Get-AppLockerEventlog – Script For Fetching Applocker Event Log By Parsing The Win-Event Log
This script will parse all the channels of events from the win-event log to extract all the log relatives to...
OSINT
Malware Analysis – djvu – 6735e0d9fc3b11c7cbdd071d3829162b
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 6735e0d9fc3b11c7cbdd071d3829162bSHA1: 1ebc132342713c73f1020c8012b0b5063c28b2aaANALYSIS DATE: 2023-01-24T09:04:30ZTTPS: T1012, T1082, T1005, T1081,...
Malware Analysis – evasion – c7a9226978be7b4ead9febb8ac854e7c
Score: 6 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: c7a9226978be7b4ead9febb8ac854e7cSHA1: cb7e60b4c4c4f4737c4cfe74addde018515918dfANALYSIS DATE: 2023-01-24T09:00:06ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...
Malware Analysis – djvu – c249a253e8f6bab49a07078d3b07bdf4
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: c249a253e8f6bab49a07078d3b07bdf4SHA1: 0bca272f816478d880ab6b1e29d3239c587726ffANALYSIS DATE: 2023-01-24T10:51:50ZTTPS: T1060, T1112, T1012, T1082,...
Malware Analysis – upx – 5f586940f6b6ae2f8cbdeaec316b62ef
Score: 9 MALWARE FAMILY: upxTAGS:upxMD5: 5f586940f6b6ae2f8cbdeaec316b62efSHA1: 97197beb2de16b0b38c20b4846f4325283f28356ANALYSIS DATE: 2023-01-24T09:57:48ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...
Malware Analysis – dharma – be47139183c40fceb264c6946627b93f
Score: 10 MALWARE FAMILY: dharmaTAGS:family:dharma, persistence, ransomware, spyware, stealerMD5: be47139183c40fceb264c6946627b93fSHA1: 06f645d6afc2f909dbdf61c0982dcd74126bc5f5ANALYSIS DATE: 2023-01-24T09:17:14ZTTPS: T1005, T1081, T1112, T1060, T1107, T1490, T1082...
Malware Analysis – dharma – e096b294d0ed5f42ca68bc41c47ac27a
Score: 10 MALWARE FAMILY: dharmaTAGS:family:dharma, persistence, ransomware, spyware, stealerMD5: e096b294d0ed5f42ca68bc41c47ac27aSHA1: 1d5601986887ead48d036f1401330b8c9fd59eebANALYSIS DATE: 2023-01-24T09:17:03ZTTPS: T1005, T1081, T1082, T1112, T1060, T1107, T1490...
Malware Analysis – dharma – ee524170a7ffc7ad48afc3a1e7377943
Score: 10 MALWARE FAMILY: dharmaTAGS:family:dharma, persistence, ransomware, spyware, stealerMD5: ee524170a7ffc7ad48afc3a1e7377943SHA1: c9c8725012fbf7e9651b2e1519eaf17e86a65658ANALYSIS DATE: 2023-01-24T09:17:03ZTTPS: T1082, T1060, T1112, T1107, T1490, T1005, T1081...
Malware Analysis – dharma – 58402f0f41e3bfecbea9ca1bcc0f0c2b
Score: 10 MALWARE FAMILY: dharmaTAGS:family:dharma, persistence, ransomware, spyware, stealerMD5: 58402f0f41e3bfecbea9ca1bcc0f0c2bSHA1: 0a2b11df94790e1121c17e350eb846a236e0fbcfANALYSIS DATE: 2023-01-24T09:17:05ZTTPS: T1060, T1112, T1107, T1490, T1005, T1081, T1082...
Malware Analysis – persistence – b6cfdefd2ef6bb507cbac8634ec3f6a1
Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: b6cfdefd2ef6bb507cbac8634ec3f6a1SHA1: 583bbf424a7114586dd48fe57be999cbd750ba56ANALYSIS DATE: 2023-01-24T09:17:07ZTTPS: T1107, T1490, T1060, T1112, T1005, T1081, T1491 ScoreMeaningExample10Known...
Cobalt Stike Beacon Detected – 44[.]201[.]225[.]29:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Malware Analysis – djvu – 25ebd3e34fae530ba993ec9a609a2459
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 25ebd3e34fae530ba993ec9a609a2459SHA1: cee22c94beeeb1d50c110babe87d5a756be8cf05ANALYSIS DATE: 2023-01-24T10:27:58ZTTPS: T1222, T1053, T1005, T1081,...
Cobalt Stike Beacon Detected – 35[.]164[.]247[.]19:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 107[.]189[.]5[.]117:80
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 194[.]165[.]16[.]62:80
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 162[.]14[.]97[.]126:80
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Daily Vulnerability Trends: Tue Jan 24 2023
Daily Vulnerability Trends (sourced from VulnMon) CVE NAMECVE DescriptionCVE-2023-24068Signal Desktop before 6.2.0 on Windows, Linux, and macOS allows an attacker...
Malware Analysis – djvu – d3d65090cad621234a92329236fb75e6
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: d3d65090cad621234a92329236fb75e6SHA1: 18d5e6b99a1bb323f2b3ad6c3e8a4c2cb46b650aANALYSIS DATE: 2023-01-24T03:20:48ZTTPS: T1053, T1005, T1081, T1060,...
Malware Analysis – evasion – 4e775bc9cb9d1e9818208935fbdba509
Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 4e775bc9cb9d1e9818208935fbdba509SHA1: 7f72d5601ff522fef0dbabebdc01fa4289e5d4bcANALYSIS DATE: 2023-01-24T04:44:45ZTTPS: T1490, T1059, T1107, T1082, T1112, T1053, T1485, T1031,...
Malware Analysis – discovery – 6f19490d77a2076e8779ca5ca82bd454
Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, ransomwareMD5: 6f19490d77a2076e8779ca5ca82bd454SHA1: 9f54708bc313f5863ca8e5cca60f727cb6e29154ANALYSIS DATE: 2023-01-24T04:25:49ZTTPS: T1012, T1130, T1112, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...
Malware Analysis – djvu – 70fd03a7711ed5316b20dbe3110bd301
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 70fd03a7711ed5316b20dbe3110bd301SHA1: 60c30f7fc1c491085c0958d51cb7f9cf7ff26fa6ANALYSIS DATE: 2023-01-24T05:40:05ZTTPS: T1060, T1112, T1012, T1082,...
Malware Analysis – djvu – 9072bbefe62a6289483a541fa22d8d64
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 9072bbefe62a6289483a541fa22d8d64SHA1: 2ebdf7f18cfcd9827768b6981197832c672e556fANALYSIS DATE: 2023-01-24T05:39:04ZTTPS: T1222, T1060, T1112, T1053,...
Autotrader – 20,032 breached accounts
HIBP In January 2023, 1.4M records from the Autotrader online vehicle marketplace appeared on a popular hacking forum. Autotrader stated...
KomplettFritid – 139,401 breached accounts
HIBP In January 2023, the online Norwegian store KomplettFritid was reported as having had a data breach dating back to...
