OSINT

Malware Analysis – evasion – b209c6502e2fecd11fbdeb4fe602e90a

April 24, 2023

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: b209c6502e2fecd11fbdeb4fe602e90aSHA1: 5abd3b562aa38db2a1f14ec0997a5e9d6fa4fc9eANALYSIS DATE: 2023-04-24T17:23:51ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – djvu – 8729348bb91d4712cde74e6ae4949bbe

April 24, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5cb879265de0011bfc7588d5d251aee6, discovery, persistence, ransomware, spyware, stealerMD5: 8729348bb91d4712cde74e6ae4949bbeSHA1: 996a94a902d668107532ba251f8224d6b7225ddcANALYSIS DATE: 2023-04-24T17:25:53ZTTPS: T1012, T1082, T1053, T1005,...

Malware Analysis – amadey – 6f067e24ed07adc6b424ac9a0e7f5a61

April 24, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:raccoon, family:rhadamanthys, family:smokeloader, family:vidar, botnet:5c24dc0e9726fcc756a18038ae4e0e67, botnet:5cb879265de0011bfc7588d5d251aee6, botnet:fc8427198f843d72c1aa8a66db1a98f3, botnet:pub1, backdoor, collection, discovery, evasion, persistence, ransomware,...

Malware Analysis – djvu – 9e152141b4c83bd73477b543860668df

April 24, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5cb879265de0011bfc7588d5d251aee6, discovery, persistence, ransomware, spyware, stealerMD5: 9e152141b4c83bd73477b543860668dfSHA1: 841b2caff78d9dd1e8ad6b6a1493c9892d698dceANALYSIS DATE: 2023-04-24T17:32:45ZTTPS: T1082, T1012, T1005, T1081,...

Malware Analysis – djvu – 413e3d55867e81e00b0fc53b335e0c8a

April 24, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5cb879265de0011bfc7588d5d251aee6, discovery, persistence, ransomware, stealerMD5: 413e3d55867e81e00b0fc53b335e0c8aSHA1: bef6e9491bd8fc6489808c1eebe11d20c638297bANALYSIS DATE: 2023-04-24T17:27:59ZTTPS: T1222, T1082, T1053, T1130, T1112,...

OSINT

Malware Analysis – evasion – b209c6502e2fecd11fbdeb4fe602e90a

Malware Analysis – djvu – 8729348bb91d4712cde74e6ae4949bbe

Malware Analysis – amadey – 6f067e24ed07adc6b424ac9a0e7f5a61

Malware Analysis – djvu – 9e152141b4c83bd73477b543860668df

Malware Analysis – djvu – 413e3d55867e81e00b0fc53b335e0c8a

Russian Hackers Tomiris Targeting Central Asia for Intelligence Gathering

Ransomware Hackers Using AuKill Tool to Disable EDR Software Using BYOVD Attack

Study: 84% of Companies Use Breached SaaS Applications – Here’s How to Fix it for Free!

Hackers Exploit Outdated WordPress Plugin to Backdoor Thousands of WordPress Sites

LockBit 3.0 Ransomware Victim: bigc[.]co[.]th

LockBit 3.0 Ransomware Victim: fullertonindia[.]com

LockBit 3.0 Ransomware Victim: floraalpina[.]ch

LockBit 3.0 Ransomware Victim: norton[.]com[.]ar

LockBit 3.0 Ransomware Victim: esinsa[.]com

LockBit 3.0 Ransomware Victim: gpglobal[.]com

LockBit 3.0 Ransomware Victim: yateemgroup[.]com

LockBit 3.0 Ransomware Victim: apolloscientific[.]co[.]uk

LockBit 3.0 Ransomware Victim: tiger[.]jp

LockBit 3.0 Ransomware Victim: midipapierspeints[.]fr

LockBit 3.0 Ransomware Victim: kse[.]org[.]kw

LockBit 3.0 Ransomware Victim: baffetmateriaux[.]fr

New All-in-One “EvilExtractor” Stealer for Windows Systems Surfaces on the Dark Web

Russian Hackers Suspected in Ongoing Exploitation of Unpatched PaperCut Servers

Hackers can breach networks using data on resold corporate routers

[AKIRA] – Ransomware Victim: Echo

[QILIN] – Ransomware Victim: brebeuf[.]org

[AKIRA] – Ransomware Victim: Ben’s Asphalt

[AKIRA] – Ransomware Victim: Baycoat

[QILIN] – Ransomware Victim: singersf[.]com

You may have missed