Security

Malware Analysis – smokeloader – 0093b1c267fabf6fb6746173e37d5618

May 1, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 0093b1c267fabf6fb6746173e37d5618SHA1: 0ffecd65935898c1df2848b69dd404fe0a3e4340ANALYSIS DATE: 2023-05-01T16:50:17ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 327e918914d2646a044d4909210b5e3b

May 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:31c7719b5ee962fbde376b75e771360d, discovery, persistence, ransomware, spyware, stealerMD5: 327e918914d2646a044d4909210b5e3bSHA1: 2f06777afd68a161063e722f8ef3c734a89a62adANALYSIS DATE: 2023-05-01T16:50:33ZTTPS: T1012, T1130, T1112, T1222,...

Malware Analysis – smokeloader – cb021251a6cf6317a61b976f0a285a89

May 1, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: cb021251a6cf6317a61b976f0a285a89SHA1: 4395ccfca60b9655afb1a0f10fd541f32baa6ca3ANALYSIS DATE: 2023-05-01T16:50:35ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – e7dd31558f3ec42979da15a0a6874501

May 1, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: e7dd31558f3ec42979da15a0a6874501SHA1: 07d8a7bf505e33743bc9f62f36d961cc458831b3ANALYSIS DATE: 2023-05-01T16:51:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 2bb706aa99db28a1c9fc6b095c558465

May 1, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 2bb706aa99db28a1c9fc6b095c558465SHA1: 277e71f887cf275fe4acad441c3844cbebc5f145ANALYSIS DATE: 2023-05-01T16:51:57ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 9c49179d156496dc2b99bf8ed5876789

May 1, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 9c49179d156496dc2b99bf8ed5876789SHA1: 9f51a8023bddeff9d7ab20af4e7c985a7abd0110ANALYSIS DATE: 2023-05-01T16:54:57ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 73abac8d02cd9984171486a69429a979

May 1, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 73abac8d02cd9984171486a69429a979SHA1: 6245dd3415191c82b5ec806d97a45e59d0839f15ANALYSIS DATE: 2023-05-01T16:54:01ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – a1da1859f9fd41cb5addd7aa54b7bd95

May 1, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: a1da1859f9fd41cb5addd7aa54b7bd95SHA1: acf882b67c88af902b0fea5302253a09fd805015ANALYSIS DATE: 2023-05-01T16:56:00ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – d074e45136284664a6d7e79096fa7f67

May 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:31c7719b5ee962fbde376b75e771360d, discovery, persistence, ransomware, spyware, stealerMD5: d074e45136284664a6d7e79096fa7f67SHA1: 9c77c0ee554e7ec9701c39fe99b90820f7b9a809ANALYSIS DATE: 2023-05-01T16:53:55ZTTPS: T1222, T1005, T1081, T1082,...

Malware Analysis – smokeloader – 1f7308929f958490d974fec76ba9a034

May 1, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 1f7308929f958490d974fec76ba9a034SHA1: 4ef6421abdfa1597a9327f33f583db0eb50a023eANALYSIS DATE: 2023-05-01T16:56:00ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – evasion – 6701914a2c4841d13fe2a54d41c4db91

May 1, 2023

Score: 6 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 6701914a2c4841d13fe2a54d41c4db91SHA1: da791e60740457d8cdc5961125ae8b24c39f0ca9ANALYSIS DATE: 2023-05-01T17:17:02ZTTPS: T1102 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – amadey – 4eceae8ae4132c8606c3da47e6cacf3f

May 1, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:vidar, botnet:1616034f091df9fd0229bc38dd17597f, botnet:266fa5b6a98cacaae8ec6c3e85a8a075, botnet:31c7719b5ee962fbde376b75e771360d, botnet:pub1, backdoor, discovery, evasion, persistence, ransomware, spyware, stealer, trojanMD5:...

Malware Analysis – djvu – 2af635966063f2104e61c7e7dc2b5184

May 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:31c7719b5ee962fbde376b75e771360d, discovery, persistence, ransomware, spyware, stealerMD5: 2af635966063f2104e61c7e7dc2b5184SHA1: b857a11e0ffd7e39597e63df141f3ff09d822c04ANALYSIS DATE: 2023-05-01T16:56:35ZTTPS: T1060, T1112, T1082, T1053,...

CISA: Drupal Releases Security Advisory to Address Vulnerability in Drupal Core

May 1, 2023

Drupal Releases Security Advisory to Address Vulnerability in Drupal Core Drupal has released a security advisory to address an access...

