Security

Malware Analysis – smokeloader – afb4d8b4ebadba7cad1455fcec65fa90

October 11, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: afb4d8b4ebadba7cad1455fcec65fa90SHA1: d8137a043c6576344134dfd1895a89e0111c9178ANALYSIS DATE: 2022-10-10T20:02:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 477f4d9acf2c970ddaab25d54fa585f7

October 11, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 477f4d9acf2c970ddaab25d54fa585f7SHA1: 840c64d9a713cba9506a75d16034e86bf724f788ANALYSIS DATE: 2022-10-10T21:40:57ZTTPS: T1222, T1082, T1053, T1005,...

Malware Analysis – smokeloader – 395bfcca7c226c0382118742fe8b0bc4

October 11, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 395bfcca7c226c0382118742fe8b0bc4SHA1: f76cdad51ae0c528d74302e07899816a981e5f68ANALYSIS DATE: 2022-10-10T21:02:05ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 395bfcca7c226c0382118742fe8b0bc4

October 11, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5: 395bfcca7c226c0382118742fe8b0bc4SHA1: f76cdad51ae0c528d74302e07899816a981e5f68ANALYSIS...

Malware Analysis – djvu – afb4d8b4ebadba7cad1455fcec65fa90

October 11, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: afb4d8b4ebadba7cad1455fcec65fa90SHA1: d8137a043c6576344134dfd1895a89e0111c9178ANALYSIS DATE: 2022-10-10T20:06:53ZTTPS:...

Malware Analysis – djvu – e5b420b08c831674185ed35b1c5fa16b

October 11, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: e5b420b08c831674185ed35b1c5fa16bSHA1: c3eb72c03f27f8d27ddb11d0057f95612531ea70ANALYSIS DATE: 2022-10-10T22:02:49ZTTPS:...

Malware Analysis – djvu – 3c937e41155c84430617e0a8e6effb57

October 11, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 3c937e41155c84430617e0a8e6effb57SHA1: bbcbeadb9144092eddf82c20120288cbb2f4698cANALYSIS DATE: 2022-10-10T22:04:18ZTTPS: T1005, T1081, T1012, T1222,...

Malware Analysis – smokeloader – e5b420b08c831674185ed35b1c5fa16b

October 11, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: e5b420b08c831674185ed35b1c5fa16bSHA1: c3eb72c03f27f8d27ddb11d0057f95612531ea70ANALYSIS DATE: 2022-10-10T22:03:02ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 9d78ecc6aea6f2015fcb471bee2df828

October 11, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 9d78ecc6aea6f2015fcb471bee2df828SHA1: 9b1f9e641233ca7ce16b412fe5520519346a5349ANALYSIS DATE: 2022-10-10T22:16:14ZTTPS: T1012, T1082, T1060, T1112,...

CVE-2022-40684 flaw in Fortinet products is being exploited in the wild

October 10, 2022

Fortinet has confirmed that the recently disclosed critical authentication bypass issue (CVE-2022-40684) is being exploited in the wild. Last week,...

Malware Analysis – ransomware – 07ab0e48a422308845f035b12abf7104

October 10, 2022

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 07ab0e48a422308845f035b12abf7104SHA1: b231e65fa596852f951024a0dde394cf20e0f153ANALYSIS DATE: 2022-10-10T14:13:55ZTTPS: T1158, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – spyware – 9ba9b8e9ba0805598741ce71902495d4

October 10, 2022

Score: 7 MALWARE FAMILY: spywareTAGS:spyware, stealerMD5: 9ba9b8e9ba0805598741ce71902495d4SHA1: 54a6946d557b8b6da1e5158595847f5ca29852f9ANALYSIS DATE: 2022-10-10T14:09:36ZTTPS: T1005, T1081, T1053 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – ransomware – 9a6714178bd0310f7767cba6b5a1208a

October 10, 2022

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 9a6714178bd0310f7767cba6b5a1208aSHA1: 7b0de26871ec5eceb957eb70ce7950c4b4e8f3c2ANALYSIS DATE: 2022-10-10T14:07:38ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – smokeloader – a90883dcb07a41a9cddaa6c14cd270e0

October 10, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: a90883dcb07a41a9cddaa6c14cd270e0SHA1: c3ea7921a06f64407b88f9178290a654ff9bdc1dANALYSIS DATE: 2022-10-10T14:01:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 699a1d7bd4b78fc10a1038ae8ae9f807

October 10, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, family:vidar, botnet:517, botnet:newpatch13, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5: 699a1d7bd4b78fc10a1038ae8ae9f807SHA1:...

Malware Analysis – djvu – 33a7bcba56f2e5b227db73d8ea984bad

October 10, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 33a7bcba56f2e5b227db73d8ea984badSHA1: 768e0b8a4d2c8f8504d60fd0eb7b3bd8eaa88106ANALYSIS DATE: 2022-10-10T14:46:58ZTTPS: T1012, T1222, T1082, T1053,...

