, T1082,...

Malware Analysis – ransomware – 0c0ebd73cacb79b19dfd95dc3a5019ee

May 11, 2023

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 0c0ebd73cacb79b19dfd95dc3a5019eeSHA1: ce62969554656e30765ee7eb27a51dd79367392aANALYSIS DATE: 2023-05-11T16:39:05ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – amadey – 26c4da738b1017fd4364cfb611294427

May 11, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, botnet:pub1, botnet:sprg, backdoor, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 26c4da738b1017fd4364cfb611294427SHA1: 24794b4df7e39b7d181b6283eed85b1c906f4cfbANALYSIS DATE: 2023-05-11T16:34:18ZTTPS:...

Warning,Of,A,System,Hacked.,Virus,,Cyber,Attack,,Malware,Concept.

Daily Threat Intelligence – May 11 – 2023

May 11, 2023

Another covert activity aimed at intelligence gathering and data theft has been reported in Central Asia. A state-sponsored group is...

CISA: CISA Releases Fifteen Industrial Control Systems Advisories

May 11, 2023

CISA Releases Fifteen Industrial Control Systems Advisories CISA released fifteen Industrial Control Systems (ICS) advisories on May 11, 2023. These...

HackerOne Bug Bounty Disclosure: moodle-xss-on-s-immerscio-comprehend-ibm-comby0xpugazh

May 11, 2023

Programme HackerOne IBM IBM Submitted by 0xpugazh 0xpugazh Report Moodle XSS on s-immerscio.comprehend.ibm.com Full Report A considerable amount of...

News

Spanish Police Takes Down Massive Cybercrime Ring, 40 Arrested

May 11, 2023

The National Police of Spain said it arrested 40 individuals for their alleged involvement in an organized crime gang called...

News

New APT Group Red Stinger Targets Military and Critical Infrastructure in Eastern Europe

May 11, 2023

A previously undetected advanced persistent threat (APT) actor dubbed Red Stinger has been linked to attacks targeting Eastern Europe since...

How Attack Surface Management Supports Continuous Threat Exposure Management

May 11, 2023

According to Forrester, External Attack Surface Management (EASM) emerged as a market category in 2021 and gained popularity in 2022....

News

Babuk Source Code Sparks 9 Different Ransomware Strains Targeting VMware ESXi Systems

May 11, 2023

Multiple threat actors have capitalized on the leak of Babuk (aka Babak or Babyk) ransomware code in September 2021 to...

Cobalt Stike Beacon Detected – 114[.]132[.]58[.]185:80

May 11, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 179[.]60[.]149[.]254:443

May 11, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Bug Bounty

Month: May 2023

Malware Analysis – djvu – 0efce9fcad0fe1f645c8d162f494ca25

Malware Analysis – avoslocker – c9f97820c06f85a39359d97489379925

Malware Analysis – ransomware – 8d9f3e223f8d5e350b87dc0908fee0a5

Malware Analysis – djvu – d21574363da46f66ea8a0316cce35a51

Malware Analysis – djvu – 416ee1715553dfb39896195e1a2b8e98

Malware Analysis – ransomware – 0c0ebd73cacb79b19dfd95dc3a5019ee

Malware Analysis – amadey – 26c4da738b1017fd4364cfb611294427

Daily Threat Intelligence – May 11 – 2023

CISA: CISA Releases Fifteen Industrial Control Systems Advisories

HackerOne Bug Bounty Disclosure: moodle-xss-on-s-immerscio-comprehend-ibm-comby0xpugazh

Spanish Police Takes Down Massive Cybercrime Ring, 40 Arrested

New APT Group Red Stinger Targets Military and Critical Infrastructure in Eastern Europe

How Attack Surface Management Supports Continuous Threat Exposure Management

Babuk Source Code Sparks 9 Different Ransomware Strains Targeting VMware ESXi Systems

Cobalt Stike Beacon Detected – 114[.]132[.]58[.]185:80

Cobalt Stike Beacon Detected – 179[.]60[.]149[.]254:443

BugCrowd Bug Bounty Disclosure: – Login Capctha Bypass – By mewtw0

Cobalt Stike Beacon Detected – 101[.]43[.]135[.]44:8000

Cobalt Stike Beacon Detected – 193[.]29[.]13[.]206:80

Cobalt Stike Beacon Detected – 23[.]226[.]55[.]69:443

Cobalt Stike Beacon Detected – 120[.]78[.]133[.]177:2222

Intel NUC Chaco Canyon BIOS privilege escalation | CVE-2022-38101

Intel NUC Laptop Element Software privilege escalation | CVE-2022-41628

Siemens SIMATIC Cloud Connect directory traversal | CVE-2023-29128

CVE Alert: CVE-2024-12527

CVE Alert: CVE-2024-12519

CVE Alert: CVE-2024-12520

CVE Alert: CVE-2024-12407

CVE Alert: CVE-2024-12412

You may have missed