Year: 2023

Malware Analysis – persistence – a94f5fa05150bf568a3c2d719ace2c02

April 25, 2023

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: a94f5fa05150bf568a3c2d719ace2c02SHA1: 51bde3d8160a6e9eec4d0f445ef3b27076dddfbfANALYSIS DATE: 2023-04-25T17:27:13ZTTPS: T1012, T1120, T1082, T1107, T1490, T1060, T1112 ScoreMeaningExample10Known badA malware...

Malware Analysis – persistence – 5f74d2826c1fb2b60dbf6d3de14a773d

April 25, 2023

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 5f74d2826c1fb2b60dbf6d3de14a773dSHA1: 759b2298650613e5ba4654669b1c31ba6b1530bcANALYSIS DATE: 2023-04-25T17:27:15ZTTPS: T1107, T1490, T1060, T1112, T1012, T1120, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 370546a376345688e5ad3ef836e2ea78

April 25, 2023

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 370546a376345688e5ad3ef836e2ea78SHA1: bebff2850dad06a48426e569f526f01df6e024ebANALYSIS DATE: 2023-04-25T17:27:14ZTTPS: T1491, T1112, T1082, T1005, T1081 ScoreMeaningExample10Known badA malware family...

Malware Analysis – persistence – 3bceadd4c2c546aba24e24307f1defcd

April 25, 2023

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 3bceadd4c2c546aba24e24307f1defcdSHA1: 81e4110a72821a1b1f01a3f3a8bf89188af40067ANALYSIS DATE: 2023-04-25T17:27:20ZTTPS: T1107, T1490, T1082, T1060, T1112, T1012, T1120 ScoreMeaningExample10Known badA malware...

Malware Analysis – persistence – 420b2f010edbc63a68b2cce2cdf1e5e9

April 25, 2023

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 420b2f010edbc63a68b2cce2cdf1e5e9SHA1: 4cf5072cfe0eb42d387713067e2706902c89b294ANALYSIS DATE: 2023-04-25T17:27:15ZTTPS: T1130, T1112, T1107, T1490, T1082, T1060, T1012, T1120 ScoreMeaningExample10Known badA...

Malware Analysis – persistence – df80cbaadb754de14c97dc05995fdc4a

April 25, 2023

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: df80cbaadb754de14c97dc05995fdc4aSHA1: 6f9369c9d2f174b4abd642d4fb43cff690f364dfANALYSIS DATE: 2023-04-25T17:27:16ZTTPS: T1107, T1490, T1112, T1012, T1120, T1082, T1060 ScoreMeaningExample10Known badA malware...

Malware Analysis – persistence – 03efa23cb13898fdfda7821ea7dc5e10

April 25, 2023

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 03efa23cb13898fdfda7821ea7dc5e10SHA1: e25e2f68f0c159378f133d0e161a980d7f148a91ANALYSIS DATE: 2023-04-25T17:27:15ZTTPS: T1082, T1060, T1112, T1012, T1120, T1107, T1490 ScoreMeaningExample10Known badA malware...

Malware Analysis – djvu – 900c5a8f4afb3473c9dac0f984d746f4

April 25, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5cb879265de0011bfc7588d5d251aee6, discovery, persistence, ransomware, stealerMD5: 900c5a8f4afb3473c9dac0f984d746f4SHA1: 00dadacc6119c3e8ccdbe4477da2452d06e8a992ANALYSIS DATE: 2023-04-25T17:32:11ZTTPS: T1130, T1112, T1060, T1222, T1082,...

Malware Analysis – persistence – a202914a34dc528aa137bd394518d9b0

April 25, 2023

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: a202914a34dc528aa137bd394518d9b0SHA1: 4724934b61687cb1abe96bab137c7b1d4476f271ANALYSIS DATE: 2023-04-25T17:27:21ZTTPS: T1060, T1112, T1012, T1120, T1082, T1107, T1490 ScoreMeaningExample10Known badA malware...

Malware Analysis – djvu – 66f62279e9722368a730adc3b67f2315

April 25, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5cb879265de0011bfc7588d5d251aee6, discovery, persistence, ransomware, stealerMD5: 66f62279e9722368a730adc3b67f2315SHA1: a9804ada1a10d8a5827029342283f6ffeea6f3d3ANALYSIS DATE: 2023-04-25T17:35:04ZTTPS: T1053, T1130, T1112, T1222, T1060,...

Malware Analysis – persistence – e736d07744f89f05460b1f12daeb8172

April 25, 2023

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: e736d07744f89f05460b1f12daeb8172SHA1: 19fb70308f0d47947eb6d2d5b572e96539d345bbANALYSIS DATE: 2023-04-25T17:27:21ZTTPS: T1012, T1120, T1082, T1107, T1490, T1112, T1060 ScoreMeaningExample10Known badA malware...

Malware Analysis – djvu – 4bc6e26f6bf9258473180f9805bbe508

April 25, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: 4bc6e26f6bf9258473180f9805bbe508SHA1: dacc8979f7e59e60be9cb842982ee0deca5b3248ANALYSIS DATE: 2023-04-25T17:41:03ZTTPS: T1130, T1112, T1060, T1222, T1082, T1053 ScoreMeaningExample10Known badA...

