Year: 2023

Malware Analysis – djvu – 1da519e1cf49bb501127d725cd71d13d

January 21, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, stealerMD5: 1da519e1cf49bb501127d725cd71d13dSHA1: 53b253d5a7b42acae4cbb7cd6f2d943bcc7e484fANALYSIS DATE: 2023-01-21T09:56:05ZTTPS: T1130, T1112, T1060, T1222, T1082,...

Malware Analysis – djvu – db9ca7be33c09a07e9bf8631da3f943f

January 21, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: db9ca7be33c09a07e9bf8631da3f943fSHA1: 517345fed6578132c020d79c5f46eae92c2cd991ANALYSIS DATE: 2023-01-21T11:02:19ZTTPS: T1060, T1112, T1012, T1082,...

Malware Analysis – evasion – 048d2cc9af6b8a64b48a6bed39ce3a94

January 21, 2023

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, pyinstaller, ransomware, upxMD5: 048d2cc9af6b8a64b48a6bed39ce3a94SHA1: 6bba401ef23fb8aee4f6bd2ce2e0264c1159094cANALYSIS DATE: 2023-01-21T11:26:21ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – discovery – cc42a6beb3e2e6d9404f015076a3c28a

January 21, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: cc42a6beb3e2e6d9404f015076a3c28aSHA1: d71b84e8ae3c692a96596d67138a9755af595a35ANALYSIS DATE: 2023-01-21T11:21:02ZTTPS: T1112, T1082, T1060, T1012, T1042 ScoreMeaningExample10Known badA malware family...

Dell EMC PV ME5 privilege escalation | CVE-2023-23691

January 21, 2023

NAME__________Dell EMC PV ME5 privilege escalationPlatforms Affected:Dell PowerVault ME5 1.1.0.0Risk Level:8.1Exploitability:UnprovenConsequences:Gain Privileges DESCRIPTION__________Dell EMC PV ME5 could allow a remote...

LISTSERV cross-site scripting | CVE-2022-39195

January 21, 2023

NAME__________LISTSERV cross-site scriptingPlatforms Affected:Risk Level:7.2Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________LISTSERV is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A...

Git Git GUI privilege escalation | CVE-2022-41953

January 21, 2023

NAME__________Git Git GUI privilege escalationPlatforms Affected:Git for Windows Git for Windows 2.39.0Risk Level:8.6Exploitability:UnprovenConsequences:Gain Privileges DESCRIPTION__________Git GUI could allow a remote...

Daily Vulnerability Trends: Sat Jan 21 2023

January 21, 2023

Daily Vulnerability Trends (sourced from VulnMon) CVE NAMECVE DescriptionCVE-2022-4873On Netcomm router models NF20MESH, NF20, and NL1902 a stack based buffer...

Malware Analysis – discovery – 87234dff69f6c8edfaf828a5d491c886

January 21, 2023

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploitMD5: 87234dff69f6c8edfaf828a5d491c886SHA1: 69902f3c575191db8114aa34f99b27ceae3a9f72ANALYSIS DATE: 2023-01-21T03:49:51ZTTPS: T1082, T1012, T1222, T1120 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 23793d8263ed7779fb8415e966c4efee

January 21, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 23793d8263ed7779fb8415e966c4efeeSHA1: ec4f0d9147599c8a860ff5e3b770cbc908c5712eANALYSIS DATE: 2023-01-21T04:36:47ZTTPS: T1012, T1082, T1053, T1060,...

Malware Analysis – dharma – 5787665e570a0a7e7deaf48aa539896c

January 21, 2023

Score: 10 MALWARE FAMILY: dharmaTAGS:family:dharma, persistence, ransomware, spyware, stealerMD5: 5787665e570a0a7e7deaf48aa539896cSHA1: 15be972b9566e275accd5498229b98f69e3430c0ANALYSIS DATE: 2023-01-21T04:20:54ZTTPS: T1107, T1490, T1005, T1081, T1082, T1060, T1112...

Malware Analysis – djvu – 8569d60d9c0c1b628b34434d3bbaef12

January 21, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 8569d60d9c0c1b628b34434d3bbaef12SHA1: 3467cff730bf61c98336af6c1d9bc72b75ec5b20ANALYSIS DATE: 2023-01-21T05:50:44ZTTPS: T1082, T1005, T1081, T1012,...

Malware Analysis – – 34635fd96a958116eda7e430185bd347

January 21, 2023

Score: 8 MALWARE FAMILY: TAGS:MD5: 34635fd96a958116eda7e430185bd347SHA1: 69dfb57b9dc5fdb371abcd3d8aa78d97864f19b6ANALYSIS DATE: 2023-01-21T05:10:23ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Royal Ransomware Victim: Cadmet

January 21, 2023

RoyalRansomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the...

