Year: 2023

Daily Vulnerability Trends: Mon Jan 09 2023

January 9, 2023

Daily Vulnerability Trends (sourced from VulnMon) CVE NAMECVE DescriptionCVE-2022-37958SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Information Disclosure Vulnerability.CVE-2022-46689A race condition was...

Malware Analysis – djvu – bd1436b16af05a69f8b8d87c813af376

January 9, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: bd1436b16af05a69f8b8d87c813af376SHA1: 9c84a2b8f40cc92e0549877983f792efff96ee78ANALYSIS DATE: 2023-01-09T04:11:16ZTTPS: T1060, T1112, T1222, T1005,...

Malware Analysis – dcrat – 9e4e9a0d63d345bd24e6a974f751bd6b

January 9, 2023

Score: 10 MALWARE FAMILY: dcratTAGS:family:dcrat, family:djvu, family:redline, family:smokeloader, family:vidar, botnet:19, botnet:@2023@new, backdoor, discovery, infostealer, persistence, ransomware, rat, spyware, stealer, trojanMD5:...

Malware Analysis – djvu – c1d43aa7d4455f59a66ff383f5736931

January 9, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:19, backdoor, discovery, persistence, ransomware, spyware, stealer, trojanMD5: c1d43aa7d4455f59a66ff383f5736931SHA1: a654ea0183d33c617cc58123a66b345a6b6bf62aANALYSIS DATE: 2023-01-09T04:50:28ZTTPS: T1012,...

Malware Analysis – djvu – ca487f76d723527db20f804d50c39eaa

January 9, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: ca487f76d723527db20f804d50c39eaaSHA1: 3fd3ba30bc77020a5e3bebf8c9d34a0834ad54b7ANALYSIS DATE: 2023-01-09T05:44:15ZTTPS: T1005, T1081, T1012, T1222,...

Malware Analysis – smokeloader – 0d8206f8fbd4cad4c14fbc48e1ecec79

January 9, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 0d8206f8fbd4cad4c14fbc48e1ecec79SHA1: 446cf441f1280e16a10a6a7cc48e59aec15d98b3ANALYSIS DATE: 2023-01-09T05:16:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 0af68ab2edffc49632fd170dc3c97127

January 9, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 0af68ab2edffc49632fd170dc3c97127SHA1: fd585f3813b61a70a5f102c2208b212b2f324873ANALYSIS DATE: 2023-01-09T04:26:02ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

DoorDash – 367,476 breached accounts

January 9, 2023

HIBP In August 2022, the food ordering and delivery service DoorDash disclosed a data breach that impacted a portion of...

Cobalt Stike Beacon Detected – 107[.]189[.]1[.]15:443

January 9, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

BlackCat/ALPHV Ransomware Victim: Koo Wee Rup Secondary College

January 9, 2023

BlackCat / ALPHV Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the...

Cobalt Stike Beacon Detected – 107[.]148[.]130[.]141:80

January 9, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 45[.]32[.]121[.]12:9000

January 9, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 38[.]60[.]50[.]186:80

January 9, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 18[.]205[.]189[.]67:443

January 9, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – 04a8fd3346eabeb3fefa118206f9aa1b

January 9, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 04a8fd3346eabeb3fefa118206f9aa1bSHA1: 92d3b89a5a9e53867c028a9a4569af7bd884663bANALYSIS DATE: 2023-01-08T22:42:47ZTTPS: T1222, T1012, T1082, T1005,...

Malware Analysis – dcrat – 4b63df4f727bc68412c39ae8cecd54fe

January 9, 2023

Score: 10 MALWARE FAMILY: dcratTAGS:family:dcrat, family:djvu, family:smokeloader, family:vidar, botnet:19, backdoor, collection, discovery, infostealer, persistence, ransomware, rat, spyware, stealer, trojanMD5: 4b63df4f727bc68412c39ae8cecd54feSHA1:...

Malware Analysis – djvu – 1de29ef9bed38c0a81a30a09369d8f7f

January 9, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 1de29ef9bed38c0a81a30a09369d8f7fSHA1: 52f41573d0ce0e4ea96380b0f23c1c5dea872c76ANALYSIS DATE: 2023-01-08T21:54:46ZTTPS: T1005, T1081, T1012, T1082,...

Year: 2023

Daily Vulnerability Trends: Mon Jan 09 2023

Malware Analysis – djvu – bd1436b16af05a69f8b8d87c813af376

Malware Analysis – dcrat – 9e4e9a0d63d345bd24e6a974f751bd6b

Malware Analysis – djvu – c1d43aa7d4455f59a66ff383f5736931

Malware Analysis – djvu – ca487f76d723527db20f804d50c39eaa

Malware Analysis – smokeloader – 0d8206f8fbd4cad4c14fbc48e1ecec79

Malware Analysis – smokeloader – 0af68ab2edffc49632fd170dc3c97127

DoorDash – 367,476 breached accounts

Cobalt Stike Beacon Detected – 107[.]189[.]1[.]15:443

BlackCat/ALPHV Ransomware Victim: Koo Wee Rup Secondary College

Cobalt Stike Beacon Detected – 107[.]148[.]130[.]141:80

Cobalt Stike Beacon Detected – 45[.]32[.]121[.]12:9000

Cobalt Stike Beacon Detected – 38[.]60[.]50[.]186:80

Cobalt Stike Beacon Detected – 18[.]205[.]189[.]67:443

Malware Analysis – djvu – 04a8fd3346eabeb3fefa118206f9aa1b

Malware Analysis – dcrat – 4b63df4f727bc68412c39ae8cecd54fe

Malware Analysis – djvu – 1de29ef9bed38c0a81a30a09369d8f7f

LockBit 3.0 Ransomware Victim: asianrecorp[.]com

HackerOne Bug Bounty Disclosure: race-condition-in-joining-ctf-groupbyzeyu2001

LockBit 3.0 Ransomware Victim: millennia[.]pro

BreachForums Database Leak Alert: EDAboard

Cobalt Stike Beacon Detected – 82[.]157[.]8[.]217:5555

Cobalt Stike Beacon Detected – 185[.]174[.]172[.]221:80

Cobalt Stike Beacon Detected – 101[.]42[.]27[.]149:80

Cobalt Strike Beacon Detected – 111[.]119[.]217[.]51:8889

Cobalt Strike Beacon Detected – 115[.]120[.]210[.]236:9999

Cobalt Strike Beacon Detected – 23[.]94[.]169[.]124:9090

Cobalt Strike Beacon Detected – 8[.]217[.]7[.]159:1234

Cobalt Strike Beacon Detected – 106[.]14[.]69[.]133:8999

You may have missed