Security

Malware Analysis – chaos – 5aa991c89a6564a3c6351052e157f9d8

November 1, 2022

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, family:xorist, evasion, persistence, ransomware, spyware, stealerMD5: 5aa991c89a6564a3c6351052e157f9d8SHA1: f481e3cd126a429c33568070c2ff56d27c41a8ceANALYSIS DATE: 2022-11-01T15:20:08ZTTPS: T1490, T1059, T1107, T1005, T1081,...

Malware Analysis – djvu – 01f463bb367a066c24c75ca8a49cdd63

November 1, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 01f463bb367a066c24c75ca8a49cdd63SHA1: cedb821f62e805cdc9b53258d0e154e4580e0ac6ANALYSIS DATE: 2022-11-01T16:20:12ZTTPS: T1222, T1005, T1081, T1012, T1082, T1060,...

Malware Analysis – amadey – 5be10047bb7742addd4cdfc5acabb13c

November 1, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:redline, family:smokeloader, botnet:google2, botnet:mario23_10, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojan, upxMD5:...

Malware Analysis – djvu – e996dac5e194b1c3562f70ee411a9d86

November 1, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: e996dac5e194b1c3562f70ee411a9d86SHA1: e3d6c1f9a87d53275fe6654ccf1b99483c7767a4ANALYSIS DATE: 2022-11-01T15:30:27ZTTPS: T1005, T1081, T1060, T1112, T1222, T1012,...

Malware Analysis – amadey – 682844b02e1f64362575bb820cfc7346

November 1, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:redline, family:smokeloader, botnet:mario23_10, botnet:slovarik1btc, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojan, upxMD5:...

Malware Analysis – wannacry – ab7c81526be6b0daadab86fff788c383

November 1, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, ransomware, wormMD5: ab7c81526be6b0daadab86fff788c383SHA1: c0b1107f2590d2a25637e173d8bb01797b267bd6ANALYSIS DATE: 2022-11-01T16:20:21ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – evasion – d3f4a4778119ac034157cdc7c1ff850e

November 1, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: d3f4a4778119ac034157cdc7c1ff850eSHA1: 45b695aa62a96785f165839786e58d59b0cf0af1ANALYSIS DATE: 2022-11-01T16:44:26ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – wannacry – a0b5f65e56a84da5b8ddd75a76e633dd

November 1, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: a0b5f65e56a84da5b8ddd75a76e633ddSHA1: 8818e492fa69ad76d2002862b79b3d831f8ba867ANALYSIS DATE: 2022-11-01T16:20:29ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – ransomware – d44f62f8c8573d75a1f78989cc7bf2d7

November 1, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: d44f62f8c8573d75a1f78989cc7bf2d7SHA1: e051ef1f33fc779599d385ca9b9ab0548d7fc331ANALYSIS DATE: 2022-11-01T16:28:41ZTTPS: T1082, T1012 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – djvu – b4328f4d470ae547a347d14f7bfec5f2

November 1, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, botnet:mario23_10, botnet:slovarik1btc, backdoor, discovery, infostealer, ransomware, trojanMD5: b4328f4d470ae547a347d14f7bfec5f2SHA1: 8c523be9ac76d68cbcf12e450cbbbe5e770d4146ANALYSIS DATE: 2022-11-01T17:26:43ZTTPS: T1053, T1012,...

Malware Analysis – djvu – c61348069c1c45629fab6ba3a5eb4e95

November 1, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: c61348069c1c45629fab6ba3a5eb4e95SHA1: 38d45f0e66893726023c2c760c8df5cc6b634071ANALYSIS DATE: 2022-11-01T17:00:26ZTTPS: T1082, T1053, T1005, T1081, T1012, T1222,...

Malware Analysis – ransomware – fbbb40defd1c971112be14f1de681c0c

November 1, 2022

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: fbbb40defd1c971112be14f1de681c0cSHA1: 88902d65274f40f3dd180c25d38f4bfec5cdeac1ANALYSIS DATE: 2022-11-01T17:00:17ZTTPS: T1005, T1081 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – djvu – 000ba535803f06084c9b4aec05b10c6c

November 1, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 000ba535803f06084c9b4aec05b10c6cSHA1: 501c1308dcbce9000f70143bb31e785f3d389c11ANALYSIS DATE: 2022-11-01T17:50:27ZTTPS: T1222, T1012, T1082, T1005, T1081, T1060,...

CISA: CISA Releases One Industrial Control Systems Advisory

November 1, 2022

CISA Releases One Industrial Control Systems Advisory CISA released one Industrial Control Systems (ICS) advisory on November 1, 2022. This...

