Multiple Hacker Groups Exploit 3-Year-Old Vulnerability to Breach U.S. Federal Agency
Multiple threat actors, including a nation-state group, exploited a critical three-year-old security flaw in Progress Telerik to break into an...
LockBit 3.0 Ransomware Victim: regaltax[.]us
LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...
Daily Vulnerability Trends: Thu Mar 16 2023
Daily Vulnerability Trends (sourced from VulnMon) CVE NAMECVE DescriptionCVE-2023-25610 No description provided CVE-2023-1017An out-of-bounds write vulnerability exists in TPM2.0's Module...
Malware Analysis – amadey – 7dc5c70b9d7bfeb2dcbf7347794b0057
Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:laplas, family:pseudomanuscrypt, family:redline, family:smokeloader, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, botnet:pub1, botnet:sprg, backdoor, clipper, discovery, infostealer, loader, persistence,...
Malware Analysis – – c19548ebf324b01ddc5cdf18480f7a24
Score: 1 MALWARE FAMILY: TAGS:MD5: c19548ebf324b01ddc5cdf18480f7a24SHA1: 4afa21eb10b55b08289706b71c9a693937284432ANALYSIS DATE: 2023-03-16T03:58:06ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...
Malware Analysis – chaos – 8f033c07f57f8ce2e62e3a327f423d55
Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, evasion, persistence, ransomware, spyware, stealerMD5: 8f033c07f57f8ce2e62e3a327f423d55SHA1: 57ac411652d7b1d9accaa8a1af5f4b6a45ef7448ANALYSIS DATE: 2023-03-16T04:07:10ZTTPS: T1490, T1059, T1107, T1112, T1082, T1012,...
Malware Analysis – discovery – d28e88e6e9ad654f81909e605f3398c1
Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploit, persistence, spyware, stealerMD5: d28e88e6e9ad654f81909e605f3398c1SHA1: 84726882c606eec6b7ed7d0ba1d9acdd13390e45ANALYSIS DATE: 2023-03-16T04:21:02ZTTPS: T1060, T1112, T1005, T1081, T1222 ScoreMeaningExample10Known badA...
Malware Analysis – chaos – ae7795f6305ad315589ff4846ad1ef14
Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, evasion, ransomwareMD5: ae7795f6305ad315589ff4846ad1ef14SHA1: 71f4143d89ce0dcb5729e2a8b2cd54bc9b423e65ANALYSIS DATE: 2023-03-16T04:06:04ZTTPS: T1490, T1059, T1107, T1082, T1012 ScoreMeaningExample10Known badA malware family...
Malware Analysis – – e8340564caba7a2635af2c79cb7103eb
Score: 1 MALWARE FAMILY: TAGS:MD5: e8340564caba7a2635af2c79cb7103ebSHA1: 8c62c79508abe5ffa36608d1846dcb20b2a27137ANALYSIS DATE: 2023-03-16T04:27:05ZTTPS: T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...
Malware Analysis – djvu – 55d0959d9de905e03b833891efa6cddf
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, discovery, persistence, ransomware, spyware, stealerMD5: 55d0959d9de905e03b833891efa6cddfSHA1: 07511e4f5ac903ec1a43ded40d3bd9ac0dc758a0ANALYSIS DATE: 2023-03-16T05:14:03ZTTPS: T1005, T1081, T1060, T1112,...
Malware Analysis – amadey – 6aefc29eb3e1f666cba3c09647d9c187
Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:laplas, family:smokeloader, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, botnet:pub1, botnet:sprg, backdoor, clipper, discovery, persistence, ransomware, spyware, stealer, trojanMD5:...
Malware Analysis – evasion – 6c782f5f5a64c0b2d9b1db4c774e416e
Score: 9 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 6c782f5f5a64c0b2d9b1db4c774e416eSHA1: 536d5cf87af69245644efd7c06a06616eee3ff7bANALYSIS DATE: 2023-03-16T05:16:45ZTTPS: T1490, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...
