Security

Malware Analysis – smokeloader – 671a5553c82fb95a3c5711707d0b7d39

April 17, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 671a5553c82fb95a3c5711707d0b7d39SHA1: d041d72966e651e8ad0674a179371aec2bd62349ANALYSIS DATE: 2023-04-17T17:17:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – persistence – a3ef7f3fab1b3bd5fe855c0d1c271fa8

April 17, 2023

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: a3ef7f3fab1b3bd5fe855c0d1c271fa8SHA1: 30e840f8c5c8518e095b2f14256d6dbe466d5bfaANALYSIS DATE: 2023-04-17T17:10:28ZTTPS: T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – dharma – 650ac8296c53afd1f6adec4c34871c02

April 17, 2023

Score: 10 MALWARE FAMILY: dharmaTAGS:family:dharma, persistence, ransomware, spyware, stealerMD5: 650ac8296c53afd1f6adec4c34871c02SHA1: 29d81be34df4ecd0cee036d6d71bc1144c477bd5ANALYSIS DATE: 2023-04-17T17:42:34ZTTPS: T1005, T1081, T1082, T1112, T1060, T1107, T1490...

Malware Analysis – evasion – bb703f4d9d67f2f777fee75b4f3b5029

April 17, 2023

Score: 6 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: bb703f4d9d67f2f777fee75b4f3b5029SHA1: ec055096e8d8ac62e9d6d5fd419fd4d89a694579ANALYSIS DATE: 2023-04-17T17:57:05ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – gandcrab – 084b358278f51b1040d20508a323020c

April 17, 2023

Score: 10 MALWARE FAMILY: gandcrabTAGS:family:gandcrab, backdoor, ransomware, spyware, stealerMD5: 084b358278f51b1040d20508a323020cSHA1: 8766b2475467f8314fe3916b4df540705fbcc8d1ANALYSIS DATE: 2023-04-17T17:57:14ZTTPS: T1012, T1120, T1082, T1005, T1081, T1107, T1490...

Malware Analysis – wannacry – 0a3b63a9039391a6a5ea3918c7e8a837

April 17, 2023

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, ransomware, wormMD5: 0a3b63a9039391a6a5ea3918c7e8a837SHA1: 20fd851be1189e6d2e9000bb0a0e4ebf7882310fANALYSIS DATE: 2023-04-17T17:36:52ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – djvu – b4586f74cee9669371f2e64b6678641d

April 16, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:623db25256a5734d1207787d269d05b2, discovery, persistence, ransomware, spyware, stealerMD5: b4586f74cee9669371f2e64b6678641dSHA1: f855ec126871e24159ac9e0bd438cc08d2eb1770ANALYSIS DATE: 2023-04-16T16:20:15ZTTPS: T1222, T1053, T1005, T1081,...

Malware Analysis – ransomware – 88a69bbc9bfdc9edc263a2024ca1d78d

April 16, 2023

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 88a69bbc9bfdc9edc263a2024ca1d78dSHA1: f973e09d77438bc01a93e310eb4513f24acc601eANALYSIS DATE: 2023-04-16T16:12:17ZTTPS: T1005, T1081 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – amadey – 2cd65f24e1ef47b1c27daf46f55c9351

April 16, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:lumma, family:rhadamanthys, family:smokeloader, family:vidar, botnet:623db25256a5734d1207787d269d05b2, botnet:pub1, botnet:sprg, backdoor, collection, discovery, evasion, persistence, ransomware, spyware,...

Malware Analysis – discovery – aed07e5e91a732956dba1b37a9a6b48b

April 16, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, evasion, persistence, ransomware, trojanMD5: aed07e5e91a732956dba1b37a9a6b48bSHA1: df1e7a31f48fec1bbc8cadcd3570a6ba7144c7e7ANALYSIS DATE: 2023-04-16T15:24:05ZTTPS: T1018, T1112, T1031, T1089, T1107, T1490, T1562,...

71445c068bf90feaafafca1f1781b7129be423ed814b8dae1673c163d884d7ec

GVision – A Reverse Image Search App That Use Google Cloud Vision API To Detect Landmarks And Web Entities From Images, Helping You Gather Valuable Information Quickly And Easily

April 15, 2023

GVision is a reverse image search app that use Google Cloud Vision API to detect landmarks and web entities from...

Malware Analysis – amadey – 25e4492533c31df8c81938100d1a89b5

April 15, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:lumma, family:smokeloader, family:vidar, botnet:623db25256a5734d1207787d269d05b2, botnet:e749025c61b2caca10aa829a9e1a65a1, botnet:pub1, botnet:sprg, backdoor, discovery, evasion, persistence, ransomware, spyware, stealer,...

