RedPacket Security - InfoSec News & Tutorials

Malware Analysis – lockbit – 92429807c7d957566d1897d5bf7c6639

February 7, 2023

Score: 10 MALWARE FAMILY: lockbitTAGS:family:lockbit, discovery, evasion, persistence, ransomwareMD5: 92429807c7d957566d1897d5bf7c6639SHA1: d1dce09219c0df46742fa0eec6f7a6b72ca877f0ANALYSIS DATE: 2023-02-07T09:13:03ZTTPS: T1490, T1046, T1060, T1112, T1082, T1107 ScoreMeaningExample10Known...

Malware Analysis – – 8257517f33fc1f861974623e50c31f7e

February 7, 2023

Score: 1 MALWARE FAMILY: TAGS:MD5: 8257517f33fc1f861974623e50c31f7eSHA1: 8a60f5320c8740330bbd09d248eaa6738c503190ANALYSIS DATE: 2023-02-07T09:38:37ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

db3e02ab722873b0378b0d0ba9b9ec398ebc53e7937651bd54a40e4348730fb6

Heap_Detective – The Simple Way To Detect Heap Memory Pitfalls In C++ And C

February 7, 2023

This tool uses the taint analysis technique for static analysis and aims to identify points of heap memory usage vulnerabilities...

Daily Vulnerability Trends: Tue Feb 07 2023

February 7, 2023

Daily Vulnerability Trends (sourced from VulnMon) CVE NAMECVE DescriptionCVE-2021-27365An issue was discovered in the Linux kernel through 5.11.3. Certain iSCSI...

LockBit 3.0 Ransomware Victim: royalmailgroup[.]com

February 7, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Malware Analysis – amadey – e69c2d0c4452da5c0558107642430855

February 7, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:laplas, family:smokeloader, family:vidar, botnet:19, backdoor, clipper, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: e69c2d0c4452da5c0558107642430855SHA1:...

Malware Analysis – smokeloader – 1c176d9d7cd461e38da54137fcbd1b5c

February 7, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 1c176d9d7cd461e38da54137fcbd1b5cSHA1: 4994a9c806485bdc7149782de04b2f524ff328fbANALYSIS DATE: 2023-02-07T03:05:48ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 7062f3341be62a7e6590f1afba296c54

February 7, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 7062f3341be62a7e6590f1afba296c54SHA1: 3bfb73d4f3ceecd97a047aaa294bdbe6bd415c1bANALYSIS DATE: 2023-02-07T05:33:28ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – b0c85396bd605ee72398773f1bca2015

February 7, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: b0c85396bd605ee72398773f1bca2015SHA1: 6d09ae234c43abe8666ac87d7426eb9cccca10ffANALYSIS DATE: 2023-02-07T04:34:56ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – play – 223eff1610b432a1f1aa06c60bd7b9a6

February 7, 2023

Score: 10 MALWARE FAMILY: playTAGS:family:play, ransomware, spyware, stealerMD5: 223eff1610b432a1f1aa06c60bd7b9a6SHA1: 14177730443c65aefeeda3162b324fdedf9cf9e0ANALYSIS DATE: 2023-02-07T04:27:17ZTTPS: T1012, T1120, T1082, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – djvu – bb3ab1eefcaf81e64610d3a0c62cd760

February 7, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: bb3ab1eefcaf81e64610d3a0c62cd760SHA1: 59a0c4bfd9637e9185d7490fb0626ae818db30a4ANALYSIS DATE: 2023-02-07T05:49:45ZTTPS: T1053, T1012, T1082, T1060,...

LimeVPN – 23,348 breached accounts

February 7, 2023

HIBP In October 2020, the VPN provider LimeVPN suffered a data breach that exposed the personal information of tens of...

Play Ransomware Victim: L?? C??e

February 7, 2023

Play News Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Play Ransomware Victim: ?C?

February 7, 2023

Play News Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Cobalt Stike Beacon Detected – 84[.]32[.]131[.]91:8080

February 7, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 20[.]211[.]120[.]220:80

February 7, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 91[.]215[.]85[.]176:83

February 7, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 81[.]161[.]229[.]119:10443

February 7, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...