Year: 2023

LockBit 3.0 Ransomware Victim: kboattorneys[.]com

February 22, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

BlackCat/ALPHV Ransomware Victim: Markas

February 22, 2023

BlackCat / ALPHV Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the...

BlackCat/ALPHV Ransomware Victim: La Filipina

February 22, 2023

BlackCat / ALPHV Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the...

BlackCat/ALPHV Ransomware Victim: FUTURE BUILDINGS WAS HACKED[.] MORE THAN 150GB SENSETIVE DATA LEAKED

February 22, 2023

BlackCat / ALPHV Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the...

BlackCat/ALPHV Ransomware Victim: Summit Brands

February 22, 2023

BlackCat / ALPHV Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the...

BlackCat/ALPHV Ransomware Victim: EncinoEnergy

February 22, 2023

BlackCat / ALPHV Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the...

BlackCat/ALPHV Ransomware Victim: City of Lakewood

February 22, 2023

BlackCat / ALPHV Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the...

HackerOne Bug Bounty Disclosure: crlf-injection-in-nodejs-undici-via-hostbytimon8

February 22, 2023

Programme HackerOne Node.js Node.js Submitted by timon8 timon8 Report CRLF Injection in Nodejs undici via host Full Report A considerable...

HackerOne Bug Bounty Disclosure: sql-injection-+-insecure-deserialization-leads-to-remote-code-execution-on-https://krisp-aibymikemyers

February 22, 2023

Programme HackerOne Krisp Krisp Submitted by mikemyers mikemyers Report SQL Injection + Insecure Deserialization leads to Remote Code Execution on...

Malware Analysis – djvu – 77df036ecc85c3fc827a597835bb154f

February 22, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:pseudomanuscrypt, family:smokeloader, family:vidar, backdoor, discovery, evasion, loader, persistence, ransomware, stealer, trojan, vmprotectMD5: 77df036ecc85c3fc827a597835bb154fSHA1: 59b5795d86c5484928642e46aeb7c53a8bfbc2edANALYSIS DATE:...

Malware Analysis – ransomware – 82a7e15a1937c71822814c0399dc4d78

February 22, 2023

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 82a7e15a1937c71822814c0399dc4d78SHA1: 2468da339ff70b5b276af2076176b34e3892bb13ANALYSIS DATE: 2023-02-22T15:02:14ZTTPS: T1082, T1012 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – djvu – a67ac36abc020c064352dea39f3b66fa

February 22, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: a67ac36abc020c064352dea39f3b66faSHA1: 1bfd4457bc1ceae71f104860d89da24ef9dd2641ANALYSIS DATE: 2023-02-22T16:20:42ZTTPS: T1222, T1082, T1012, T1060, T1112,...

Malware Analysis – djvu – ef6aacb08bf189461833134a11bc2564

February 22, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: ef6aacb08bf189461833134a11bc2564SHA1: fa90263673d8dfbb2d6accff7e7b5f9de22771f5ANALYSIS DATE: 2023-02-22T16:28:12ZTTPS: T1082, T1012, T1060, T1112, T1222,...

Malware Analysis – djvu – c042bdf523442a5fb9d59d1224a5204d

February 22, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: c042bdf523442a5fb9d59d1224a5204dSHA1: a0eb17f73feb6257edf8db579440e2fa2b0c7c9fANALYSIS DATE: 2023-02-22T16:31:23ZTTPS: T1005, T1081, T1012, T1082, T1222,...

Malware Analysis – djvu – 3981650a4756536a2a4d3e40d3e71a72

February 22, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:pseudomanuscrypt, family:smokeloader, family:vidar, backdoor, discovery, evasion, loader, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: 3981650a4756536a2a4d3e40d3e71a72SHA1: bff2923c739b15e49f24154d52a3442de10b2c25ANALYSIS...

Malware Analysis – djvu – 560faa4011e25d4e5be1b2fc506c342a

February 22, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 560faa4011e25d4e5be1b2fc506c342aSHA1: 10f51e2c8a1cbf1fea300972d95bbadbf7e8f1f6ANALYSIS DATE: 2023-02-22T16:31:32ZTTPS: T1060, T1112, T1012, T1082, T1005,...

