RedPacket Security - InfoSec News & Tutorials

Malware Analysis – banker – 79c49abc1b3f7fd73ab505f4d7632963

January 31, 2023

Score: 8 MALWARE FAMILY: bankerTAGS:banker, evasion, ransomwareMD5: 79c49abc1b3f7fd73ab505f4d7632963SHA1: cf8c728f48c805bd9def4128f9d1b3aa22c78b90ANALYSIS DATE: 2023-01-31T03:30:51ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – discovery – 328ed3428d79bb38ec9d29a5cb27a5a7

January 31, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: 328ed3428d79bb38ec9d29a5cb27a5a7SHA1: cd905b22794ca277a14d512fde28f1c20d01bdabANALYSIS DATE: 2023-01-31T03:30:56ZTTPS: T1012, T1082, T1112, T1042, T1060 ScoreMeaningExample10Known badA malware family...

Malware Analysis – bootkit – 858ee6ceb590822f57d2d98a32e3c5af

January 31, 2023

Score: 8 MALWARE FAMILY: bootkitTAGS:bootkit, discovery, persistenceMD5: 858ee6ceb590822f57d2d98a32e3c5afSHA1: 0cd9e539e919dd0367c1d04e2644bc3e8ad109e5ANALYSIS DATE: 2023-01-31T03:45:42ZTTPS: T1012, T1067, T1130, T1112, T1082 ScoreMeaningExample10Known badA malware family...

Malware Analysis – evasion – e75d7d7af4d7065b289f24922c092847

January 31, 2023

Score: 8 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: e75d7d7af4d7065b289f24922c092847SHA1: 536b17bd6834640aa6adea1ff8607790248f2134ANALYSIS DATE: 2023-01-31T04:14:29ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – evasion – 59d403798663c3cf889cab4605eca33a

January 31, 2023

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 59d403798663c3cf889cab4605eca33aSHA1: 67b18581e8b4476209eabe85361790706e8acf21ANALYSIS DATE: 2023-01-31T03:51:26ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – djvu – 4f7cd4bd04c4b2c6419bab5e4b8cc7ee

January 31, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 4f7cd4bd04c4b2c6419bab5e4b8cc7eeSHA1: c32fdf8831286b78fbb8cb10bd6ae8509740efe4ANALYSIS DATE: 2023-01-31T04:17:37ZTTPS: T1060, T1112, T1005, T1081,...

Malware Analysis – smokeloader – 27bb9abd524480ce1b30123ee769270a

January 31, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 27bb9abd524480ce1b30123ee769270aSHA1: 682cb6bf50f2c662165a241413343c9170d907fbANALYSIS DATE: 2023-01-31T04:30:05ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 54284e6ecb72c4ecd0a4e33c8afe8541

January 31, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 54284e6ecb72c4ecd0a4e33c8afe8541SHA1: 55cf4c0183bdb3f1f2dba397dad8d11a4a219889ANALYSIS DATE: 2023-01-31T05:37:39ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – discovery – 551321ba31ec119801d4a3fb3612cbfe

January 31, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: 551321ba31ec119801d4a3fb3612cbfeSHA1: d169e3d5bb0e3abee31030a6332ded2e7fdf189bANALYSIS DATE: 2023-01-31T05:53:10ZTTPS: T1060, T1012, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

241c544bbbacdf89a18da39debd8547a4fdd53e59d4bb96b8bb6e8427bfef3aa

Analyzing and remediating a malware infested T95 TV box from Amazon

January 31, 2023

A couple of weeks ago, security news outlets made their rounds reporting on an Android TV box available on Amazon...

Winnti APT group docks in Sri Lanka for new campaign

January 31, 2023

In early August, the Malwarebytes Threat Intelligence team identified a new attack targeting government entities in Sri Lanka. The threat...

LockBit 3.0 Ransomware Victim: parkavedoors[.]com

January 31, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

LockBit 3.0 Ransomware Victim: tcels[.]or[.]th

January 31, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

LockBit 3.0 Ransomware Victim: geraardsbergen[.]be

January 31, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

LockBit 3.0 Ransomware Victim: 2cara[.]fr

January 31, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Planet Ice – 240,488 breached accounts

January 31, 2023

HIBP In January 2023, the UK-based ice skating rink booking service Planet Ice suffered a data breach. The incident exposed...

Vice Society Ransomware Victim: Okanagan College

January 31, 2023

Vice Society Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Royal Ransomware Victim: municipality of Torre del Greco

January 31, 2023

RoyalRansomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the...