Year: 2023

Malware Analysis – lockergoga – 16bcc3b7f32c41e7c7222bf37fe39fe6

January 8, 2023

Score: 10 MALWARE FAMILY: lockergogaTAGS:family:lockergoga, banker, ransomware, trojanMD5: 16bcc3b7f32c41e7c7222bf37fe39fe6SHA1: a25bc5442c86bdeb0dec6583f0e80e241745fb73ANALYSIS DATE: 2023-01-08T10:37:02ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – djvu – 4e842f7e1ac9182d03f7234b0700656d

January 8, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 4e842f7e1ac9182d03f7234b0700656dSHA1: b1e3bca3859d22ca45fc9fda20ee1c3ca070cddeANALYSIS DATE: 2023-01-08T11:40:46ZTTPS: T1053, T1005, T1081, T1060,...

Malware Analysis – ransomware – 59631f469b3a3781d8bcf3174e91d3cc

January 8, 2023

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 59631f469b3a3781d8bcf3174e91d3ccSHA1: ec6bf09a09ba3810b7124d06f7f7f84d6038f1faANALYSIS DATE: 2023-01-08T10:33:04ZTTPS: T1005, T1081 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Zoom Rooms for Windows installers privilege escalation | CVE-2022-36930

January 8, 2023

NAME__________Zoom Rooms for Windows installers privilege escalationPlatforms Affected:Zoom Zoom Rooms for Windows clients 5.12Risk Level:8.2Exploitability:UnprovenConsequences:Gain Privilege DESCRIPTION__________Zoom Rooms for Windows...

Zoom Rooms for macOS privilege escalation | CVE-2022-36927

January 8, 2023

NAME__________Zoom Rooms for macOS privilege escalationPlatforms Affected:Zoom Zoom Rooms for macOS 5.11Risk Level:8.8Exploitability:UnprovenConsequences:Gain Privilege DESCRIPTION__________Zoom Rooms for macOS could allow...

Zoom Rooms for macOS privilege escalation | CVE-2022-36926

January 8, 2023

Daily Vulnerability Trends: Sun Jan 08 2023

January 8, 2023

Daily Vulnerability Trends (sourced from VulnMon) CVE NAMECVE DescriptionCVE-2020-28362Go before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service.CVE-2022-43931Out-of-bounds write...

HackerOne Bug Bounty Disclosure: heic-image-preview-can-be-used-to-invoke-imagickbylukasreschkenc

January 7, 2023

Programme HackerOne Nextcloud Nextcloud Submitted by lukasreschkenc lukasreschkenc Report HEIC image preview can be used to invoke Imagick Full Report...

LockBit 3.0 Ransomware Victim: juarez[.]gob[.]mx

January 7, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

LockBit 3.0 Ransomware Victim: takamiya[.]co

January 7, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

LockBit 3.0 Ransomware Victim: 100x100banco[.]com

January 7, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Vice Society Ransomware Victim: Duty Free Philippines

January 7, 2023

Vice Society Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Vice Society Ransomware Victim: Swift Academies

January 7, 2023

Vice Society Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Vice Society Ransomware Victim: City Lit

January 7, 2023

Vice Society Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

REST-Attacker – Designed As A Proof-Of-Concept For The Feasibility Of Testing Generic Real-World REST Implementations

January 7, 2023

REST-Attacker is an automated penetration testing framework for APIs following the REST architecture style. The tool's focus is on streamlining...

