Year: 2023

Malware Analysis – ransomware – 526cb037d9e9508e3be1c4cb9031d7be

February 6, 2023

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 526cb037d9e9508e3be1c4cb9031d7beSHA1: 2d6c18a4871cbc6a491d2d25172d6bb2eb09e322ANALYSIS DATE: 2023-02-05T21:26:35ZTTPS: T1102 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – amadey – ddd68e4ae82bcc1ecab5398ea2d3748e

February 6, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:laplas, family:smokeloader, family:vidar, botnet:19, backdoor, clipper, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: ddd68e4ae82bcc1ecab5398ea2d3748eSHA1:...

Malware Analysis – discovery – 939a14c3eaab6a87c836843a36a0ad44

February 6, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: 939a14c3eaab6a87c836843a36a0ad44SHA1: fa37605be662673d15104e693dd3bc8a450313afANALYSIS DATE: 2023-02-05T21:31:29ZTTPS: T1130, T1112, T1012, T1082, T1060 ScoreMeaningExample10Known badA malware family...

Malware Analysis – ransomware – c15bd704405c47f1cf081cba3ec67d17

February 6, 2023

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: c15bd704405c47f1cf081cba3ec67d17SHA1: 5c74894ad0228821cef1794cfeb6a989e7ec551aANALYSIS DATE: 2023-02-05T23:00:55ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – wannacry – efe76bf09daba2c594d2bc173d9b5cf0

February 6, 2023

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, persistence, ransomware, spyware, stealer, wormMD5: efe76bf09daba2c594d2bc173d9b5cf0SHA1: ba5de52939cb809eae10fdbb7fac47095a9599a7ANALYSIS DATE: 2023-02-05T23:54:03ZTTPS: T1082, T1491, T1112, T1107, T1490,...

Malware Analysis – djvu – 1edb26e25c326398bf841cb61b8bfa91

February 6, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 1edb26e25c326398bf841cb61b8bfa91SHA1: 5a65720208dba0c93d493af61dd58cf4a202ded6ANALYSIS DATE: 2023-02-05T21:50:41ZTTPS: T1082, T1012, T1060, T1112,...

Malware Analysis – amadey – f375509ec7c94ea952a46ef291ebf016

February 6, 2023

HackerOne Bug Bounty Disclosure: open-redirectionbydoosec101

February 5, 2023

Programme HackerOne JetBlue JetBlue Submitted by doosec101 doosec101 Report Open Redirection Full Report A considerable amount of time and effort...

HackerOne Bug Bounty Disclosure: access-to-tomcat-manager-with-default-credsbydoosec101

February 5, 2023

Programme HackerOne JetBlue JetBlue Submitted by doosec101 doosec101 Report Access to tomcat-manager with default creds Full Report A considerable amount...

Malware Analysis – amadey – 94da092e8e494a9399a9a12b127d277a

February 5, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:fabookie, family:laplas, family:smokeloader, family:vidar, botnet:19, backdoor, clipper, discovery, evasion, persistence, ransomware, spyware, stealer, trojan,...

Malware Analysis – ransomware – 553d6e39acfbed86ed67ebc1a95cb9c6

February 5, 2023

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 553d6e39acfbed86ed67ebc1a95cb9c6SHA1: 750c7de058a4cc1c92ed28862f884c19487ae67fANALYSIS DATE: 2023-02-05T15:07:00ZTTPS: T1012, T1082, T1130, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – amadey – bf8e4c9c13f7c1fc4efbb3c120e28ec2

February 5, 2023

Malware Analysis – discovery – 1a02eb3168bbdd32c405eb1b285a2c73

February 5, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: 1a02eb3168bbdd32c405eb1b285a2c73SHA1: 7ded705a858dc692aa39d85dd24546a6efaa35ecANALYSIS DATE: 2023-02-05T15:31:53ZTTPS: T1112, T1102, T1012, T1082, T1042, T1060 ScoreMeaningExample10Known badA malware...

Malware Analysis – djvu – 4c716921194529611dea61850bdeaab1

February 5, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 4c716921194529611dea61850bdeaab1SHA1: d99854ef33473547d88768366efb4b97df51c9a3ANALYSIS DATE: 2023-02-05T16:18:53ZTTPS: T1012, T1053, T1005, T1081,...

