Cobalt Stike Beacon Detected – 23[.]227[.]194[.]86:80
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
North Korea ScarCruft APT used previously undetected Dolphin Backdoor against South Korea
North Korea-linked ScarCruft group used a previously undocumented backdoor called Dolphin against targets in South Korea. ESET researchers discovered a previously undocumented backdoor called Dolphin...
Sinatra code execution | CVE-2022-45442
NAME Sinatra code execution Platforms Affected:Sinatra Sinatra 2.0.0 Sinatra Sinatra 2.2.2 Sinatra Sinatra 3.0.0 Sinatra Sinatra 3.0.3Risk Level:8.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION...
Lastpass discloses the second security breach this year
LastPass disclosed a new security breach, threat actors had access to its cloud storage using information stolen in the August...
Daily Vulnerability Trends: Thu Dec 01 2022
Daily Vulnerability Trends (sourced from VulnMon) CVE NAMECVE DescriptionCVE-2022-36067vm2 is a sandbox that can run untrusted code with whitelisted Node's...
Malware Analysis – adware – 86c8fbb939f986e0d01e7c175b645be1
Score: 10 MALWARE FAMILY: adwareTAGS:adware, bootkit, discovery, evasion, persistence, ransomware, spyware, stealer, trojan, upxMD5: 86c8fbb939f986e0d01e7c175b645be1SHA1: 362f9ac4249dce17ca231f4ba1e37f24d65b11baANALYSIS DATE: 2022-12-01T02:48:04ZTTPS: T1012, T1082,...
Malware Analysis – – 6934b39e90dddfa77024c63cf37986b0
Score: 6 MALWARE FAMILY: TAGS:MD5: 6934b39e90dddfa77024c63cf37986b0SHA1: c2978367c3f92614a6b0d36399713cf6a9021a0cANALYSIS DATE: 2022-11-29T17:16:48ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...
Malware Analysis – djvu – cf71bc7cbcd455475e601421ae0a09f6
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, stealerMD5: cf71bc7cbcd455475e601421ae0a09f6SHA1: 7de15815b0885340bb5a45887fb98a8b225b1633ANALYSIS DATE: 2022-12-01T03:45:12ZTTPS: T1012, T1082, T1053, T1060, T1112,...
Malware Analysis – amadey – 76f38fc85049a7037d7b56a72a7ab6cb
Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:dcrat, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, infostealer, persistence, ransomware, rat, spyware, stealer, trojanMD5:...
Malware Analysis – amadey – 2aa5a97e05b33840caa2671eb6b0f40f
Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 2aa5a97e05b33840caa2671eb6b0f40fSHA1: e9294c855702b3eee45423b736f4c1ef1d21503aANALYSIS DATE:...
Malware Analysis – ransomware – 13d8c2f2cdf5f6208c3e999621019304
Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 13d8c2f2cdf5f6208c3e999621019304SHA1: fc8930cd264393552727a457efbbea67e60e49e5ANALYSIS DATE: 2022-12-01T02:57:27ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...
Malware Analysis – djvu – 951763ed72bd6ef3dbfb949301dbf918
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, backdoor, ransomware, spyware, stealer, trojanMD5: 951763ed72bd6ef3dbfb949301dbf918SHA1: bfa478fdd1eb243a9ee4c665f5e409878f62f420ANALYSIS DATE: 2022-12-01T05:31:18ZTTPS: T1012, T1120, T1082, T1005, T1081...
Malware Analysis – djvu – d7d034eb4e18d62df6bad28b02b70091
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: d7d034eb4e18d62df6bad28b02b70091SHA1: 0d9031c92147ea4a1f3642f2054506aadef285eaANALYSIS DATE: 2022-12-01T05:24:26ZTTPS: T1222, T1060, T1112, T1012,...
Malware Analysis – – 9011870a33ddb12f8934f9061de6f42c
Score: 7 MALWARE FAMILY: TAGS:MD5: 9011870a33ddb12f8934f9061de6f42cSHA1: f4ed234105177810353926f58f748be67c2be4edANALYSIS DATE: 2022-12-01T05:46:07ZTTPS: T1112, T1012, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...