Malware Analysis – discovery – d8ce0d9b7b430261c6d8fc6ca667ffb2

January 21, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, ransomwareMD5: d8ce0d9b7b430261c6d8fc6ca667ffb2SHA1: 5f25557368e50c362105e025e597364fc53b1eb8ANALYSIS DATE: 2023-01-20T20:56:18ZTTPS: T1082, T1057, T1012 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Cobalt Stike Beacon Detected – 118[.]31[.]36[.]92:80

January 21, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 35[.]74[.]29[.]162:443

January 21, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 20[.]119[.]67[.]107:4433

January 21, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 107[.]174[.]247[.]46:443

January 21, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – – 01ccead2e9497ce04ab0c2531320224d

January 21, 2023

Score: 7 MALWARE FAMILY: TAGS:MD5: 01ccead2e9497ce04ab0c2531320224dSHA1: 9b7ebc4d8f97b0e7463a382f3b748a4be48a06a1ANALYSIS DATE: 2023-01-20T21:08:45ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – 57e25afb0160f18f4f70df2937ab9f9c

January 21, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 57e25afb0160f18f4f70df2937ab9f9cSHA1: 625041462fc634fd3b498cf140506b60fc0c7734ANALYSIS DATE: 2023-01-20T21:31:46ZTTPS: T1005, T1081, T1222, T1012,...

Malware Analysis – ransomware – 01381b09f42b937c26fecdc0f9ffbee1

January 21, 2023

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 01381b09f42b937c26fecdc0f9ffbee1SHA1: 12c0cd515fb3db1d3fd3941098748697543570a2ANALYSIS DATE: 2023-01-20T22:17:11ZTTPS: T1491, T1112, T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 274168c05bfc3c620cf376b712e80fc5

January 21, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 274168c05bfc3c620cf376b712e80fc5SHA1: 0406d8a5dc4c3006a3f12c8c1e5e80bcf813baeaANALYSIS DATE: 2023-01-20T22:10:48ZTTPS: T1012, T1082, T1060, T1112,...

Malware Analysis – djvu – 832e24b46741fb33e811fdd3212f364e

January 21, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 832e24b46741fb33e811fdd3212f364eSHA1: b718d24c06c9e91ab49be33b71fd5b82ffaf08e8ANALYSIS DATE: 2023-01-20T23:30:50ZTTPS: T1060, T1112, T1053, T1005,...

Year: 2023

Malware Analysis – djvu – 1da519e1cf49bb501127d725cd71d13d

Malware Analysis – djvu – db9ca7be33c09a07e9bf8631da3f943f

Malware Analysis – evasion – 048d2cc9af6b8a64b48a6bed39ce3a94

Malware Analysis – discovery – cc42a6beb3e2e6d9404f015076a3c28a

Dell EMC PV ME5 privilege escalation | CVE-2023-23691

LISTSERV cross-site scripting | CVE-2022-39195

Git Git GUI privilege escalation | CVE-2022-41953

Daily Vulnerability Trends: Sat Jan 21 2023

Malware Analysis – discovery – 87234dff69f6c8edfaf828a5d491c886

Malware Analysis – djvu – 23793d8263ed7779fb8415e966c4efee

Malware Analysis – dharma – 5787665e570a0a7e7deaf48aa539896c

Malware Analysis – djvu – 8569d60d9c0c1b628b34434d3bbaef12

Malware Analysis – – 34635fd96a958116eda7e430185bd347

Royal Ransomware Victim: Cadmet

Malware Analysis – discovery – d8ce0d9b7b430261c6d8fc6ca667ffb2

Cobalt Stike Beacon Detected – 118[.]31[.]36[.]92:80

Cobalt Stike Beacon Detected – 35[.]74[.]29[.]162:443

Cobalt Stike Beacon Detected – 20[.]119[.]67[.]107:4433

Cobalt Stike Beacon Detected – 107[.]174[.]247[.]46:443

Malware Analysis – – 01ccead2e9497ce04ab0c2531320224d

Malware Analysis – djvu – 57e25afb0160f18f4f70df2937ab9f9c

Malware Analysis – ransomware – 01381b09f42b937c26fecdc0f9ffbee1

Malware Analysis – djvu – 274168c05bfc3c620cf376b712e80fc5

Malware Analysis – djvu – 832e24b46741fb33e811fdd3212f364e

CVE Alert: CVE-2024-57823

CVE Alert: CVE-2024-41787

CVE Alert: CVE-2024-57686

CVE Alert: CVE-2024-57822

CVE Alert: CVE-2024-57687

You may have missed