Malware Analysis – evasion – 0621da4524d3f97c53d56d062e7938de

April 15, 2023

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, ransomware, trojanMD5: 0621da4524d3f97c53d56d062e7938deSHA1: f9fc642eb6ea007536a3d2b827a1995915e21417ANALYSIS DATE: 2023-04-15T16:23:11ZTTPS: T1082, T1158, T1112, T1491, T1012, T1053, T1088, T1089 ScoreMeaningExample10Known...

Malware Analysis – djvu – 1dd758012876b986897fa4ecc12660e3

April 15, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:623db25256a5734d1207787d269d05b2, discovery, persistence, ransomware, spyware, stealerMD5: 1dd758012876b986897fa4ecc12660e3SHA1: d83c9fcb25192e999272302cc48143b1f8754639ANALYSIS DATE: 2023-04-15T16:25:54ZTTPS: T1060, T1112, T1012, T1082,...

Pinacolada – Wireless Intrusion Detection System For Hak5’s WiFi Coconut

April 14, 2023

Pinacolada looks for typical IEEE 802.11 attacks and then informs you about them as quickly as possible. All this with...

5673845af8eacb1f873b18a043d63d142a83734921cccbc4c668331d44166c14

debugHunter – Discover Hidden Debugging Parameters And Uncover Web Application Secrets

April 14, 2023

Discover hidden debugging parameters and uncover web application secrets with debugHunter. This Chrome extension scans websites for debugging parameters and...

1f0115ff07b442279efda8a89554dfaef9405a59d9c5288104d43fea17755055

QuadraInspect – Android Framework That Integrates AndroPass, APKUtil, And MobFS, Providing A Powerful Tool For Analyzing The Security Of Android Applications

April 12, 2023

The security of mobile devices has become a critical concern due to the increasing amount of sensitive data being stored...

Security

Malware Analysis – smokeloader – 671a5553c82fb95a3c5711707d0b7d39

Malware Analysis – persistence – a3ef7f3fab1b3bd5fe855c0d1c271fa8

Malware Analysis – dharma – 650ac8296c53afd1f6adec4c34871c02

Malware Analysis – evasion – bb703f4d9d67f2f777fee75b4f3b5029

Malware Analysis – gandcrab – 084b358278f51b1040d20508a323020c

Malware Analysis – wannacry – 0a3b63a9039391a6a5ea3918c7e8a837

Malware Analysis – djvu – b4586f74cee9669371f2e64b6678641d

Malware Analysis – ransomware – 88a69bbc9bfdc9edc263a2024ca1d78d

Malware Analysis – amadey – 2cd65f24e1ef47b1c27daf46f55c9351

Malware Analysis – discovery – aed07e5e91a732956dba1b37a9a6b48b

GVision – A Reverse Image Search App That Use Google Cloud Vision API To Detect Landmarks And Web Entities From Images, Helping You Gather Valuable Information Quickly And Easily

Malware Analysis – amadey – 25e4492533c31df8c81938100d1a89b5

Malware Analysis – evasion – 0621da4524d3f97c53d56d062e7938de

Malware Analysis – djvu – 1dd758012876b986897fa4ecc12660e3

Pinacolada – Wireless Intrusion Detection System For Hak5’s WiFi Coconut

debugHunter – Discover Hidden Debugging Parameters And Uncover Web Application Secrets

QuadraInspect – Android Framework That Integrates AndroPass, APKUtil, And MobFS, Providing A Powerful Tool For Analyzing The Security Of Android Applications

Certwatcher – Tool For Capture And Tracking Certificate Transparency Logs, Using YAML Templates Based DSL

Reportly – An AzureAD User Activity Report Tool

Posh C2 Detected – 3[.]72[.]176[.]74:443

SilentMoonwalk – PoC Implementation Of A Fully Dynamic Call Stack Spoofer

WindowSpy – A Cobalt Strike Beacon Object File Meant For Targetted User Surveillance

Seekr – A Multi-Purpose OSINT Toolkit With A Neat Web-Interface

Grepmarx – A Source Code Static Analysis Platform For AppSec Enthusiasts

[RANSOMHUB] – Ransomware Victim: www[.]famcomachine[.]com

[CICADA3301] – Ransomware Victim: Northern Management

[CICADA3301] – Ransomware Victim: Digital Technology Co[.], Ltd[.]

[CICADA3301] – Ransomware Victim: Goldstein Law Group, S[.]C[.]

[FOG] – Ransomware Victim: Gitlabs: Naphix, WDNA, Bayteq

You may have missed