Year: 2023

Malware Analysis – djvu – 82fddf18257b88127a7ec61e79a5208a

January 29, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 82fddf18257b88127a7ec61e79a5208aSHA1: 3733c9040487eb9b815da7d6b0fac4c1ff47c297ANALYSIS DATE: 2023-01-28T21:31:16ZTTPS: T1060, T1112, T1053, T1012,...

Malware Analysis – discovery – 93dc9f86cc0b02d0c89599099447ab86

January 29, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, ransomwareMD5: 93dc9f86cc0b02d0c89599099447ab86SHA1: 2536fa3fdbf311fa0bfb8e7a7c1851b547c65935ANALYSIS DATE: 2023-01-28T22:37:32ZTTPS: T1012, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – – 8d7df991938615da66351c6ff74b9d3d

January 29, 2023

Score: 1 MALWARE FAMILY: TAGS:MD5: 8d7df991938615da66351c6ff74b9d3dSHA1: c578d96f7a34816ba3b2cf2ace512e9d0da9e437ANALYSIS DATE: 2023-01-28T21:21:33ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – smokeloader – 292c2041324167f161a057a980b1e6d0

January 29, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 292c2041324167f161a057a980b1e6d0SHA1: 78fb694be9dc448909344f6aebd0e2f69b95b920ANALYSIS DATE: 2023-01-28T22:30:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 970848bfcc1c80ef7334112696e02b2c

January 29, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:vidar, botnet:19, botnet:@2023@new, discovery, infostealer, persistence, ransomware, spyware, stealer, vmprotectMD5: 970848bfcc1c80ef7334112696e02b2cSHA1: 92ff514819f602d9bbd93757b096226e0661d277ANALYSIS DATE: 2023-01-28T23:13:38ZTTPS:...

Malware Analysis – discovery – bfb5e25db4aa506dd821667fe22d8a0e

January 29, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, evasion, persistence, ransomwareMD5: bfb5e25db4aa506dd821667fe22d8a0eSHA1: ee722c8ed6130adb7790b7d943721d1fd1ae216aANALYSIS DATE: 2023-01-28T23:23:44ZTTPS: T1060, T1102, T1012, T1112, T1031, T1120, T1082, T1107,...

Malware Analysis – djvu – f2a5e61709415d155b3a251f5bae6a2f

January 29, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: f2a5e61709415d155b3a251f5bae6a2fSHA1: 52b259d18e24b11d0d9bd4e6378c52b59ec86a68ANALYSIS DATE: 2023-01-28T23:22:45ZTTPS: T1222, T1005, T1081, T1012,...

Malware Analysis – wannacry – c1f8ec1bc65359d192fcd18d7cffb958

January 29, 2023

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, persistence, ransomware, wormMD5: c1f8ec1bc65359d192fcd18d7cffb958SHA1: aa89fef9d4ec07191c2a0b034a1c3694d94cf4cfANALYSIS DATE: 2023-01-28T23:50:13ZTTPS: T1012, T1082, T1060, T1112, T1491, T1222, T1107,...

LockBit 3.0 Ransomware Victim: ylresin[.]com

January 28, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the...

BlackCat/ALPHV Ransomware Victim: Portnoff Law Associates

January 28, 2023

BlackCat / ALPHV Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the...

BlackCat/ALPHV Ransomware Victim: Ultrabulk

January 28, 2023

BlackCat / ALPHV Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the...

BlackCat/ALPHV Ransomware Victim: Westmont Hospitality Group

January 28, 2023

BlackCat / ALPHV Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the...

Vice Society Ransomware Victim: EGR

January 28, 2023

Vice Society Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Malware Analysis – smokeloader – 033292eea92f116fd01a9543d0baac9d

January 28, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 033292eea92f116fd01a9543d0baac9dSHA1: bd40c4afe760682ef7e1c636220470668a815207ANALYSIS DATE: 2023-01-28T15:55:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – discovery – 9318da03efef6ed12d77c06ce82682e9

January 28, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, ransomwareMD5: 9318da03efef6ed12d77c06ce82682e9SHA1: 52570e7fdef13825c036a9cf68564722fbe77224ANALYSIS DATE: 2023-01-28T15:56:48ZTTPS: T1082, T1057, T1012, T1130, T1112 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – djvu – 9b2723aff22fb7686c743c66814c0d34

January 28, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 9b2723aff22fb7686c743c66814c0d34SHA1: c99097b4c075993f932b9b85dd22a58ef9ff8f77ANALYSIS DATE: 2023-01-28T16:38:41ZTTPS: T1005, T1081, T1053, T1012,...