CISA: CISA Upgrades to TLP 2.0

November 1, 2022

CISA Upgrades to TLP 2.0 Today, CISA officially upgraded to Traffic Light Protocol (TLP) 2.0, which facilitates greater information sharing...

Experts warn of critical RCE in ConnectWise Server Backup Solution

November 1, 2022

ConnectWise has addressed a critical remote code execution vulnerability impacting Recover and R1Soft Server Backup Manager (SBM). According to the...

Ransomware activity and network access sales in Q3 2022

November 1, 2022

Ransomware activity report: Threat actors are selling access to hundreds of organizations, with a cumulative requested price of around $4M....

Cicd-Goat – A Deliberately Vulnerable CI/CD Environment

November 1, 2022

Deliberately Download & Run There's no need to clone the repository. Linux & Mac curl -o cicd-goat/docker-compose.yaml --create-dirs https://raw.githubusercontent.com/cider-security-research/cicd-goat/main/docker-compose.yamlcd cicd-goat...

Cobalt Stike Beacon Detected – 150[.]158[.]55[.]146:5555

November 1, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 5[.]44[.]42[.]48:443

November 1, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 172[.]245[.]27[.]233:8080

November 1, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – 64614e3663ac2abd4a21ae1e1d46bfc3

November 1, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 64614e3663ac2abd4a21ae1e1d46bfc3SHA1: 2a910047f6f2357425965958ca6bb75d550e9a6dANALYSIS DATE: 2022-11-01T09:56:29ZTTPS: T1060, T1112, T1082, T1012, T1005, T1081,...

Malware Analysis – djvu – 98e8bcb6dc7fa33c0ba1917db3060d3f

November 1, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 98e8bcb6dc7fa33c0ba1917db3060d3fSHA1: d476e4750a0cc4b072751d6d618184e825f269d9ANALYSIS DATE: 2022-11-01T10:20:32ZTTPS: T1060, T1112, T1082, T1005, T1081, T1012,...

Malware Analysis – wannacry – 7f75aa06e06a197d63761176133913ac

November 1, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: 7f75aa06e06a197d63761176133913acSHA1: 9b2085e5c64ed8f13584082b5aceada1c9c072efANALYSIS DATE: 2022-11-01T09:20:22ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Security

Malware Analysis – chaos – 5aa991c89a6564a3c6351052e157f9d8

Malware Analysis – djvu – 01f463bb367a066c24c75ca8a49cdd63

Malware Analysis – amadey – 5be10047bb7742addd4cdfc5acabb13c

Malware Analysis – djvu – e996dac5e194b1c3562f70ee411a9d86

Malware Analysis – amadey – 682844b02e1f64362575bb820cfc7346

Malware Analysis – wannacry – ab7c81526be6b0daadab86fff788c383

Malware Analysis – evasion – d3f4a4778119ac034157cdc7c1ff850e

Malware Analysis – wannacry – a0b5f65e56a84da5b8ddd75a76e633dd

Malware Analysis – ransomware – d44f62f8c8573d75a1f78989cc7bf2d7

Malware Analysis – djvu – b4328f4d470ae547a347d14f7bfec5f2

Malware Analysis – djvu – c61348069c1c45629fab6ba3a5eb4e95

Malware Analysis – ransomware – fbbb40defd1c971112be14f1de681c0c

Malware Analysis – djvu – 000ba535803f06084c9b4aec05b10c6c

CISA: CISA Releases One Industrial Control Systems Advisory

CISA: CISA Upgrades to TLP 2.0

Experts warn of critical RCE in ConnectWise Server Backup Solution

Ransomware activity and network access sales in Q3 2022

Cicd-Goat – A Deliberately Vulnerable CI/CD Environment

Cobalt Stike Beacon Detected – 150[.]158[.]55[.]146:5555

Cobalt Stike Beacon Detected – 5[.]44[.]42[.]48:443

Cobalt Stike Beacon Detected – 172[.]245[.]27[.]233:8080

Malware Analysis – djvu – 64614e3663ac2abd4a21ae1e1d46bfc3

Malware Analysis – djvu – 98e8bcb6dc7fa33c0ba1917db3060d3f

Malware Analysis – wannacry – 7f75aa06e06a197d63761176133913ac

CISA: CISA Adds Four Known Exploited Vulnerabilities to Catalog

CISA: CISA Releases Nine Industrial Control Systems Advisories

CISA: CISA Partners with ASD’s ACSC, CCCS, NCSC-UK, and Other International and US Organizations to Release Guidance on Edge Devices

CISA: CISA Releases Six Industrial Control Systems Advisories

CISA: CISA Adds One Known Exploited Vulnerability to Catalog

You may have missed