Year: 2023

Malware Analysis – djvu – 62424bb1fdd7926fcb49ef7c8f13e272

January 5, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 62424bb1fdd7926fcb49ef7c8f13e272SHA1: 13a3afed29a458e247f74375c00515a205dc87e1ANALYSIS DATE: 2023-01-05T16:11:06ZTTPS: T1005, T1081, T1060, T1112,...

Malware Analysis – djvu – b2fabf8e6cd2703ace9d85f6182b4b51

January 5, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: b2fabf8e6cd2703ace9d85f6182b4b51SHA1: dc6371e4ebda8f90b6cf4421c18d46956ba8bd34ANALYSIS DATE: 2023-01-05T16:47:26ZTTPS: T1060, T1112, T1222, T1053,...

Malware Analysis – amadey – 1170fa844f90aded8f9c12493f54d543

January 5, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:dcrat, family:djvu, family:smokeloader, family:vidar, botnet:19, backdoor, collection, discovery, infostealer, persistence, ransomware, rat, spyware, stealer, trojan,...

Malware Analysis – discovery – 4d8a60c6e654bd38212cebf3d17e5d38

January 5, 2023

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploit, persistenceMD5: 4d8a60c6e654bd38212cebf3d17e5d38SHA1: 9911ab18310d400ba4698a97c591e3893a7e3400ANALYSIS DATE: 2023-01-05T17:28:00ZTTPS: T1012, T1060, T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – – d32877932ed310382b30efdd3cf67b29

January 5, 2023

Score: 1 MALWARE FAMILY: TAGS:MD5: d32877932ed310382b30efdd3cf67b29SHA1: 7faaad8a8aea96bcf78fdbc4ea6f73d76d58143aANALYSIS DATE: 2023-01-05T17:18:42ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – smokeloader – 4a0e3b3995cdc315c4caf048c3211f89

January 5, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 4a0e3b3995cdc315c4caf048c3211f89SHA1: 4a47887a6190b1a816c6db5cbf4b545e4a6bf92eANALYSIS DATE: 2023-01-05T17:17:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 054df7f4d72eba9f66a3e8940b223609

January 5, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, stealerMD5: 054df7f4d72eba9f66a3e8940b223609SHA1: 91877bfb6ca6ff8314376d435beec6c8a139a755ANALYSIS DATE: 2023-01-05T17:15:25ZTTPS: T1222, T1082, T1053, T1130, T1112,...

CISA: CISA Releases Three Industrial Systems Control Advisories

January 5, 2023

CISA Releases Three Industrial Systems Control Advisories CISA released three Industrial Control Systems (ICS) advisories on January 5 2023. These...

Cobalt Stike Beacon Detected – 114[.]115[.]235[.]249:8082

January 5, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 8[.]134[.]209[.]29:80

January 5, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 107[.]148[.]1[.]251:443

January 5, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 137[.]184[.]247[.]75:443

January 5, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Fortinet FortiADC command execution | CVE-2022-39947

January 5, 2023

NAME Fortinet FortiADC command execution Platforms Affected:Fortinet FortiADC 6.0.4 Fortinet FortiADC 6.1.5 Fortinet FortiADC 6.2.0 Fortinet FortiADC 6.2.1 Fortinet FortiADC...

ODude UPG plugin for WordPress command execution | CVE-2023-0039

January 5, 2023

NAME ODude UPG plugin for WordPress command execution Platforms Affected:ODude UPG plugin for WordPress 2.19Risk Level:9.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION ODude UPG...

Daily Vulnerability Trends: Thu Jan 05 2023

January 5, 2023

Daily Vulnerability Trends (sourced from VulnMon) CVE NAMECVE DescriptionCVE-2022-38627Nortek Linear eMerge E3-Series 0.32-08f, 0.32-07p, 0.32-07e, 0.32-09c, 0.32-09b, 0.32-09a, and 0.32-08e...

Royal Ransomware Victim: DSBJ DATA LEAK

January 5, 2023

RoyalRansomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the...

