RedPacket Security - InfoSec News & Tutorials

Malware Analysis – amadey – c3b88f8dfbc849ad2a6d3253febe5905

January 6, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:vidar, botnet:19, backdoor, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: c3b88f8dfbc849ad2a6d3253febe5905SHA1: 88665567cd41b6d9a950727c16e038712dc08a07ANALYSIS DATE:...

Malware Analysis – wannacry – 115b1d97402bc50dacb74ba73c7464d2

January 6, 2023

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, ransomware, wormMD5: 115b1d97402bc50dacb74ba73c7464d2SHA1: 799abb0d4067ec605126cd40ce52949510a60cf7ANALYSIS DATE: 2023-01-06T11:00:52ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Hitachi Energy FOXMAN-UN and UNEM weak security | CVE-2022-3927

January 6, 2023

NAME__________Hitachi Energy FOXMAN-UN and UNEM weak securityPlatforms Affected:Hitachi Energy FOXMAN-UN R16A Hitachi Energy FOXMAN-UN R15B Hitachi Energy FOXMAN-UN R15A Hitachi...

MediaTek Android privilege escalation | CVE-2022-32665

January 6, 2023

NAME__________MediaTek Android privilege escalationPlatforms Affected:Risk Level:9.8Exploitability:UnprovenConsequences:Gain Privilege DESCRIPTION__________MediaTek Android could allow a remote attacker to gain elevated privileges on the...

Hitachi Energy FOXMAN-UN and UNEM information disclosure | CVE-2022-3929

January 6, 2023

NAME__________Hitachi Energy FOXMAN-UN and UNEM information disclosurePlatforms Affected:Hitachi Energy FOXMAN-UN R16A Hitachi Energy FOXMAN-UN R15B Hitachi Energy FOXMAN-UN R15A Hitachi...

Centos Web Panel command execution | CVE-2022-44877

January 6, 2023

NAME__________Centos Web Panel command executionPlatforms Affected:CentOS Web Panel CentOS Web PanelRisk Level:9.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Centos Web Panel could allow a remote...

MediaTek Android privilege escalation | CVE-2022-32664

January 6, 2023

MediaTek Android privilege escalation | CVE-2022-32635

January 6, 2023

NAME__________MediaTek Android privilege escalationPlatforms Affected:Risk Level:8.4Exploitability:UnprovenConsequences:Gain Privilege DESCRIPTION__________MediaTek Android could allow a local attacker to gain elevated privileges on the...

Daily Vulnerability Trends: Fri Jan 06 2023

January 6, 2023

Daily Vulnerability Trends (sourced from VulnMon) CVE NAMECVE DescriptionCVE-2022-40517 No description provided CVE-2022-40520 No description provided CVE-2022-40518 No description provided...

Malware Analysis – amadey – 6efd0ee79db69cb68293eebd38c8ded2

January 6, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:vidar, botnet:19, backdoor, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: 6efd0ee79db69cb68293eebd38c8ded2SHA1: c3df1975f7165f1673d67a9ff57d1062be505616ANALYSIS DATE:...

Malware Analysis – amadey – 64c688c300a9e9859f5b2981507d5e0f

January 6, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:vidar, botnet:19, backdoor, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: 64c688c300a9e9859f5b2981507d5e0fSHA1: 70f6af55c18b663eb30052756a26f064949a4a4eANALYSIS DATE:...

Malware Analysis – djvu – da1a359be326b3d9888021b12a628fb1

January 6, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: da1a359be326b3d9888021b12a628fb1SHA1: 551b319ed5bf85ebd09fc1a10f6088079afce619ANALYSIS DATE: 2023-01-06T05:51:05ZTTPS: T1060, T1112, T1053, T1012,...

Malware Analysis – djvu – b5ac8eff1f9ef7e7ef418f9ea8328e09

January 6, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: b5ac8eff1f9ef7e7ef418f9ea8328e09SHA1: ec1505b63a00efbeac8f325747df5ff745fbcf0bANALYSIS DATE: 2023-01-06T04:36:48ZTTPS: T1012, T1082, T1005, T1081,...

Twitter (200M) – 211,524,284 breached accounts

January 6, 2023

HIBP In early 2023, over 200M records scraped from Twitter appeared on a popular hacking forum. The data was obtained...