Security

Malware Analysis – ransomware – 4d6356358a836d56145e7acdc83fea7d

October 18, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 4d6356358a836d56145e7acdc83fea7dSHA1: efb8261ce1ffe19ac462e73e1d70756897456432ANALYSIS DATE: 2022-10-18T15:43:20ZTTPS: T1107, T1490, T1091, T1005, T1081, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – af73f94ffcae054d3a84ff2ae0d0f446

October 18, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: af73f94ffcae054d3a84ff2ae0d0f446SHA1: 6319802224cab55b90d8de870dbc84ade2dc2063ANALYSIS DATE: 2022-10-18T15:43:30ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 4f565cbe58681056a626c1f916fcedcb

October 18, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 4f565cbe58681056a626c1f916fcedcbSHA1: 390686f11e4591ca2f55b9e4cd0711029de4d34cANALYSIS DATE: 2022-10-18T15:43:08ZTTPS: T1107, T1490, T1091, T1005, T1081, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 86e39c7b0aa81bfc105ebd9b0766ce2f

October 18, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 86e39c7b0aa81bfc105ebd9b0766ce2fSHA1: 5ec8721f8e2acf7ed27783a7969c32542f0be9dbANALYSIS DATE: 2022-10-18T15:42:56ZTTPS: T1107, T1490, T1091, T1005, T1081, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 8b9c9005f476efee5bc8572ebe809c75

October 18, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 8b9c9005f476efee5bc8572ebe809c75SHA1: b0e66376cb6689cbb274c96eafa5f2188db1cf7aANALYSIS DATE: 2022-10-18T15:43:56ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – d8499954c090d87e4b96f8f23fba2bf9

October 18, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: d8499954c090d87e4b96f8f23fba2bf9SHA1: 755c3889c6215d8fbf4d285c0fab265d33d638c2ANALYSIS DATE: 2022-10-18T15:43:45ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 8c23878d1e3d7e55e550fb9f448ee9cd

October 18, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 8c23878d1e3d7e55e550fb9f448ee9cdSHA1: 5947275ba5ba1d4bf4c142b149b49b971541de83ANALYSIS DATE: 2022-10-18T15:44:11ZTTPS: T1091, T1005, T1081, T1082, T1107, T1490 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 785707b3639ae4314f42739052fe4522

October 18, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 785707b3639ae4314f42739052fe4522SHA1: fa1662e7d4478ab2b90a896ad3aff21d6a750d0aANALYSIS DATE: 2022-10-18T15:44:22ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – evasion – be971d880e75cd48a669ea9e45f6f022

October 18, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: be971d880e75cd48a669ea9e45f6f022SHA1: 43b24f5108ff16c56e836082da80128fe516d8afANALYSIS DATE: 2022-10-18T16:40:18ZTTPS: T1107, T1490, T1012, T1120, T1082, T1031, T1562, T1489 ScoreMeaningExample10Known badA...

Malware Analysis – djvu – 30cc5141307b477bad1d38b3dc995a14

October 18, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: 30cc5141307b477bad1d38b3dc995a14SHA1:...

Malware Analysis – persistence – c0555bca1e61680eebfdc150c69f0e61

October 18, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: c0555bca1e61680eebfdc150c69f0e61SHA1: 11436e8b833d7c5b7e5484232e0b3599ed9f523eANALYSIS DATE: 2022-10-18T16:20:23ZTTPS: T1005, T1081, T1107, T1490, T1082, T1091, T1060, T1112...

Malware Analysis – persistence – 045fd4d06498c33b0b136601bc41114f

October 18, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 045fd4d06498c33b0b136601bc41114fSHA1: 78c5c444c587df842284bcf054f3b75047330e37ANALYSIS DATE: 2022-10-18T16:20:29ZTTPS: T1107, T1490, T1091, T1060, T1112, T1005, T1081, T1082...

Security

Malware Analysis – ransomware – 4d6356358a836d56145e7acdc83fea7d

Malware Analysis – ransomware – af73f94ffcae054d3a84ff2ae0d0f446

Malware Analysis – ransomware – 4f565cbe58681056a626c1f916fcedcb

Malware Analysis – ransomware – 86e39c7b0aa81bfc105ebd9b0766ce2f

Malware Analysis – ransomware – 8b9c9005f476efee5bc8572ebe809c75

Malware Analysis – ransomware – d8499954c090d87e4b96f8f23fba2bf9

Malware Analysis – ransomware – 8c23878d1e3d7e55e550fb9f448ee9cd

Malware Analysis – ransomware – 785707b3639ae4314f42739052fe4522

Malware Analysis – evasion – be971d880e75cd48a669ea9e45f6f022

Malware Analysis – djvu – 30cc5141307b477bad1d38b3dc995a14

Malware Analysis – persistence – c0555bca1e61680eebfdc150c69f0e61

Malware Analysis – persistence – 045fd4d06498c33b0b136601bc41114f

Law enforcement arrested 31 suspects for stealing cars by hacking key fobs

China-linked APT41 group targets Hong Kong with Spyder Loader

Critical Remote Code Execution issue impacts popular post-exploitation toolkit Cobalt Strike

xnLinkFinder – A Python Tool Used To Discover Endpoints (And Potential Parameters) For A Given Target

Over 17000 Fortinet devices exposed online are very likely vulnerable to CVE-2022-40684

CVE-2022-28762: Zoom for macOS contains a debugging port misconfiguration

DiceyF deploys GamePlayerFramework in online casino development studio

Retail giant Woolworths discloses data breach of MyDeal online marketplace

New UEFI rootkit Black Lotus offered for sale at $5,000

Japanese tech firm Oomiya hit by LockBit 3.0. Multiple supply chains potentially impacted

JSubFinder – Searches Webpages For Javascript And Analyzes Them For Hidden Subdomains And Secrets

Bulgaria hit by a cyber attack originating from Russia

HackerOne Bug Bounty Disclosure: ability-to-add-and-verify-uncontrolled-mobile-numbers-leading-to-account-takeover-ato-trev-ck

HackerOne Bug Bounty Disclosure: sensitive-api-key-leakage-hemant

[FOG] – Ransomware Victim: Pampili (pampili[.]com[.]br)

[BIANLIAN] – Ransomware Victim: Keystone Pacific Property Management LLC

[BIANLIAN] – Ransomware Victim: Mosley Glick O’Brien, Inc[.]

You may have missed