Malware Analysis – ransomware – 1dc43a6cca06ebf436d3e38943e7e7c5
Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 1dc43a6cca06ebf436d3e38943e7e7c5SHA1: ef3ff881253a909e92eea56a71e434070f6ce7e9ANALYSIS DATE: 2022-12-01T05:53:16ZTTPS: T1102 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...
Cuba Ransomware Victim: Patton
Cuba Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of...
Malware Analysis – amadey – 795e5e08e60da5d2446eef36e474668f
Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 795e5e08e60da5d2446eef36e474668fSHA1: 6783dd6bba712949574a02a9559fa533a88cc772ANALYSIS DATE:...
Malware Analysis – blackbasta – ac625552601c190656dcb8cf4c21cd1d
Score: 10 MALWARE FAMILY: blackbastaTAGS:family:blackbasta, ransomwareMD5: ac625552601c190656dcb8cf4c21cd1dSHA1: acad7a91c2812a0652d62f252774454c217666e9ANALYSIS DATE: 2022-11-30T22:38:00ZTTPS: T1107, T1490, T1491, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...
Malware Analysis – blackbasta – 3f400f30415941348af21d515a2fc6a3
Score: 10 MALWARE FAMILY: blackbastaTAGS:family:blackbasta, evasion, ransomwareMD5: 3f400f30415941348af21d515a2fc6a3SHA1: bd0bf9c987288ca434221d7d81c54a47e913600aANALYSIS DATE: 2022-11-30T21:06:57ZTTPS: T1490, T1107, T1491, T1112, T1082 ScoreMeaningExample10Known badA malware family...
Malware Analysis – blackbasta – 998022b70d83c6de68e5bdf94e0f8d71
Score: 10 MALWARE FAMILY: blackbastaTAGS:family:blackbasta, ransomwareMD5: 998022b70d83c6de68e5bdf94e0f8d71SHA1: b87a947f3e85701fcdadd733e9b055a65a3b1308ANALYSIS DATE: 2022-11-30T22:47:38ZTTPS: T1107, T1490, T1491, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...
Malware Analysis – blackbasta – eff424376edca5680b90ea9fedad163d
Score: 10 MALWARE FAMILY: blackbastaTAGS:family:blackbasta, evasion, ransomwareMD5: eff424376edca5680b90ea9fedad163dSHA1: 3c13c1e54d2d7991c1c3452ae89888a8e7a47763ANALYSIS DATE: 2022-11-30T23:14:05ZTTPS: T1490, T1107, T1491, T1112, T1082 ScoreMeaningExample10Known badA malware family...
Malware Analysis – blackbasta – 267d5c3137d313ce1a86c2f255a835e6
Score: 10 MALWARE FAMILY: blackbastaTAGS:family:blackbasta, ransomware, spyware, stealerMD5: 267d5c3137d313ce1a86c2f255a835e6SHA1: c7a37c0edeffd23777cca44f9b49076be1bd43e6ANALYSIS DATE: 2022-11-30T23:08:46ZTTPS: T1491, T1112, T1005, T1081 ScoreMeaningExample10Known badA malware family...
Malware Analysis – blackbasta – a2086f41bc06adc69517bc0d9c07bf6e
Score: 10 MALWARE FAMILY: blackbastaTAGS:family:blackbasta, ransomware, upxMD5: a2086f41bc06adc69517bc0d9c07bf6eSHA1: 1d30388c1235da56a2f17d645f0a66ead7b59159ANALYSIS DATE: 2022-11-30T23:19:25ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...
Malware Analysis – djvu – 9f86d39cef8f2d55ee153628c599f125
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, stealerMD5: 9f86d39cef8f2d55ee153628c599f125SHA1: ffcca079744b576dec190e17f8a96f6283875729ANALYSIS DATE: 2022-11-30T22:54:30ZTTPS: T1060, T1112, T1222, T1082, T1012,...
