Security

Malware Analysis – ransomware – b3d5fbac5b451b1ebcdda12e33c2b7af

October 19, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: b3d5fbac5b451b1ebcdda12e33c2b7afSHA1: 0cc298c93a22cb1222b30493ed2ca1f10c68cc52ANALYSIS DATE: 2022-10-19T16:00:54ZTTPS: T1107, T1490, T1091, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – snatch – bda4570095d3d36645df2753e4207a99

October 19, 2022

Score: 10 MALWARE FAMILY: snatchTAGS:family:snatch, ransomware, spyware, stealer, upxMD5: bda4570095d3d36645df2753e4207a99SHA1: 222b33e246b3459ffe9ba18fab26ab4fe8ae23bfANALYSIS DATE: 2022-10-19T16:53:22ZTTPS: T1107, T1490, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – f3293f956ee403a67e011a47e9380b15

October 19, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: f3293f956ee403a67e011a47e9380b15SHA1: d61e0c8e7366557d951434bc358510cd7c6f4158ANALYSIS DATE: 2022-10-19T16:01:51ZTTPS: T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – djvu – 8b06b6ced52d00c45ac65ba09a0eb66e

October 19, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 8b06b6ced52d00c45ac65ba09a0eb66eSHA1: 542ab5f9bef7709245eaae1a0910d45374bfa977ANALYSIS DATE: 2022-10-19T16:56:50ZTTPS: T1053, T1060, T1112, T1082,...

Malware Analysis – ransomware – d8caa762db2f89f58d15e10804588826

October 19, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: d8caa762db2f89f58d15e10804588826SHA1: 3a312dd227456bd5c735c3cb902057271390f2ddANALYSIS DATE: 2022-10-19T16:01:58ZTTPS: T1082, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

CISA: Oracle Releases October 2022 Critical Patch Update

October 19, 2022

Oracle Releases October 2022 Critical Patch Update Oracle has released its Critical Patch Update for October 2022. This update addresses...

Researchers share of FabriXss bug impacting Azure Fabric Explorer

October 19, 2022

Cybersecurity researchers published technical details about a now-patched FabriXss flaw that impacts Azure Fabric Explorer. Orca Security researchers have released technical...

The missed link between Ransom Cartel and REvil ransomware gangs

October 19, 2022

Researchers at Palo Alto Network’s Unit 42 linked the Ransom Cartel ransomware operation to the REvil ransomware operations. Researchers at...

PenguinTrace – Tool To Show How Code Runs At The Hardware Level

October 19, 2022

penguinTrace is intended to help build an understanding of how programs run at the hardware level. It provides a way...

Malware Analysis – djvu – 2455d36aa533e29b2dc97377389bbe6a

October 19, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5: 2455d36aa533e29b2dc97377389bbe6aSHA1: fe9642fa95653b336c3a40ada7a52a0ebbfa9a5fANALYSIS...

Malware Analysis – djvu – 31d633c84d4010d17b4f03ba0b837ec9

October 19, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 31d633c84d4010d17b4f03ba0b837ec9SHA1: 15bc48b574ce6c95c52a936662a20c9a7bce6387ANALYSIS DATE: 2022-10-19T08:39:22ZTTPS: T1053, T1005, T1081, T1012,...

Malware Analysis – djvu – effc004b6fce37e7b350cb7f61f21730

October 19, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: effc004b6fce37e7b350cb7f61f21730SHA1: 116824c5bfc45c8aef655c4a10144d4a117317a6ANALYSIS DATE: 2022-10-19T08:32:51ZTTPS: T1005, T1081, T1060, T1112,...

Malware Analysis – smokeloader – f25e119c885d1b007c265b3a51a2d4f8

October 19, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: f25e119c885d1b007c265b3a51a2d4f8SHA1: 7d95bf5790a05097c55306fb398b378810621d30ANALYSIS DATE: 2022-10-19T08:32:14ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – persistence – 9528ea8dec82f5cd13f44d9ff358b2bf

October 19, 2022

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 9528ea8dec82f5cd13f44d9ff358b2bfSHA1: df8e3f87a2a8690c5cb25dff1ac7ce0b902fcbb7ANALYSIS DATE: 2022-10-19T08:40:17ZTTPS: T1107, T1490, T1053, T1082, T1012, T1120, T1005, T1081,...

Malware Analysis – danabot – 2d9969371e0847cb39a4b515f7f55759

October 19, 2022

Score: 10 MALWARE FAMILY: danabotTAGS:family:danabot, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, banker, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 2d9969371e0847cb39a4b515f7f55759SHA1: 96154d705ca47764b062468c9937ac28eda7df70ANALYSIS...

Malware Analysis – eternity – 80094cdfc9743ea1e4decfe916105b76

October 19, 2022

Score: 10 MALWARE FAMILY: eternityTAGS:family:eternity, evasion, ransomwareMD5: 80094cdfc9743ea1e4decfe916105b76SHA1: b26f5fd083dc51eb5149e821f4361382ea43c319ANALYSIS DATE: 2022-10-19T09:12:09ZTTPS: T1053, T1107, T1490, T1082, T1018 ScoreMeaningExample10Known badA malware family...

