OSINT

Malware Analysis – quantum – 87940b01f02d85d033dae35f8d01348f

February 22, 2023

Score: 10 MALWARE FAMILY: quantumTAGS:family:quantum, ransomwareMD5: 87940b01f02d85d033dae35f8d01348fSHA1: 152dd7098b2b7409669b1a5ba1e997ddeb622734ANALYSIS DATE: 2023-02-22T04:01:52ZTTPS: T1158, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – djvu – 2626279a3e0fa86062f70eb41c454931

February 22, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 2626279a3e0fa86062f70eb41c454931SHA1: 7e274a190cb4dbaeba62dbcd6def09f7c1197ad9ANALYSIS DATE: 2023-02-22T04:31:44ZTTPS: T1222, T1005, T1081, T1012,...

Malware Analysis – djvu – 0e27d37229646c4a68d258f19513bab2

February 22, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 0e27d37229646c4a68d258f19513bab2SHA1: 868e81e01cfdefebef662003fb1569d1c8634f55ANALYSIS DATE: 2023-02-22T05:35:54ZTTPS: T1005, T1081, T1012, T1222,...

Malware Analysis – djvu – 21b2fa42134d031de96e30172badfe1f

February 22, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 21b2fa42134d031de96e30172badfe1fSHA1: 1b43a994e943bd0dcb4c37b824908c6d49815450ANALYSIS DATE: 2023-02-22T05:35:08ZTTPS: T1012, T1082, T1053, T1005,...

Malware Analysis – djvu – eb3a93b87aeebce36ef2c599a8a6dfbc

February 22, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:19, backdoor, discovery, evasion, persistence, ransomware, stealer, trojan, vmprotectMD5: eb3a93b87aeebce36ef2c599a8a6dfbcSHA1: d8f67ac9a52e9300fbce7d667ea2f3d3e0bf65e0ANALYSIS DATE: 2023-02-22T04:31:20ZTTPS:...

VMware Patches Critical Vulnerability in Carbon Black App Control Product

February 22, 2023

VMware on Tuesday released patches to address a critical security vulnerability affecting its Carbon Black App Control product. Tracked as...

LockBit 3.0 Ransomware Victim: beacontech[.]net

February 22, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

LockBit 3.0 Ransomware Victim: vuu[.]edu

February 22, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Malware Analysis – djvu – c0904e41ae1b556e10c96b0bb560c3a3

February 22, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: c0904e41ae1b556e10c96b0bb560c3a3SHA1: 42f10936c427306bb9dd573d2b8269ea9abd0e06ANALYSIS DATE: 2023-02-21T22:11:42ZTTPS: T1060, T1112, T1222, T1005,...

Malware Analysis – djvu – 65265918b765429783ce5fa95a0622a2

February 22, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 65265918b765429783ce5fa95a0622a2SHA1: 1d703e95d884410e5877e90607cdaed2153acd27ANALYSIS DATE: 2023-02-21T22:20:06ZTTPS: T1060, T1112, T1082, T1012,...

Malware Analysis – discovery – a8cd74892388fd177dcc73a4ffcc7597

February 22, 2023

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, evasion, exploit, themidaMD5: a8cd74892388fd177dcc73a4ffcc7597SHA1: 1af61835c4e5dc78c93dad7b1352ff45350f1ae2ANALYSIS DATE: 2023-02-21T22:20:27ZTTPS: T1158, T1012, T1120, T1082, T1222 ScoreMeaningExample10Known badA malware...

Bug Bounty

BugCrowd Bug Bounty Disclosure: – privilege escalation allow the admin to takeover the org by invite the user as owner – By amitkh7888

February 22, 2023

The below information is fully automated and the information is captured from the BugCrowd Disclosure website. The information was correct...