Malware Analysis – babuk – f9afb31bc17811e5ab4fa406f105b1fe

April 25, 2023

Score: 10 MALWARE FAMILY: babukTAGS:family:babuk, family:darkside, ransomwareMD5: f9afb31bc17811e5ab4fa406f105b1feSHA1: d1a9449dcc8a3aa0c887bce71f128866175f679aANALYSIS DATE: 2023-04-25T17:44:04ZTTPS: T1107, T1490, T1082, T1012, T1120 ScoreMeaningExample10Known badA malware family...

Malware Analysis – evasion – 2c2bd73dcba2e7eb7fa78105c84ca2b1

April 25, 2023

Score: 8 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 2c2bd73dcba2e7eb7fa78105c84ca2b1SHA1: 24d7defc1e00739461dda0b275bd8304277aafd1ANALYSIS DATE: 2023-04-25T17:37:03ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – quasar – 5ec1610f2529bf6c482f43e8d7cb6235

April 25, 2023

Score: 10 MALWARE FAMILY: quasarTAGS:family:quasar, evasion, persistence, ransomware, spyware, trojanMD5: 5ec1610f2529bf6c482f43e8d7cb6235SHA1: a356a2a69d0551967f133b4b18c43703027e2383ANALYSIS DATE: 2023-04-25T17:40:13ZTTPS: T1107, T1490, T1088, T1089, T1112, T1031,...

Daily Threat Intelligence – April 25 – 2023

April 25, 2023

The notorious Lazarus group has formulated a new malware family to threaten macOS users. The attackers have been discovered utilizing...

HackerOne Bug Bounty Disclosure: missing-brute-force-protection-for-passwords-of-password-protected-share-linksbyhackit_bharat

April 25, 2023

Programme HackerOne Nextcloud Nextcloud Submitted by hackit_bharat hackit_bharat Report Missing brute force protection for passwords of password protected share links...

HackerOne Bug Bounty Disclosure: delete-any-user’s-added-email,telephone,fax,address,skype-via-csrf-in-(https://academy-acronis-com/)byimranhudaa

April 25, 2023

Programme HackerOne Acronis Acronis Submitted by imranhudaa imranhudaa Report Delete any user's added Email,Telephone,Fax,Address,Skype via csrf in (https://academy.acronis.com/) Full Report...

HackerOne Bug Bounty Disclosure: the-`io-kubernetes-client-util-generic-dynamic-dynamics`-contains-a-code-execution-vulnerability-due-to-snakeyamlbyjlleitschuh

April 25, 2023

Programme HackerOne Kubernetes Kubernetes Submitted by jlleitschuh jlleitschuh Report The `io.kubernetes.client.util.generic.dynamic.Dynamics` contains a code execution vulnerability due to SnakeYAML Full...

Year: 2023

Malware Analysis – persistence – a94f5fa05150bf568a3c2d719ace2c02

Malware Analysis – persistence – 5f74d2826c1fb2b60dbf6d3de14a773d

Malware Analysis – ransomware – 370546a376345688e5ad3ef836e2ea78

Malware Analysis – persistence – 3bceadd4c2c546aba24e24307f1defcd

Malware Analysis – persistence – 420b2f010edbc63a68b2cce2cdf1e5e9

Malware Analysis – persistence – df80cbaadb754de14c97dc05995fdc4a

Malware Analysis – persistence – 03efa23cb13898fdfda7821ea7dc5e10

Malware Analysis – djvu – 900c5a8f4afb3473c9dac0f984d746f4

Malware Analysis – persistence – a202914a34dc528aa137bd394518d9b0

Malware Analysis – djvu – 66f62279e9722368a730adc3b67f2315

Malware Analysis – persistence – e736d07744f89f05460b1f12daeb8172

Malware Analysis – djvu – 4bc6e26f6bf9258473180f9805bbe508

Malware Analysis – babuk – f9afb31bc17811e5ab4fa406f105b1fe

Malware Analysis – evasion – 2c2bd73dcba2e7eb7fa78105c84ca2b1

Malware Analysis – quasar – 5ec1610f2529bf6c482f43e8d7cb6235

Daily Threat Intelligence – April 25 – 2023

HackerOne Bug Bounty Disclosure: missing-brute-force-protection-for-passwords-of-password-protected-share-linksbyhackit_bharat

HackerOne Bug Bounty Disclosure: delete-any-user’s-added-email,telephone,fax,address,skype-via-csrf-in-(https://academy-acronis-com/)byimranhudaa

HackerOne Bug Bounty Disclosure: the-`io-kubernetes-client-util-generic-dynamic-dynamics`-contains-a-code-execution-vulnerability-due-to-snakeyamlbyjlleitschuh

HackerOne Bug Bounty Disclosure: file-read-vulnerability-allows-attackers-to-compromise-s3-buckets-using-prowbystealthy

CISA: CISA Releases Two Industrial Control Systems Advisories

Iranian Hackers Launch Sophisticated Attacks Targeting Israel with PowerLess Backdoor

New SLP Vulnerability Could Let Attackers Launch 2200x Powerful DDoS Attacks

Posh C2 Detected – 159[.]69[.]180[.]8:443

CVE Alert: CVE-2025-24635

CVE Alert: CVE-2025-24749

CVE Alert: CVE-2025-24686

CVE Alert: CVE-2025-24718

CVE Alert: CVE-2025-24710

You may have missed