Malware Analysis – lockbit – d75882dafa8f1d34b635596426668b8d

October 19, 2022

Score: 10 MALWARE FAMILY: lockbitTAGS:family:lockbit, ransomwareMD5: d75882dafa8f1d34b635596426668b8dSHA1: e359767434109ff1138ec03bc3b0b239ad5d1634ANALYSIS DATE: 2022-10-19T09:22:08ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – djvu – dc38da1da1e88bac04121824d2abb81a

October 19, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: dc38da1da1e88bac04121824d2abb81aSHA1: 101f00bcbba421c4f14a20a7da382acbfe900e52ANALYSIS DATE: 2022-10-19T09:47:30ZTTPS: T1222, T1060, T1112, T1005,...

Malware Analysis – danabot – 072433c8fab1e14873361e2a95ec5d37

October 19, 2022

Score: 10 MALWARE FAMILY: danabotTAGS:family:danabot, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, banker, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 072433c8fab1e14873361e2a95ec5d37SHA1: 8d1b707184f7f20950643bc82db590edd081a71bANALYSIS...

Malware Analysis – djvu – 0ffeb9f5001377ea8c199cf13dcd5f2b

October 19, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 0ffeb9f5001377ea8c199cf13dcd5f2bSHA1: 644bc255288ee4a7664540e1c55872fdb533bc6dANALYSIS DATE: 2022-10-19T09:39:49ZTTPS: T1005, T1081, T1222, T1053,...

Malware Analysis – djvu – 45534d9fae89d8bd0166236fef70aac1

October 19, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: 45534d9fae89d8bd0166236fef70aac1SHA1: a45ee6c9777446f3f1687cd2f70f3aa3e480b296ANALYSIS DATE: 2022-10-19T09:38:35ZTTPS: T1053, T1060, T1112, T1222, T1082, T1012 ScoreMeaningExample10Known badA...

Malware Analysis – blackbasta – 6a202e9a95f58938d02385e31d43ed87

October 19, 2022

Score: 10 MALWARE FAMILY: blackbastaTAGS:family:blackbasta, ransomwareMD5: 6a202e9a95f58938d02385e31d43ed87SHA1: 53628c7a155ccb7af1135140083939018d3587f1ANALYSIS DATE: 2022-10-19T10:40:19ZTTPS: T1107, T1490, T1491, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ransomware – f5c9c7b404aa41bb2bbc1704afeb9f0d

October 19, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: f5c9c7b404aa41bb2bbc1704afeb9f0dSHA1: 1ca01cd00899330b918678d5f0ee00ab94d26f89ANALYSIS DATE: 2022-10-19T10:40:23ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – blackbasta – 0c69e91c2f54978ae3103b26686b2610

October 19, 2022

Score: 10 MALWARE FAMILY: blackbastaTAGS:family:blackbasta, ransomwareMD5: 0c69e91c2f54978ae3103b26686b2610SHA1: 3e3b113a5ab64e03ffe86e0fa9a2163816f9ecdfANALYSIS DATE: 2022-10-19T10:40:26ZTTPS: T1107, T1490, T1491, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Security

Malware Analysis – ransomware – b3d5fbac5b451b1ebcdda12e33c2b7af

Malware Analysis – snatch – bda4570095d3d36645df2753e4207a99

Malware Analysis – ransomware – f3293f956ee403a67e011a47e9380b15

Malware Analysis – djvu – 8b06b6ced52d00c45ac65ba09a0eb66e

Malware Analysis – ransomware – d8caa762db2f89f58d15e10804588826

CISA: Oracle Releases October 2022 Critical Patch Update

Researchers share of FabriXss bug impacting Azure Fabric Explorer

The missed link between Ransom Cartel and REvil ransomware gangs

PenguinTrace – Tool To Show How Code Runs At The Hardware Level

Malware Analysis – djvu – 2455d36aa533e29b2dc97377389bbe6a

Malware Analysis – djvu – 31d633c84d4010d17b4f03ba0b837ec9

Malware Analysis – djvu – effc004b6fce37e7b350cb7f61f21730

Malware Analysis – smokeloader – f25e119c885d1b007c265b3a51a2d4f8

Malware Analysis – persistence – 9528ea8dec82f5cd13f44d9ff358b2bf

Malware Analysis – danabot – 2d9969371e0847cb39a4b515f7f55759

Malware Analysis – eternity – 80094cdfc9743ea1e4decfe916105b76

Malware Analysis – lockbit – d75882dafa8f1d34b635596426668b8d

Malware Analysis – djvu – dc38da1da1e88bac04121824d2abb81a

Malware Analysis – danabot – 072433c8fab1e14873361e2a95ec5d37

Malware Analysis – djvu – 0ffeb9f5001377ea8c199cf13dcd5f2b

Malware Analysis – djvu – 45534d9fae89d8bd0166236fef70aac1

Malware Analysis – blackbasta – 6a202e9a95f58938d02385e31d43ed87

Malware Analysis – ransomware – f5c9c7b404aa41bb2bbc1704afeb9f0d

Malware Analysis – blackbasta – 0c69e91c2f54978ae3103b26686b2610

CISA: CISA Adds Four Known Exploited Vulnerabilities to Catalog

CISA: CISA Releases Eight Industrial Control Systems Advisories

CISA: CISA Adds One Known Exploited Vulnerability to Catalog

CISA: CISA Partners with ASD’s ACSC, CCCS, NCSC-UK, and Other International and US Organizations to Release Guidance on Edge Devices

CISA: CISA Releases Fact Sheet Detailing Embedded Backdoor Function of Contec CMS8000 Firmware

You may have missed