Month: July 2023

Malware Analysis – ransomware – 42b7a689dceb3fc309afd809464806b9

July 3, 2023

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 42b7a689dceb3fc309afd809464806b9SHA1: df108c9807b29edc077f4b19421e3b5088a2be07ANALYSIS DATE: 2023-07-03T17:44:00ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – discovery – f2864f06a6d63659e8564a91221847d4

July 3, 2023

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploitMD5: f2864f06a6d63659e8564a91221847d4SHA1: 8c4bbc50763f161370cabdf89b7d05c225df171dANALYSIS DATE: 2023-07-03T16:48:50ZTTPS: T1082, T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Month: July 2023

Malware Analysis – ransomware – 42b7a689dceb3fc309afd809464806b9

Malware Analysis – discovery – f2864f06a6d63659e8564a91221847d4

Daily Threat Intelligence – July 03 – 2023

3 Reasons SaaS Security is the Imperative First Step to Ensuring Secure AI Usage

Chinese Hackers Use HTML Smuggling to Infiltrate European Ministries with PlugX

Medusa Locker Ransomware Victim: Mutuelle LMP

Medusa Locker Ransomware Victim: Luna Hotels & Resorts

CISA Flags 8 Actively Exploited Flaws in Samsung and D-Link Devices

Improve Your Security WordPress Spam Protection With CleanTalk Anti-Spam

WhatsApp Upgrades Proxy Feature Against Internet Shutdowns

Evasive Meduza Stealer Targets 19 Password Managers and 76 Crypto Wallets

3 Reasons SaaS Security is the Imperative First Step to Ensuring Secure AI Usage

Akira Ransomware Victim: 4LEAF, Inc

LockBit 3.0 Ransomware Victim: blowtherm[.]it

Cobalt Stike Beacon Detected – 101[.]43[.]13[.]21:8022

Cobalt Stike Beacon Detected – 54[.]206[.]96[.]191:443

Cobalt Stike Beacon Detected – 101[.]43[.]101[.]166:80

Cobalt Stike Beacon Detected – 124[.]221[.]76[.]197:80

Cobalt Stike Beacon Detected – 114[.]132[.]74[.]172:80

Cobalt Stike Beacon Detected – 13[.]235[.]190[.]252:80

Cobalt Stike Beacon Detected – 69[.]165[.]70[.]102:8099

Cobalt Stike Beacon Detected – 118[.]195[.]198[.]108:8080

Cobalt Stike Beacon Detected – 194[.]50[.]153[.]117:8080

Telegram spoofing | CVE-2023-34658

[RAWORLD] – Ransomware Victim: Co****nt

[KILLSEC] – Ransomware Victim: inv[[.][.][.]]nator

[KILLSEC] – Ransomware Victim: Ithbar

[KILLSEC] – Ransomware Victim: RiverRestHome

[KILLSEC] – Ransomware Victim: Dardoc

You may have missed