Cl0p Ransomware Victim: DERK[.]CL
Cl0p Logo NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of...
RansomHouse Ransomware Victim: Cospec Srl
RansomHouse Logo NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...
US-CERT Vulnerability Summary for the Week of March 13, 2023
The CISA Vulnerability Bulletin provides a summary of new vulnerabilities that have been recorded by the National Institute of Standards and...
Malware Analysis – wannacry – c5a9f57fee2d9dbba767f67bee2dafe4
Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: c5a9f57fee2d9dbba767f67bee2dafe4SHA1: c7b9304389b6504fb41dcd486c77c7ddf03e237cANALYSIS DATE: 2023-03-24T15:52:24ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...
Malware Analysis – smokeloader – 966165e4becd35b65cd6b4c79816241d
Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 966165e4becd35b65cd6b4c79816241dSHA1: 66d5cbcde976c5ca6f7c02fbefca031d267cd752ANALYSIS DATE: 2023-03-24T16:12:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...
Malware Analysis – djvu – 55282dd0a8decfac5d7ce8dfa3a8c73d
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:00d92484c9b27bc8482a2cc94cacc508, discovery, persistence, ransomware, spyware, stealerMD5: 55282dd0a8decfac5d7ce8dfa3a8c73dSHA1: c37470fae1b492851df0fcf395a92cf7da7831c1ANALYSIS DATE: 2023-03-24T16:41:06ZTTPS: T1053, T1005, T1081, T1012,...
Malware Analysis – gandcrab – cd5866f5118ae8712ad9cc66fba3df4f
Score: 10 MALWARE FAMILY: gandcrabTAGS:family:gandcrab, backdoor, persistence, ransomware, upxMD5: cd5866f5118ae8712ad9cc66fba3df4fSHA1: 6cf658ea474ee24a76ddac575842641f9eac17b4ANALYSIS DATE: 2023-03-24T16:34:04ZTTPS: T1012, T1082, T1060, T1112, T1120 ScoreMeaningExample10Known badA...
Malware Analysis – djvu – 5c2e5bc1540bcd697a2f511c6d8c9c64
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:00d92484c9b27bc8482a2cc94cacc508, discovery, persistence, ransomware, spyware, stealerMD5: 5c2e5bc1540bcd697a2f511c6d8c9c64SHA1: 3c5eabf8a51af70fd8931056e2126620ec5e6abeANALYSIS DATE: 2023-03-24T16:34:09ZTTPS: T1053, T1005, T1081, T1012,...
Malware Analysis – djvu – 2141d7aab3e3945146e46180e873ee0f
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:00d92484c9b27bc8482a2cc94cacc508, discovery, persistence, ransomware, spyware, stealerMD5: 2141d7aab3e3945146e46180e873ee0fSHA1: 4a16f19272c4b30680848f0e2077e6518a09ad17ANALYSIS DATE: 2023-03-24T16:30:32ZTTPS: T1012, T1005, T1081, T1060,...
Malware Analysis – amadey – 9e883caa8da3ee91f740a872e74ec9c0
Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:pseudomanuscrypt, family:smokeloader, family:vidar, botnet:00d92484c9b27bc8482a2cc94cacc508, botnet:pub1, botnet:sprg, backdoor, discovery, loader, persistence, ransomware, spyware, stealer, trojanMD5:...
Malware Analysis – djvu – 0812858b2a61eec88a043ca8d0a0a343
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:00d92484c9b27bc8482a2cc94cacc508, discovery, persistence, ransomware, spyware, stealerMD5: 0812858b2a61eec88a043ca8d0a0a343SHA1: b669063e530330f145eea8dc8e21484e72109b85ANALYSIS DATE: 2023-03-24T16:54:06ZTTPS: T1012, T1082, T1005, T1081,...
Malware Analysis – adware – 2882ed8a193f0626b73ba15c4f1154d6
Score: 10 MALWARE FAMILY: adwareTAGS:adware, discovery, persistence, ransomware, stealerMD5: 2882ed8a193f0626b73ba15c4f1154d6SHA1: 904b78c79b999b38fe0d21aad18b0c68584198d0ANALYSIS DATE: 2023-03-24T17:38:50ZTTPS: T1012, T1082, T1120, T1112, T1176, T1130, T1060...
