Year: 2023

Malware Analysis – djvu – b030f2d7b0d433544f85b28eef0fcc05

January 16, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: b030f2d7b0d433544f85b28eef0fcc05SHA1: de8c121a6eaba0cbbb44d8c1349093f462018570ANALYSIS DATE: 2023-01-15T23:30:44ZTTPS: T1012, T1053, T1060, T1112,...

Malware Analysis – djvu – 51e46b98e4c12a45cb16ee094737e22a

January 15, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 51e46b98e4c12a45cb16ee094737e22aSHA1: 340165063ae514b0e369b07054b53393b12da48dANALYSIS DATE: 2023-01-15T16:58:39ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – – 86986763bf7e37e43958ce829f8d28bb

January 15, 2023

Score: 1 MALWARE FAMILY: TAGS:MD5: 86986763bf7e37e43958ce829f8d28bbSHA1: cb8b579fb7f4cc1ec1c0ae4332393c02713afa76ANALYSIS DATE: 2023-01-15T17:40:54ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – 9e1cb6d53dac023bc1d00b41dd40b129

January 15, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 9e1cb6d53dac023bc1d00b41dd40b129SHA1: 61e6f7f37c454872b746cde3d5db3af9ef118c1eANALYSIS DATE: 2023-01-15T17:18:00ZTTPS: T1012, T1082, T1005, T1081,...

Malware Analysis – discovery – 8fc76676f1dc8184f7f20a1aef6baa66

January 15, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: 8fc76676f1dc8184f7f20a1aef6baa66SHA1: 5d8671bf023982bb25fb1cc1e4b77f0cf3ef6019ANALYSIS DATE: 2023-01-15T16:43:44ZTTPS: T1112, T1042, T1060, T1012, T1082 ScoreMeaningExample10Known badA malware family...

37c050d7447d6edf46fd8adff99ef7275acb57961cb1b5136cf0715f17090d95

AVIator – Antivirus Evasion Project

January 15, 2023

AviAtor Ported to NETCore 5 with an updated UI AV|Ator About://name AV: AntiVirus Ator: Is a swordsman, alchemist, scientist, magician,...

Cobalt Stike Beacon Detected – 199[.]253[.]29[.]85:443

January 15, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 23[.]224[.]39[.]41:8081

January 15, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cisco Small Business RV016, RV042, RV042G, and RV082 Routers security bypass | CVE-2023-20025

January 15, 2023

NAME__________Cisco Small Business RV016, RV042, RV042G, and RV082 Routers security bypassPlatforms Affected:Risk Level:9Exploitability:UnprovenConsequences:Bypass Security DESCRIPTION__________Cisco Small Business RV016, RV042, RV042G,...

Daily Vulnerability Trends: Sun Jan 15 2023

January 15, 2023

Daily Vulnerability Trends (sourced from VulnMon) CVE NAMECVE DescriptionCVE-2022-41099BitLocker Security Feature Bypass Vulnerability.CVE-2023-21674Windows Advanced Local Procedure Call (ALPC) Elevation of...

Brave browser’s new Snowflake feature help bypass Tor blocks

January 15, 2023

Brave Browser version 1.47 was released yesterday, adding the Snowflake extension in the software's settings, enabling users to turn their...

Canada’s largest alcohol retailer’s site hacked to steal credit cards

January 15, 2023

The Liquor Control Board of Ontario (LCBO), a Canadian government enterprise and the country's largest beverage alcohol retailer, revealed that...

CircleCI’s hack caused by malware stealing engineer’s 2FA-backed session

January 15, 2023

Hackers breached CircleCi in December after an engineer became infected with information-stealing malware that their 2FA-backed SSO session cookie, allowing access...

Malware Analysis – evasion – 80bc920446cda4a8827ada74b0081852

January 15, 2023

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, themida, trojanMD5: 80bc920446cda4a8827ada74b0081852SHA1: 33f93d6744910002ce0d4ba18e035537475c8bbeANALYSIS DATE: 2023-01-15T03:04:53ZTTPS: T1490, T1485, T1082, T1060, T1112, T1012, T1120,...