Cobalt Stike Beacon Detected – 162[.]33[.]177[.]42:443

January 7, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 195[.]178[.]120[.]143:5000

January 7, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 37[.]220[.]87[.]12:80

January 7, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 216[.]83[.]45[.]202:443

January 7, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – lockbit – 2c0eeb266061631845a9e21156801afd

January 7, 2023

Score: 10 MALWARE FAMILY: lockbitTAGS:family:lockbit, ransomwareMD5: 2c0eeb266061631845a9e21156801afdSHA1: e112623223602cbcdd95268121c9ea332ba5983eANALYSIS DATE: 2023-01-07T09:04:11ZTTPS: T1491, T1112, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – lockbit – ebe673b2ee28dd65565f2f389279ac47

January 7, 2023

Score: 10 MALWARE FAMILY: lockbitTAGS:family:lockbit, evasion, persistence, ransomwareMD5: ebe673b2ee28dd65565f2f389279ac47SHA1: bcebe09c61d3e6c47aefcb6bca0882752e0053a9ANALYSIS DATE: 2023-01-07T09:03:51ZTTPS: T1490, T1059, T1107, T1060, T1112, T1082, T1018, T1491...

Malware Analysis – lockbit – 00a50f67d713a45cea6dc956c30042c1

January 7, 2023

Score: 10 MALWARE FAMILY: lockbitTAGS:family:lockbit, ransomwareMD5: 00a50f67d713a45cea6dc956c30042c1SHA1: bf02ef3db484122b551da73ce83c2aac79bbd2fcANALYSIS DATE: 2023-01-07T09:04:07ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – smokeloader – 721848630792cc8d766f7a66b7dff04e

January 7, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 721848630792cc8d766f7a66b7dff04eSHA1: b9edbbf6d8ed9aa909583d5cfeb5ccafb8fefd49ANALYSIS DATE: 2023-01-07T09:06:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 333aa9917c09f5ccf2e8c5bb21ab8292

January 7, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 333aa9917c09f5ccf2e8c5bb21ab8292SHA1: 890625b934a90264290a1ea636e725eb06ae090aANALYSIS DATE: 2023-01-07T09:51:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Year: 2023

Malware Analysis – lockergoga – 16bcc3b7f32c41e7c7222bf37fe39fe6

Malware Analysis – djvu – 4e842f7e1ac9182d03f7234b0700656d

Malware Analysis – ransomware – 59631f469b3a3781d8bcf3174e91d3cc

Zoom Rooms for Windows installers privilege escalation | CVE-2022-36930

Zoom Rooms for macOS privilege escalation | CVE-2022-36927

Zoom Rooms for macOS privilege escalation | CVE-2022-36926

Daily Vulnerability Trends: Sun Jan 08 2023

HackerOne Bug Bounty Disclosure: heic-image-preview-can-be-used-to-invoke-imagickbylukasreschkenc

LockBit 3.0 Ransomware Victim: juarez[.]gob[.]mx

LockBit 3.0 Ransomware Victim: takamiya[.]co

LockBit 3.0 Ransomware Victim: 100x100banco[.]com

Vice Society Ransomware Victim: Duty Free Philippines

Vice Society Ransomware Victim: Swift Academies

Vice Society Ransomware Victim: City Lit

REST-Attacker – Designed As A Proof-Of-Concept For The Feasibility Of Testing Generic Real-World REST Implementations

Cobalt Stike Beacon Detected – 162[.]33[.]177[.]42:443

Cobalt Stike Beacon Detected – 195[.]178[.]120[.]143:5000

Cobalt Stike Beacon Detected – 37[.]220[.]87[.]12:80

Cobalt Stike Beacon Detected – 216[.]83[.]45[.]202:443

Malware Analysis – lockbit – 2c0eeb266061631845a9e21156801afd

Malware Analysis – lockbit – ebe673b2ee28dd65565f2f389279ac47

Malware Analysis – lockbit – 00a50f67d713a45cea6dc956c30042c1

Malware Analysis – smokeloader – 721848630792cc8d766f7a66b7dff04e

Malware Analysis – smokeloader – 333aa9917c09f5ccf2e8c5bb21ab8292

CovenantC2 Detected – 34[.]132[.]16[.]207:7443

TryHackMe Walkthrough: Whats Your Name?

CVE Alert: CVE-2025-21593

CVE Alert: CVE-2025-21602

CVE Alert: CVE-2025-21592

You may have missed