Cobalt Stike Beacon Detected – 107[.]189[.]5[.]117:443

January 5, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 168[.]61[.]161[.]153:443

January 5, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 5[.]188[.]86[.]194:443

January 5, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 49[.]4[.]88[.]243:80

January 5, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 37[.]72[.]168[.]213:443

January 5, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – spyware – f65a05f7af44b5054e8b77aa0ce1468c

January 5, 2023

Score: 8 MALWARE FAMILY: spywareTAGS:spyware, stealerMD5: f65a05f7af44b5054e8b77aa0ce1468cSHA1: 683ca30368c8150776f26ff470129028c5fdfa12ANALYSIS DATE: 2023-01-04T22:22:31ZTTPS: T1102, T1005, T1081, T1012, T1082 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – amadey – b5a3f6244498a9aff40f6e3c9764e3d5

January 5, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:dcrat, family:djvu, collection, discovery, infostealer, persistence, ransomware, rat, spyware, stealer, trojan, vmprotectMD5: b5a3f6244498a9aff40f6e3c9764e3d5SHA1: 896d4bc913f77d15f2666b8212eab0483ac9940eANALYSIS DATE:...

Malware Analysis – discovery – bedb06e830e94cbd82a964874a79b35a

January 5, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, evasion, persistence, ransomwareMD5: bedb06e830e94cbd82a964874a79b35aSHA1: 6ed5453096529de19235d223a475a0cfa706425fANALYSIS DATE: 2023-01-04T22:31:12ZTTPS: T1012, T1120, T1082, T1057, T1031, T1222, T1562, T1489,...

Year: 2023

Malware Analysis – djvu – 62424bb1fdd7926fcb49ef7c8f13e272

Malware Analysis – djvu – b2fabf8e6cd2703ace9d85f6182b4b51

Malware Analysis – amadey – 1170fa844f90aded8f9c12493f54d543

Malware Analysis – discovery – 4d8a60c6e654bd38212cebf3d17e5d38

Malware Analysis – – d32877932ed310382b30efdd3cf67b29

Malware Analysis – smokeloader – 4a0e3b3995cdc315c4caf048c3211f89

Malware Analysis – djvu – 054df7f4d72eba9f66a3e8940b223609

CISA: CISA Releases Three Industrial Systems Control Advisories

Cobalt Stike Beacon Detected – 114[.]115[.]235[.]249:8082

Cobalt Stike Beacon Detected – 8[.]134[.]209[.]29:80

Cobalt Stike Beacon Detected – 107[.]148[.]1[.]251:443

Cobalt Stike Beacon Detected – 137[.]184[.]247[.]75:443

Fortinet FortiADC command execution | CVE-2022-39947

ODude UPG plugin for WordPress command execution | CVE-2023-0039

Daily Vulnerability Trends: Thu Jan 05 2023

Royal Ransomware Victim: DSBJ DATA LEAK

Cobalt Stike Beacon Detected – 107[.]189[.]5[.]117:443

Cobalt Stike Beacon Detected – 168[.]61[.]161[.]153:443

Cobalt Stike Beacon Detected – 5[.]188[.]86[.]194:443

Cobalt Stike Beacon Detected – 49[.]4[.]88[.]243:80

Cobalt Stike Beacon Detected – 37[.]72[.]168[.]213:443

Malware Analysis – spyware – f65a05f7af44b5054e8b77aa0ce1468c

Malware Analysis – amadey – b5a3f6244498a9aff40f6e3c9764e3d5

Malware Analysis – discovery – bedb06e830e94cbd82a964874a79b35a

CISA: ASD’s ACSC, CISA, and US and International Partners Release Guidance on Choosing Secure and Verifiable Technologies

CISA: CISA Releases New Public Version of CDM Data Model Document

CISA: Cisco Releases Security Updates for NX-OS Software

CISA: Microsoft Releases December 2024 Security Updates

CISA: CISA Releases Two Industrial Control Systems Advisories

You may have missed