CISA: Cisco Releases Security Advisories for Multiple Products

May 1, 2023

Cisco Releases Security Advisories for Multiple Products Cisco has released security updates for vulnerabilities affecting Industrial Network Director (IND), Modeling...

CISA: Oracle Releases Security Updates

May 1, 2023

Oracle Releases Security Updates Oracle has released its Critical Patch Update Advisory, Solaris Third Party Bulletin, and Linux Bulletin for...

CISA: VMware Releases Security Update for Aria Operations for Logs

May 1, 2023

VMware Releases Security Update for Aria Operations for Logs VMware has released a security update to address multiple vulnerabilities in...

CISA: CISA Releases Two SBOM Documents

May 1, 2023

CISA Releases Two SBOM Documents Today, CISA released two community-drafted documents around Software Bill of Materials (SBOM): Types of SBOM...

CISA: CISA Adds Three Known Exploited Vulnerabilities to Catalog

May 1, 2023

CISA Adds Three Known Exploited Vulnerabilities to Catalog CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog,...

CISA: CISA Requests for Comment on Secure Software Self-Attestation Form

May 1, 2023

CISA Requests for Comment on Secure Software Self-Attestation Form CISA has issued requests for comment on the Secure Software Self-Attestation...

CISA: CISA Releases One Industrial Control Systems Medical Advisory

May 1, 2023

CISA Releases One Industrial Control Systems Medical Advisory CISA released one Industrial Control Systems Medical (ICS) medical advisory on April...

CISA: CISA Releases Two Industrial Control Systems Advisories

May 1, 2023

CISA Releases Two Industrial Control Systems Advisories CISA released two Industrial Control Systems (ICS) advisories on April 25, 2023. These...

CISA: Abuse of the Service Location Protocol May Lead to DoS Attacks

May 1, 2023

Abuse of the Service Location Protocol May Lead to DoS Attacks The Service Location Protocol (SLP, RFC 2608(link is external))...

Malware Analysis – ransomware – ba619bc7920ba0650482c133ccea5c5c

April 30, 2023

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: ba619bc7920ba0650482c133ccea5c5cSHA1: cd8fb4ccba1004f8590d0a3560ce55269a5622c1ANALYSIS DATE: 2023-04-30T16:09:52ZTTPS: T1082, T1012, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Security

Malware Analysis – smokeloader – 0093b1c267fabf6fb6746173e37d5618

Malware Analysis – djvu – 327e918914d2646a044d4909210b5e3b

Malware Analysis – smokeloader – cb021251a6cf6317a61b976f0a285a89

Malware Analysis – smokeloader – e7dd31558f3ec42979da15a0a6874501

Malware Analysis – smokeloader – 2bb706aa99db28a1c9fc6b095c558465

Malware Analysis – smokeloader – 9c49179d156496dc2b99bf8ed5876789

Malware Analysis – smokeloader – 73abac8d02cd9984171486a69429a979

Malware Analysis – smokeloader – a1da1859f9fd41cb5addd7aa54b7bd95

Malware Analysis – djvu – d074e45136284664a6d7e79096fa7f67

Malware Analysis – smokeloader – 1f7308929f958490d974fec76ba9a034

Malware Analysis – evasion – 6701914a2c4841d13fe2a54d41c4db91

Malware Analysis – amadey – 4eceae8ae4132c8606c3da47e6cacf3f

Malware Analysis – djvu – 2af635966063f2104e61c7e7dc2b5184

CISA: Drupal Releases Security Advisory to Address Vulnerability in Drupal Core

CISA: Cisco Releases Security Advisories for Multiple Products

CISA: Oracle Releases Security Updates

CISA: VMware Releases Security Update for Aria Operations for Logs

CISA: CISA Releases Two SBOM Documents

CISA: CISA Adds Three Known Exploited Vulnerabilities to Catalog

CISA: CISA Requests for Comment on Secure Software Self-Attestation Form

CISA: CISA Releases One Industrial Control Systems Medical Advisory

CISA: CISA Releases Two Industrial Control Systems Advisories

CISA: Abuse of the Service Location Protocol May Lead to DoS Attacks

Malware Analysis – ransomware – ba619bc7920ba0650482c133ccea5c5c

CISA: CISA Adds One Known Exploited Vulnerability to Catalog

CISA: CISA and FBI Release Updated Guidance on Product Security Bad Practices

CISA: CISA Releases Three Industrial Control Systems Advisories

CISA: CISA and FBI Release Advisory on How Threat Actors Chained Vulnerabilities in Ivanti Cloud Service Applications

CISA: CISA Releases Six Industrial Control Systems Advisories

You may have missed