Malware Analysis – djvu – 93b3449417b91a339c37b9647d884db6
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, discovery, persistence, ransomware, spyware, stealerMD5: 93b3449417b91a339c37b9647d884db6SHA1: c7a40ac43987a5d519e95b4fc3b1acb6eae8ac05ANALYSIS DATE: 2023-03-16T04:38:16ZTTPS: T1005, T1081, T1012, T1082,...
CISA Issues Urgent Warning: Adobe ColdFusion Vulnerability Exploited in the Wild
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on March 15 added a security vulnerability impacting Adobe ColdFusion to its...
Malware Analysis – ransomware – d1e8c1498d56e7da0e8fc0671b5ab2b5
Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: d1e8c1498d56e7da0e8fc0671b5ab2b5SHA1: 8276facc6ef40df6385dd3dd49e41848228c7735ANALYSIS DATE: 2023-03-15T21:04:23ZTTPS: T1012, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...
Malware Analysis – djvu – 3cb60ddc5d349a8ffbda640f3c201884
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, discovery, persistence, ransomware, spyware, stealerMD5: 3cb60ddc5d349a8ffbda640f3c201884SHA1: 87a887303c616bd350e8ed890941240d5faa5610ANALYSIS DATE: 2023-03-15T21:36:18ZTTPS: T1222, T1012, T1082, T1005,...
Malware Analysis – djvu – aaa532c24ef3e42b4fad1997a49a13fb
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, discovery, persistence, ransomware, spyware, stealerMD5: aaa532c24ef3e42b4fad1997a49a13fbSHA1: dec412fc077ac69b21fe869ae37ec8761ad52c5bANALYSIS DATE: 2023-03-15T21:25:50ZTTPS: T1222, T1082, T1053, T1012,...
Malware Analysis – amadey – 7f707db90b2c23dad5bd0ee1951ffc05
Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:rhadamanthys, family:smokeloader, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, botnet:pub1, botnet:sprg, backdoor, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 7f707db90b2c23dad5bd0ee1951ffc05SHA1:...
Malware Analysis – eternity – 5f4b0475c50266443e5d50ed496912ef
Score: 10 MALWARE FAMILY: eternityTAGS:family:eternity, evasion, ransomwareMD5: 5f4b0475c50266443e5d50ed496912efSHA1: 6e97a7131a9285e3a182e739017e5bde4548f6ddANALYSIS DATE: 2023-03-15T21:53:11ZTTPS: T1053, T1107, T1490, T1082, T1018 ScoreMeaningExample10Known badA malware family...
Malware Analysis – djvu – a176a3f60922d66d161c83d726602fbf
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, discovery, persistence, ransomware, spyware, stealerMD5: a176a3f60922d66d161c83d726602fbfSHA1: ece19fee8629873a2722407a33f1d2803e21efceANALYSIS DATE: 2023-03-15T23:00:09ZTTPS: T1060, T1112, T1082, T1005,...
Malware Analysis – amadey – b59b3a9cc2547eef5e6e51e0d7e5aa33
Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:rhadamanthys, family:smokeloader, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, botnet:pub1, botnet:sprg, backdoor, discovery, persistence, ransomware, spyware, stealer, trojanMD5: b59b3a9cc2547eef5e6e51e0d7e5aa33SHA1:...
Malware Analysis – xworm – dcf97bdb41eb351d2fc4ea91f624423d
Score: 10 MALWARE FAMILY: xwormTAGS:family:xworm, evasion, persistence, ransomware, rat, trojanMD5: dcf97bdb41eb351d2fc4ea91f624423dSHA1: d3715326aebfa2e71c1e7a56567fabfafb4728faANALYSIS DATE: 2023-03-15T22:30:53ZTTPS: T1491, T1112, T1053, T1012, T1082, T1088,...
Malware Analysis – djvu – c2dbc2aee5f07914fac16075c857bca9
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, discovery, persistence, ransomware, spyware, stealerMD5: c2dbc2aee5f07914fac16075c857bca9SHA1: bf011ffe863fd1ed73cad62fb5002a97bceaa090ANALYSIS DATE: 2023-03-15T22:50:29ZTTPS: T1060, T1112, T1222, T1082,...
Cl0p Ransomware Victim: ONEX[.]COM
Cl0p Logo NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of...
