RedPacket Security - InfoSec News & Tutorials

Malware Analysis – djvu – afd4bd2d1bf9a2648a0ddfd0bd572e57

January 26, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: afd4bd2d1bf9a2648a0ddfd0bd572e57SHA1: 25c7285f2d5da15e1d60945ccbac73b6ae04fc33ANALYSIS DATE: 2023-01-26T09:30:51ZTTPS: T1012, T1222, T1082, T1005,...

Malware Analysis – discovery – 69a60a65668851b6ddb406e3094b2e86

January 26, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: 69a60a65668851b6ddb406e3094b2e86SHA1: 484a781471ed7227ed6636122fdbac56e9895b3fANALYSIS DATE: 2023-01-26T10:29:17ZTTPS: T1060, T1112, T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family...

Malware Analysis – djvu – f949ebdd228fd1ff03e7a1c963886ef2

January 26, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: f949ebdd228fd1ff03e7a1c963886ef2SHA1: 6a30d8454bedc3353ab8b7d5c9095e19583ac99aANALYSIS DATE: 2023-01-26T10:45:45ZTTPS: T1222, T1082, T1053, T1005,...

Malware Analysis – smokeloader – 7961d2f393fbc2f1fa49db7410feaa21

January 26, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 7961d2f393fbc2f1fa49db7410feaa21SHA1: d7b1b94ee117bf2a4be1f3b6044fde46d175d27eANALYSIS DATE: 2023-01-26T11:25:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 4623857875232b3cd157433eb1fd0e46

January 26, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 4623857875232b3cd157433eb1fd0e46SHA1: f5b05f67ddf98eb52427f49f346736eeb1f47ffcANALYSIS DATE: 2023-01-26T10:54:21ZTTPS: T1005, T1081, T1082, T1012,...

Malware Analysis – djvu – 8edc269873eb17d0c726919b0b2855d5

January 26, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, backdoor, discovery, persistence, ransomware, trojan, vmprotectMD5: 8edc269873eb17d0c726919b0b2855d5SHA1: 1ccb3faed9993c542e92f66f10fe2ec992408971ANALYSIS DATE: 2023-01-26T10:57:08ZTTPS: T1012, T1120, T1082, T1222,...

Cobalt Stike Beacon Detected – 47[.]92[.]126[.]214:8888

January 26, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 107[.]151[.]195[.]11:80

January 26, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 104[.]208[.]73[.]11:80

January 26, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 100[.]26[.]163[.]51:80

January 26, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

LearnPress plugin for WordPress file inclusion | CVE-2022-47615

January 26, 2023

NAME__________LearnPress plugin for WordPress file inclusionPlatforms Affected:Risk Level:9.3Exploitability:UnprovenConsequences:File Manipulation DESCRIPTION__________LearnPress plugin for WordPress could allow a remote attacker to include...

Lexmark products server-side request forgery | CVE-2023-23560

January 26, 2023

NAME__________Lexmark products server-side request forgeryPlatforms Affected:Risk Level:9Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Lexmark products are vulnerable to server-side request forgery, caused by improper input...

Jenkins Script Security Plugin code execution | CVE-2023-24422

January 26, 2023

NAME__________Jenkins Script Security Plugin code executionPlatforms Affected:Jenkins Script Security Plugin 1228.vd93135a_2fb_25Risk Level:8.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Jenkins Script Security Plugin could allow a...

Dasherr file upload | CVE-2023-23607

January 26, 2023

NAME__________Dasherr file uploadPlatforms Affected:Risk Level:9.8Exploitability:Proof of ConceptConsequences:Gain Access DESCRIPTION__________Dasherr could allow a remote attacker to upload arbitrary files, caused by...

Jenkins OpenId Connect Authentication Plugin security bypass | CVE-2023-24424

January 26, 2023

NAME__________Jenkins OpenId Connect Authentication Plugin security bypassPlatforms Affected:Jenkins OpenId Connect Authentication Plugin 2.4Risk Level:8.8Exploitability:UnprovenConsequences:Bypass Security DESCRIPTION__________Jenkins OpenId Connect Authentication Plugin...

Main Story

Editor’s Picks

Trending Story

Featured Story

You may have missed