Malware Analysis – discovery – 1b787e4e36dd37d9ee28ddc0dc72ef94

February 5, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: 1b787e4e36dd37d9ee28ddc0dc72ef94SHA1: b25d730507352b7476e70da79290a5b5befa4344ANALYSIS DATE: 2023-02-05T16:41:07ZTTPS: T1060, T1012, T1082, T1112, T1042 ScoreMeaningExample10Known badA malware family...

Malware Analysis – djvu – 04e7c5bc175af23b20b410a418eddc20

February 5, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 04e7c5bc175af23b20b410a418eddc20SHA1: e50af1499fd4e16d218cb1d6cc1a093b786e1eb8ANALYSIS DATE: 2023-02-05T17:41:02ZTTPS: T1005, T1081, T1053, T1082,...

Malware Analysis – djvu – 4fa1b540403f6d9b8152a2379a9c7f86

February 5, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 4fa1b540403f6d9b8152a2379a9c7f86SHA1: f66d7c39925b615f818d4e5c314205c9e33877ebANALYSIS DATE: 2023-02-05T17:19:37ZTTPS: T1005, T1081, T1222, T1082,...

Malware Analysis – ransomware – 91b18376763422b66e480613442500cc

February 5, 2023

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 91b18376763422b66e480613442500ccSHA1: 2ab01c91c5627a16c83c94020d7ecc4d47acacefANALYSIS DATE: 2023-02-05T17:12:48ZTTPS: T1491, T1112, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Year: 2023

Malware Analysis – ransomware – 526cb037d9e9508e3be1c4cb9031d7be

Malware Analysis – amadey – ddd68e4ae82bcc1ecab5398ea2d3748e

Malware Analysis – discovery – 939a14c3eaab6a87c836843a36a0ad44

Malware Analysis – ransomware – c15bd704405c47f1cf081cba3ec67d17

Malware Analysis – wannacry – efe76bf09daba2c594d2bc173d9b5cf0

Malware Analysis – djvu – 1edb26e25c326398bf841cb61b8bfa91

Malware Analysis – amadey – f375509ec7c94ea952a46ef291ebf016

HackerOne Bug Bounty Disclosure: open-redirectionbydoosec101

HackerOne Bug Bounty Disclosure: access-to-tomcat-manager-with-default-credsbydoosec101

Malware Analysis – amadey – 94da092e8e494a9399a9a12b127d277a

Malware Analysis – ransomware – 553d6e39acfbed86ed67ebc1a95cb9c6

Malware Analysis – amadey – bf8e4c9c13f7c1fc4efbb3c120e28ec2

Malware Analysis – discovery – 1a02eb3168bbdd32c405eb1b285a2c73

Malware Analysis – djvu – 4c716921194529611dea61850bdeaab1

Malware Analysis – discovery – 1b787e4e36dd37d9ee28ddc0dc72ef94

Malware Analysis – djvu – 04e7c5bc175af23b20b410a418eddc20

Malware Analysis – djvu – 4fa1b540403f6d9b8152a2379a9c7f86

Malware Analysis – ransomware – 91b18376763422b66e480613442500cc

Malware Analysis – amadey – 1537544ea816ac5717c9b25b269342fa

LockBit 3.0 Ransomware Victim: bplawyers[.]co[.]id

Cobalt Stike Beacon Detected – 1[.]65[.]218[.]184:8023

Cobalt Stike Beacon Detected – 81[.]161[.]229[.]111:4433

Cobalt Stike Beacon Detected – 180[.]76[.]247[.]230:2345

Cobalt Stike Beacon Detected – 195[.]189[.]96[.]249:443

CISA: CISA Adds One Known Exploited Vulnerability to Catalog

CISA: ASD’s ACSC, CISA, and US and International Partners Release Guidance on Choosing Secure and Verifiable Technologies

CISA: Microsoft Releases December 2024 Security Updates

CISA: Ivanti Releases Security Updates for Multiple Products

CISA: Cisco Releases Security Updates for NX-OS Software

You may have missed