Malware Analysis – djvu – f0f9c70b9496b12c2fd49c3c4396b266
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:00d92484c9b27bc8482a2cc94cacc508, discovery, persistence, ransomware, spyware, stealerMD5: f0f9c70b9496b12c2fd49c3c4396b266SHA1: 7036397bff6aa05c6f0d5a19b3322c277f8bec9bANALYSIS DATE: 2023-03-24T18:01:03ZTTPS: T1082, T1012, T1005, T1081,...
Malware Analysis – amadey – 8700d2452d5d8f223324605b125acd3e
Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, botnet:pub1, botnet:sprg, backdoor, discovery, persistence, ransomware, trojanMD5: 8700d2452d5d8f223324605b125acd3eSHA1: de8a2b5c9c85c67158426c28ad1ec554525dbf65ANALYSIS DATE: 2023-03-24T18:30:56ZTTPS: T1012, T1120,...
Malware Analysis – djvu – 838b0c1191098c2ab44a11d4da64df64
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:00d92484c9b27bc8482a2cc94cacc508, discovery, persistence, ransomware, spyware, stealerMD5: 838b0c1191098c2ab44a11d4da64df64SHA1: e78b2db847800c83f816580db5f45bd94c657140ANALYSIS DATE: 2023-03-24T18:01:43ZTTPS: T1012, T1060, T1112, T1082,...
Malware Analysis – amadey – 48742e003ed618f79d381384b4601215
Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:dcrat, family:djvu, family:redline, family:smokeloader, family:vidar, botnet:00d92484c9b27bc8482a2cc94cacc508, botnet:koreamon, botnet:pub1, botnet:sprg, backdoor, discovery, infostealer, persistence, ransomware, rat,...
Malware Analysis – gandcrab – faebc8605aa6ae0210b3d7332a4085b4
Score: 10 MALWARE FAMILY: gandcrabTAGS:family:gandcrab, backdoor, persistence, ransomwareMD5: faebc8605aa6ae0210b3d7332a4085b4SHA1: 0da4e0038853df664af34d14a20cb7ae48a35cfaANALYSIS DATE: 2023-03-24T18:43:29ZTTPS: T1060, T1112, T1012, T1120, T1082 ScoreMeaningExample10Known badA malware...
HackerOne Bug Bounty Disclosure: dos-at-(cve-2018-6389)bypwnesec
Programme HackerOne U.S. Dept Of Defense U.S. Dept Of Defense Submitted by pwnesec pwnesec Report DoS at (CVE-2018-6389) Full Report...
HackerOne Bug Bounty Disclosure: client-side-authentication-leads-to-auth-bypassbyabhinavsecondary
Programme HackerOne U.S. Dept Of Defense U.S. Dept Of Defense Submitted by abhinavsecondary abhinavsecondary Report Client side authentication leads to...
HackerOne Bug Bounty Disclosure: haproxy-stats-panel-exposed-externallybyabhinavsecondary
Programme HackerOne U.S. Dept Of Defense U.S. Dept Of Defense Submitted by abhinavsecondary abhinavsecondary Report HAProxy stats panel exposed externally...
HackerOne Bug Bounty Disclosure: improper-access-control-on-media-wiki-allows-an-attackers-to-restart-installation-on-dod-assetbymiguel_santareno
Programme HackerOne U.S. Dept Of Defense U.S. Dept Of Defense Submitted by miguel_santareno miguel_santareno Report Improper Access Control on Media...
HackerOne Bug Bounty Disclosure: xmlrpc-php-file-enabled-at–orgbyiam_a_jinchuriki
Programme HackerOne U.S. Dept Of Defense U.S. Dept Of Defense Submitted by iam_a_jinchuriki iam_a_jinchuriki Report xmlrpc.php file enabled at .org...
HackerOne Bug Bounty Disclosure: reflected-xss-inby0xd3adc0de
Programme HackerOne U.S. Dept Of Defense U.S. Dept Of Defense Submitted by 0xd3adc0de 0xd3adc0de Report Reflected XSS in Full Report...
HackerOne Bug Bounty Disclosure: reflected-xss-inby0xd3adc0de
Programme HackerOne U.S. Dept Of Defense U.S. Dept Of Defense Submitted by 0xd3adc0de 0xd3adc0de Report Reflected XSS in Full Report...