Malware Analysis – evasion – c2ab67a2561ac7f5add3256fe9bf85d4

January 28, 2023

Score: 8 MALWARE FAMILY: evasionTAGS:evasion, trojan, upxMD5: c2ab67a2561ac7f5add3256fe9bf85d4SHA1: cc5742d1f128c439740a56734c0e105f11a62fe6ANALYSIS DATE: 2023-01-28T16:49:51ZTTPS: T1102, T1082, T1012 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – evasion – be85e40adf8085830354267907afd064

January 28, 2023

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: be85e40adf8085830354267907afd064SHA1: 671c1f99a08742b55064e67240731156aacdad54ANALYSIS DATE: 2023-01-28T16:02:17ZTTPS: T1082, T1004, T1112, T1102, T1012, T1088, T1089, T1491...

Malware Analysis – djvu – 9107a08df8ec615117b639ff76d6c6b5

January 28, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 9107a08df8ec615117b639ff76d6c6b5SHA1: 20a6bc10d6b91774db98bbb2fde3f580a3d5ba29ANALYSIS DATE: 2023-01-28T17:21:09ZTTPS: T1060, T1112, T1222, T1082,...

Malware Analysis – smokeloader – 11511ba5fd4de1fc5051d0bcefb388ae

January 28, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 11511ba5fd4de1fc5051d0bcefb388aeSHA1: 5e9476f39df92e01d0952e703869e71f85d470cdANALYSIS DATE: 2023-01-28T17:39:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – raccoon – 864ac4716a3408531e003f3b164313f9

January 28, 2023

Score: 10 MALWARE FAMILY: raccoonTAGS:family:raccoon, botnet:dd0387d01be1c5a55fe4c0c4bc3d4a62, discovery, persistence, ransomware, spyware, stealerMD5: 864ac4716a3408531e003f3b164313f9SHA1: f7ea374f73784dd3a323366278c68ae5c02b1c86ANALYSIS DATE: 2023-01-28T17:44:18ZTTPS: T1060, T1112, T1082, T1042, T1012,...

Malware Analysis – smokeloader – 5f995edac40f6c47bd576c59ba61a6b3

January 28, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 5f995edac40f6c47bd576c59ba61a6b3SHA1: 01a1324e7143712928b4c2d6fc044bdb0232e498ANALYSIS DATE: 2023-01-28T17:02:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Vice Society Ransomware Victim: EGR

January 28, 2023

Vice Society Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Cobalt Stike Beacon Detected – 47[.]242[.]63[.]91:8011

January 28, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Year: 2023

Malware Analysis – djvu – 82fddf18257b88127a7ec61e79a5208a

Malware Analysis – discovery – 93dc9f86cc0b02d0c89599099447ab86

Malware Analysis – – 8d7df991938615da66351c6ff74b9d3d

Malware Analysis – smokeloader – 292c2041324167f161a057a980b1e6d0

Malware Analysis – djvu – 970848bfcc1c80ef7334112696e02b2c

Malware Analysis – discovery – bfb5e25db4aa506dd821667fe22d8a0e

Malware Analysis – djvu – f2a5e61709415d155b3a251f5bae6a2f

Malware Analysis – wannacry – c1f8ec1bc65359d192fcd18d7cffb958

LockBit 3.0 Ransomware Victim: ylresin[.]com

BlackCat/ALPHV Ransomware Victim: Portnoff Law Associates

BlackCat/ALPHV Ransomware Victim: Ultrabulk

BlackCat/ALPHV Ransomware Victim: Westmont Hospitality Group

Vice Society Ransomware Victim: EGR

Malware Analysis – smokeloader – 033292eea92f116fd01a9543d0baac9d

Malware Analysis – discovery – 9318da03efef6ed12d77c06ce82682e9

Malware Analysis – djvu – 9b2723aff22fb7686c743c66814c0d34

Malware Analysis – evasion – c2ab67a2561ac7f5add3256fe9bf85d4

Malware Analysis – evasion – be85e40adf8085830354267907afd064

Malware Analysis – djvu – 9107a08df8ec615117b639ff76d6c6b5

Malware Analysis – smokeloader – 11511ba5fd4de1fc5051d0bcefb388ae

Malware Analysis – raccoon – 864ac4716a3408531e003f3b164313f9

Malware Analysis – smokeloader – 5f995edac40f6c47bd576c59ba61a6b3

Vice Society Ransomware Victim: EGR

Cobalt Stike Beacon Detected – 47[.]242[.]63[.]91:8011

Fake Job Offers from CrowdStrike Used by Cybercriminals to Distribute Cryptominer

CISA: Microsoft Releases December 2024 Security Updates

CISA: Cisco Releases Security Updates for NX-OS Software

CISA: Ivanti Releases Security Updates for Multiple Products

CISA: CISA Adds One Known Exploited Vulnerability to Catalog

You may have missed