Malware Analysis – joker – 1e288142a45ebe7244ab899798cea643

January 15, 2023

Score: 10 MALWARE FAMILY: jokerTAGS:family:joker, evasion, infostealer, ransomware, trojanMD5: 1e288142a45ebe7244ab899798cea643SHA1: 078295d1cda8319ed69f64b5443e4d89705d8523ANALYSIS DATE: 2023-01-15T04:36:48ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – wannacry – afbe6bba36be6ad384e6feccab258960

January 15, 2023

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, bootkit, discovery, persistence, ransomware, spyware, stealer, wormMD5: afbe6bba36be6ad384e6feccab258960SHA1: 45c076d83c648f195444799aa2eacaf7dde7392aANALYSIS DATE: 2023-01-15T05:51:47ZTTPS: T1158, T1222, T1012, T1082,...

Malware Analysis – djvu – 7b8426b03fdcbe7a132490d08531a789

January 15, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 7b8426b03fdcbe7a132490d08531a789SHA1: fd2adf34c3b2cc9fa8cbb179064a4648a4a1c210ANALYSIS DATE: 2023-01-15T05:55:18ZTTPS: T1060, T1112, T1053, T1012,...

Malware Analysis – djvu – cc754c02596df7905eca8894d0202e13

January 15, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: cc754c02596df7905eca8894d0202e13SHA1: 4bb01386cf0fe3f6e5a09d6c070e923663072081ANALYSIS DATE: 2023-01-15T04:47:12ZTTPS: T1012, T1005, T1081, T1082,...

Malware Analysis – ransomware – b14c45c1792038fd69b5c75e604242a3

January 15, 2023

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealer, upxMD5: b14c45c1792038fd69b5c75e604242a3SHA1: 54ab323053f1138e5ccaa8f8afaa38cabca9491fANALYSIS DATE: 2023-01-15T05:23:14ZTTPS: T1491, T1112, T1005, T1081, T1082 ScoreMeaningExample10Known badA malware...

Year: 2023

Malware Analysis – djvu – b030f2d7b0d433544f85b28eef0fcc05

Malware Analysis – djvu – 51e46b98e4c12a45cb16ee094737e22a

Malware Analysis – – 86986763bf7e37e43958ce829f8d28bb

Malware Analysis – djvu – 9e1cb6d53dac023bc1d00b41dd40b129

Malware Analysis – discovery – 8fc76676f1dc8184f7f20a1aef6baa66

AVIator – Antivirus Evasion Project

Cobalt Stike Beacon Detected – 199[.]253[.]29[.]85:443

Cobalt Stike Beacon Detected – 23[.]224[.]39[.]41:8081

Cisco Small Business RV016, RV042, RV042G, and RV082 Routers security bypass | CVE-2023-20025

Daily Vulnerability Trends: Sun Jan 15 2023

Brave browser’s new Snowflake feature help bypass Tor blocks

Canada’s largest alcohol retailer’s site hacked to steal credit cards

CircleCI’s hack caused by malware stealing engineer’s 2FA-backed session

Malware Analysis – evasion – 80bc920446cda4a8827ada74b0081852

Malware Analysis – joker – 1e288142a45ebe7244ab899798cea643

Malware Analysis – wannacry – afbe6bba36be6ad384e6feccab258960

Malware Analysis – djvu – 7b8426b03fdcbe7a132490d08531a789

Malware Analysis – djvu – cc754c02596df7905eca8894d0202e13

Malware Analysis – ransomware – b14c45c1792038fd69b5c75e604242a3

Vice Society Ransomware Victim: Central Texas College

Vice Society Ransomware Victim: TIMco

Cobalt Stike Beacon Detected – 89[.]208[.]103[.]122:443

Cobalt Stike Beacon Detected – 47[.]98[.]158[.]167:80

Cobalt Stike Beacon Detected – 118[.]31[.]76[.]240:7999

[BLACKSHRANTAC] – Ransomware Victim: ApleNet Co[.], Ltd

[QILIN] – Ransomware Victim: Disseny Dental

Cobalt Strike Beacon Detected – 196[.]251[.]69[.]253:4433

Cobalt Strike Beacon Detected – 124[.]223[.]114[.]203:4433

Cobalt Strike Beacon Detected – 8[.]137[.]114[.]210:4433

You may have missed