Malware Analysis – smokeloader – 699a1d7bd4b78fc10a1038ae8ae9f807

October 10, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 699a1d7bd4b78fc10a1038ae8ae9f807SHA1: 76e4ba6b26cd66682ea01f59bafe382047433e5fANALYSIS DATE: 2022-10-10T14:32:09ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – c9293d9e2fa1d7c3385306642cd93561

October 10, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: c9293d9e2fa1d7c3385306642cd93561SHA1: cbecf06db239e37ad4bac853316fe998b6499bceANALYSIS DATE: 2022-10-10T14:42:03ZTTPS: T1060, T1112, T1082, T1012,...

Malware Analysis – ransomware – aaf1bcf03a52222618125b575e0edb07

October 10, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: aaf1bcf03a52222618125b575e0edb07SHA1: a0d8ac1b50a265aeed46288426f17c11cffe90acANALYSIS DATE: 2022-10-10T14:59:21ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – chaos – f0f99d523865a55b7ee5e6cb3e1e9413

October 10, 2022

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, family:neshta, persistence, ransomware, spyware, stealerMD5: f0f99d523865a55b7ee5e6cb3e1e9413SHA1: bb04f194f402963c79874f8e7cc5f7df05c6f5e1ANALYSIS DATE: 2022-10-10T14:55:27ZTTPS: T1005, T1081, T1082, T1112, T1042 ScoreMeaningExample10Known...

Malware Analysis – ransomware – abbb5efdc4cb1475d9504177b8d9f8c6

October 10, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: abbb5efdc4cb1475d9504177b8d9f8c6SHA1: 2827c2240294ddc8d292599fba640a3b5c9505f7ANALYSIS DATE: 2022-10-10T14:59:28ZTTPS: T1091, T1005, T1081, T1082, T1107, T1490 ScoreMeaningExample10Known badA malware...

Malware Analysis – chaos – f0f99d523865a55b7ee5e6cb3e1e9413

October 10, 2022

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, family:neshta, persistence, ransomware, spyware, stealerMD5: f0f99d523865a55b7ee5e6cb3e1e9413SHA1: bb04f194f402963c79874f8e7cc5f7df05c6f5e1ANALYSIS DATE: 2022-10-10T14:56:05ZTTPS: T1082, T1112, T1042, T1005, T1081 ScoreMeaningExample10Known...

Malware Analysis – wannacry – 52f48c0b06b658209ff62a72033b3ff2

October 10, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: 52f48c0b06b658209ff62a72033b3ff2SHA1: 37e6e9d210ba2dc038cc0ea9413af2fa537ff72eANALYSIS DATE: 2022-10-10T14:59:59ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – ransomware – e01561e6bad1159cbc3380c79766655d

October 10, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: e01561e6bad1159cbc3380c79766655dSHA1: 36c7701217ace3af49bf3d3fa6bd6aa5a49cb6d0ANALYSIS DATE: 2022-10-10T14:59:39ZTTPS: T1107, T1490, T1091, T1005, T1081, T1082 ScoreMeaningExample10Known badA malware...

Security

Malware Analysis – smokeloader – afb4d8b4ebadba7cad1455fcec65fa90

Malware Analysis – djvu – 477f4d9acf2c970ddaab25d54fa585f7

Malware Analysis – smokeloader – 395bfcca7c226c0382118742fe8b0bc4

Malware Analysis – djvu – 395bfcca7c226c0382118742fe8b0bc4

Malware Analysis – djvu – afb4d8b4ebadba7cad1455fcec65fa90

Malware Analysis – djvu – e5b420b08c831674185ed35b1c5fa16b

Malware Analysis – djvu – 3c937e41155c84430617e0a8e6effb57

Malware Analysis – smokeloader – e5b420b08c831674185ed35b1c5fa16b

Malware Analysis – djvu – 9d78ecc6aea6f2015fcb471bee2df828

CVE-2022-40684 flaw in Fortinet products is being exploited in the wild

Malware Analysis – ransomware – 07ab0e48a422308845f035b12abf7104

Malware Analysis – spyware – 9ba9b8e9ba0805598741ce71902495d4

Malware Analysis – ransomware – 9a6714178bd0310f7767cba6b5a1208a

Malware Analysis – smokeloader – a90883dcb07a41a9cddaa6c14cd270e0

Malware Analysis – djvu – 699a1d7bd4b78fc10a1038ae8ae9f807

Malware Analysis – djvu – 33a7bcba56f2e5b227db73d8ea984bad

Malware Analysis – smokeloader – 699a1d7bd4b78fc10a1038ae8ae9f807

Malware Analysis – djvu – c9293d9e2fa1d7c3385306642cd93561

Malware Analysis – ransomware – aaf1bcf03a52222618125b575e0edb07

Malware Analysis – chaos – f0f99d523865a55b7ee5e6cb3e1e9413

Malware Analysis – ransomware – abbb5efdc4cb1475d9504177b8d9f8c6

Malware Analysis – chaos – f0f99d523865a55b7ee5e6cb3e1e9413

Malware Analysis – wannacry – 52f48c0b06b658209ff62a72033b3ff2

Malware Analysis – ransomware – e01561e6bad1159cbc3380c79766655d

[PLAY] – Ransomware Victim: International Process Plants

[PLAY] – Ransomware Victim: Ganong Bros

[PLAY] – Ransomware Victim: Couri Insurance Agency

[PLAY] – Ransomware Victim: IT-IQ Botswana

[PLAY] – Ransomware Victim: Optometrics

You may have missed