Cobalt Stike Beacon Detected – 195[.]123[.]241[.]169:443

February 22, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 147[.]78[.]47[.]209:443

February 22, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 209[.]141[.]36[.]163:80

February 22, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 104[.]237[.]135[.]20:443

February 22, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – discovery – aaa0a4c3e66a85daa7f5d639e4cbb569

February 22, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, evasion, persistence, ransomwareMD5: aaa0a4c3e66a85daa7f5d639e4cbb569SHA1: 7cd22ae424f29b1aa127c8b19c215bdca57a3921ANALYSIS DATE: 2023-02-21T22:26:45ZTTPS: T1112, T1107, T1490, T1089, T1060, T1012, T1102, T1158,...

Malware Analysis – – 8bf945bbf9308d79875d4000db5272e2

February 22, 2023

Score: 7 MALWARE FAMILY: TAGS:MD5: 8bf945bbf9308d79875d4000db5272e2SHA1: 92f9abadb7ebc187304da07ec01469ad6958d220ANALYSIS DATE: 2023-02-21T22:33:10ZTTPS: T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – djvu – 57a2bb0db2912fc739932cd12df7bc65

February 22, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:pseudomanuscrypt, family:smokeloader, family:vidar, botnet:19, backdoor, discovery, evasion, loader, persistence, ransomware, stealer, trojan, vmprotectMD5: 57a2bb0db2912fc739932cd12df7bc65SHA1: 4d4491b07ced2422c14af94a87aec540d94a3e35ANALYSIS...

Malware Analysis – ransomware – 3907c7fbd4148395284d8e6e3c1dba5d

February 22, 2023

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 3907c7fbd4148395284d8e6e3c1dba5dSHA1: a67205dc84ec29eb71bb259b19c1a1783865c0fcANALYSIS DATE: 2023-02-21T23:41:14ZTTPS: T1005, T1081, T1018 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

OSINT

Malware Analysis – quantum – 87940b01f02d85d033dae35f8d01348f

Malware Analysis – djvu – 2626279a3e0fa86062f70eb41c454931

Malware Analysis – djvu – 0e27d37229646c4a68d258f19513bab2

Malware Analysis – djvu – 21b2fa42134d031de96e30172badfe1f

Malware Analysis – djvu – eb3a93b87aeebce36ef2c599a8a6dfbc

VMware Patches Critical Vulnerability in Carbon Black App Control Product

LockBit 3.0 Ransomware Victim: beacontech[.]net

LockBit 3.0 Ransomware Victim: vuu[.]edu

Malware Analysis – djvu – c0904e41ae1b556e10c96b0bb560c3a3

Malware Analysis – djvu – 65265918b765429783ce5fa95a0622a2

Malware Analysis – discovery – a8cd74892388fd177dcc73a4ffcc7597

BugCrowd Bug Bounty Disclosure: – privilege escalation allow the admin to takeover the org by invite the user as owner – By amitkh7888

Cobalt Stike Beacon Detected – 195[.]123[.]241[.]169:443

Cobalt Stike Beacon Detected – 147[.]78[.]47[.]209:443

Cobalt Stike Beacon Detected – 209[.]141[.]36[.]163:80

Cobalt Stike Beacon Detected – 104[.]237[.]135[.]20:443

Malware Analysis – discovery – aaa0a4c3e66a85daa7f5d639e4cbb569

Malware Analysis – – 8bf945bbf9308d79875d4000db5272e2

Malware Analysis – djvu – 57a2bb0db2912fc739932cd12df7bc65

Malware Analysis – ransomware – 3907c7fbd4148395284d8e6e3c1dba5d

MyloBot Botnet Spreading Rapidly Worldwide: Infecting Over 50,000 Devices Daily

Coinbase Employee Falls for SMS Scam in Cyber Attack, Limited Data Exposed

The Future of Network Security: Predictive Analytics and ML-Driven Solutions

Researchers Discover Numerous Samples of Information Stealer ‘Stealc’ in the Wild

[GLOBAL] – Ransomware Victim: entab[.]se

[AKIRA] – Ransomware Victim: Murex Petroleum

[AKIRA] – Ransomware Victim: HRConnects, LLC

[AKIRA] – Ransomware Victim: Meleam S[.]p[.]A[.]

Microsoft Dangles Extended Windows 10 Support In Exchange For Reward Points

You may have missed