OSINT

Malware Analysis – djvu – 900c5a8f4afb3473c9dac0f984d746f4

April 25, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5cb879265de0011bfc7588d5d251aee6, discovery, persistence, ransomware, stealerMD5: 900c5a8f4afb3473c9dac0f984d746f4SHA1: 00dadacc6119c3e8ccdbe4477da2452d06e8a992ANALYSIS DATE: 2023-04-25T17:32:11ZTTPS: T1130, T1112, T1060, T1222, T1082,...

Malware Analysis – evasion – 2c2bd73dcba2e7eb7fa78105c84ca2b1

April 25, 2023

Score: 8 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 2c2bd73dcba2e7eb7fa78105c84ca2b1SHA1: 24d7defc1e00739461dda0b275bd8304277aafd1ANALYSIS DATE: 2023-04-25T17:37:03ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – babuk – f9afb31bc17811e5ab4fa406f105b1fe

April 25, 2023

Score: 10 MALWARE FAMILY: babukTAGS:family:babuk, family:darkside, ransomwareMD5: f9afb31bc17811e5ab4fa406f105b1feSHA1: d1a9449dcc8a3aa0c887bce71f128866175f679aANALYSIS DATE: 2023-04-25T17:44:04ZTTPS: T1107, T1490, T1082, T1012, T1120 ScoreMeaningExample10Known badA malware family...

Malware Analysis – djvu – 4bc6e26f6bf9258473180f9805bbe508

April 25, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: 4bc6e26f6bf9258473180f9805bbe508SHA1: dacc8979f7e59e60be9cb842982ee0deca5b3248ANALYSIS DATE: 2023-04-25T17:41:03ZTTPS: T1130, T1112, T1060, T1222, T1082, T1053 ScoreMeaningExample10Known badA...

Malware Analysis – quasar – 5ec1610f2529bf6c482f43e8d7cb6235

April 25, 2023

Score: 10 MALWARE FAMILY: quasarTAGS:family:quasar, evasion, persistence, ransomware, spyware, trojanMD5: 5ec1610f2529bf6c482f43e8d7cb6235SHA1: a356a2a69d0551967f133b4b18c43703027e2383ANALYSIS DATE: 2023-04-25T17:40:13ZTTPS: T1107, T1490, T1088, T1089, T1112, T1031,...

OSINT

Malware Analysis – djvu – 900c5a8f4afb3473c9dac0f984d746f4

Malware Analysis – evasion – 2c2bd73dcba2e7eb7fa78105c84ca2b1

Malware Analysis – babuk – f9afb31bc17811e5ab4fa406f105b1fe

Malware Analysis – djvu – 4bc6e26f6bf9258473180f9805bbe508

Malware Analysis – quasar – 5ec1610f2529bf6c482f43e8d7cb6235

CISA: CISA Releases Two Industrial Control Systems Advisories

New SLP Vulnerability Could Let Attackers Launch 2200x Powerful DDoS Attacks

Iranian Hackers Launch Sophisticated Attacks Targeting Israel with PowerLess Backdoor

Posh C2 Detected – 159[.]69[.]180[.]8:443

Google Cloud Introduces Security AI Workbench for Faster Threat Detection and Analysis

Modernizing Vulnerability Management: The Move Toward Exposure Management

Lazarus Subgroup Targeting Apple Devices with New RustBucket macOS Malware

LockBit 3.0 Ransomware Victim: nagase[.]co[.]jp

LockBit 3.0 Ransomware Victim: gruponutresa[.]com

LockBit 3.0 Ransomware Victim: goforcloud[.]com

LockBit 3.0 Ransomware Victim: abro[.]se

LockBit 3.0 Ransomware Victim: ultimateimageprinting[.]com

Google Authenticator App Gets Cloud Backup Feature for TOTP Codes

Karakurt Ransomware Victim: TransMedics

Karakurt Ransomware Victim: Lifeline Vascular Access

Karakurt Ransomware Victim: Winona Powder Coating

Yellow Pages Canada confirms cyber attack as Black Basta leaks data

Microsoft 365 search outage affects Outlook, Teams, and SharePoint

APC warns of critical unauthenticated RCE flaws in UPS software

[AKIRA] – Ransomware Victim: Echo

[QILIN] – Ransomware Victim: brebeuf[.]org

[AKIRA] – Ransomware Victim: Ben’s Asphalt

[AKIRA] – Ransomware Victim: Baycoat

[QILIN] – Ransomware Victim: singersf[.]com

You may have missed