Malware Analysis – djvu – 3a2e545c68fb5a7f36ab93342674a5d5

February 22, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:pseudomanuscrypt, family:smokeloader, family:vidar, backdoor, discovery, evasion, loader, persistence, ransomware, stealer, trojan, vmprotectMD5: 3a2e545c68fb5a7f36ab93342674a5d5SHA1: 591a9f18b86f96d175eb91e81259b53050dbc353ANALYSIS DATE:...

Malware Analysis – djvu – a05e2446710b31056a7b8341131c4d1b

February 22, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: a05e2446710b31056a7b8341131c4d1bSHA1: 2328b642303460bb0485f41e7858c36e2796d46bANALYSIS DATE: 2023-02-22T16:52:33ZTTPS: T1060, T1112, T1222, T1012, T1082,...

Malware Analysis – djvu – 51f7ed6470a3475b0387cfe70edf5a3e

February 22, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 51f7ed6470a3475b0387cfe70edf5a3eSHA1: fea08faf267df0f5adadfb24f3ef779c547a1fb8ANALYSIS DATE: 2023-02-22T16:51:44ZTTPS: T1060, T1112, T1222, T1053, T1012,...

Malware Analysis – evasion – dd55605300ab06aa88681158c3d62c00

February 22, 2023

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: dd55605300ab06aa88681158c3d62c00SHA1: 84266949120096817fb371cbb11b9f5539804347ANALYSIS DATE: 2023-02-22T17:05:33ZTTPS: T1112, T1031, T1562, T1489, T1012, T1120, T1082, T1107, T1490, T1018...

Year: 2023

LockBit 3.0 Ransomware Victim: kboattorneys[.]com

BlackCat/ALPHV Ransomware Victim: Markas

BlackCat/ALPHV Ransomware Victim: La Filipina

BlackCat/ALPHV Ransomware Victim: FUTURE BUILDINGS WAS HACKED[.] MORE THAN 150GB SENSETIVE DATA LEAKED

BlackCat/ALPHV Ransomware Victim: Summit Brands

BlackCat/ALPHV Ransomware Victim: EncinoEnergy

BlackCat/ALPHV Ransomware Victim: City of Lakewood

HackerOne Bug Bounty Disclosure: crlf-injection-in-nodejs-undici-via-hostbytimon8

HackerOne Bug Bounty Disclosure: sql-injection-+-insecure-deserialization-leads-to-remote-code-execution-on-https://krisp-aibymikemyers

Malware Analysis – djvu – 77df036ecc85c3fc827a597835bb154f

Malware Analysis – ransomware – 82a7e15a1937c71822814c0399dc4d78

Malware Analysis – djvu – a67ac36abc020c064352dea39f3b66fa

Malware Analysis – djvu – ef6aacb08bf189461833134a11bc2564

Malware Analysis – djvu – c042bdf523442a5fb9d59d1224a5204d

Malware Analysis – djvu – 3981650a4756536a2a4d3e40d3e71a72

Malware Analysis – djvu – 560faa4011e25d4e5be1b2fc506c342a

Malware Analysis – djvu – 3a2e545c68fb5a7f36ab93342674a5d5

Malware Analysis – djvu – a05e2446710b31056a7b8341131c4d1b

Malware Analysis – djvu – 51f7ed6470a3475b0387cfe70edf5a3e

Malware Analysis – evasion – dd55605300ab06aa88681158c3d62c00

LockBit 3.0 Ransomware Victim: carlocksystems[.]com

LockBit 3.0 Ransomware Victim: siqueiracastro[.]com[.]br

LockBit 3.0 Ransomware Victim: lasegunda[.]com[.]ar

LockBit 3.0 Ransomware Victim: fosterfarms[.]com

Cobalt Strike Beacon Detected – 106[.]75[.]247[.]91:80

Cobalt Strike Beacon Detected – 162[.]244[.]24[.]30:80

Cobalt Strike Beacon Detected – 8[.]153[.]97[.]202:88

Cobalt Strike Beacon Detected – 47[.]121[.]190[.]121:81

Cobalt Strike Beacon Detected – 18[.]183[.]60[.]128:80

You may have missed