OSINT

Malware Analysis – djvu – fe53c14f50ee7a0582d62715fd824056

January 8, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, family:vidar, botnet:19, botnet:@2023@new, backdoor, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5: fe53c14f50ee7a0582d62715fd824056SHA1: d844915b144b559295936cc8fe12232b925da893ANALYSIS...

Malware Analysis – djvu – c4dd2d3cd811e87ae1ceaa1b9718f4a1

January 8, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:19, backdoor, discovery, persistence, ransomware, spyware, stealer, trojanMD5: c4dd2d3cd811e87ae1ceaa1b9718f4a1SHA1: c469300e4e6b78f84cf3cbbd6095c840c031df8fANALYSIS DATE: 2023-01-08T09:39:32ZTTPS: T1112,...

Malware Analysis – – 326c4f6e417c419eddf40f8d1035e046

January 8, 2023

Score: 1 MALWARE FAMILY: TAGS:MD5: 326c4f6e417c419eddf40f8d1035e046SHA1: a96cfd2b0e59688e26f7b9cf3b5a6980e6f805beANALYSIS DATE: 2023-01-08T10:31:17ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – 486033dcb4db27a1157bc1531dfb6fa7

January 8, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 486033dcb4db27a1157bc1531dfb6fa7SHA1: c83d60beb9722f97661635da7cb7e065ad75438fANALYSIS DATE: 2023-01-08T09:26:26ZTTPS: T1053, T1005, T1081, T1012,...

Brute Ratel C4 Detected – 18[.]180[.]186[.]166:80

January 8, 2023

The Information provided at the time of posting was detected as "Brute Ratel C4". Depending on when you are viewing...

Malware Analysis – ransomware – 31656fb93e948d7c349457d7f5c6dfec

January 8, 2023

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 31656fb93e948d7c349457d7f5c6dfecSHA1: 0ae36846ff75ee88660bfe2d9f59f5b49564d3c0ANALYSIS DATE: 2023-01-08T10:36:03ZTTPS: T1005, T1081 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – ransomware – 59631f469b3a3781d8bcf3174e91d3cc

January 8, 2023

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 59631f469b3a3781d8bcf3174e91d3ccSHA1: ec6bf09a09ba3810b7124d06f7f7f84d6038f1faANALYSIS DATE: 2023-01-08T10:33:04ZTTPS: T1005, T1081 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – djvu – 4e842f7e1ac9182d03f7234b0700656d

January 8, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 4e842f7e1ac9182d03f7234b0700656dSHA1: b1e3bca3859d22ca45fc9fda20ee1c3ca070cddeANALYSIS DATE: 2023-01-08T11:40:46ZTTPS: T1053, T1005, T1081, T1060,...

Malware Analysis – lockergoga – 16bcc3b7f32c41e7c7222bf37fe39fe6

January 8, 2023

Score: 10 MALWARE FAMILY: lockergogaTAGS:family:lockergoga, banker, ransomware, trojanMD5: 16bcc3b7f32c41e7c7222bf37fe39fe6SHA1: a25bc5442c86bdeb0dec6583f0e80e241745fb73ANALYSIS DATE: 2023-01-08T10:37:02ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Daily Vulnerability Trends: Sun Jan 08 2023

January 8, 2023

Daily Vulnerability Trends (sourced from VulnMon) CVE NAMECVE DescriptionCVE-2020-28362Go before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service.CVE-2022-43931Out-of-bounds write...

LockBit 3.0 Ransomware Victim: juarez[.]gob[.]mx

January 7, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

LockBit 3.0 Ransomware Victim: 100x100banco[.]com

January 7, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

LockBit 3.0 Ransomware Victim: takamiya[.]co

January 7, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Vice Society Ransomware Victim: City Lit

January 7, 2023

Vice Society Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Vice Society Ransomware Victim: Swift Academies

January 7, 2023

Vice Society Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Vice Society Ransomware Victim: Duty Free Philippines

January 7, 2023

Vice Society Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

REST-Attacker – Designed As A Proof-Of-Concept For The Feasibility Of Testing Generic Real-World REST Implementations

January 7, 2023

REST-Attacker is an automated penetration testing framework for APIs following the REST architecture style. The tool's focus is on streamlining...

Cobalt Stike Beacon Detected – 216[.]83[.]45[.]202:443

January 7, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 37[.]220[.]87[.]12:80

January 7, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 195[.]178[.]120[.]143:5000

January 7, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 162[.]33[.]177[.]42:443

January 7, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – lockbit – 2c0eeb266061631845a9e21156801afd

January 7, 2023

Score: 10 MALWARE FAMILY: lockbitTAGS:family:lockbit, ransomwareMD5: 2c0eeb266061631845a9e21156801afdSHA1: e112623223602cbcdd95268121c9ea332ba5983eANALYSIS DATE: 2023-01-07T09:04:11ZTTPS: T1491, T1112, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – lockbit – ebe673b2ee28dd65565f2f389279ac47

January 7, 2023

Score: 10 MALWARE FAMILY: lockbitTAGS:family:lockbit, evasion, persistence, ransomwareMD5: ebe673b2ee28dd65565f2f389279ac47SHA1: bcebe09c61d3e6c47aefcb6bca0882752e0053a9ANALYSIS DATE: 2023-01-07T09:03:51ZTTPS: T1490, T1059, T1107, T1060, T1112, T1082, T1018, T1491...

Malware Analysis – smokeloader – 721848630792cc8d766f7a66b7dff04e

January 7, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 721848630792cc8d766f7a66b7dff04eSHA1: b9edbbf6d8ed9aa909583d5cfeb5ccafb8fefd49ANALYSIS DATE: 2023-01-07T09:06:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

OSINT

Malware Analysis – djvu – fe53c14f50ee7a0582d62715fd824056

Malware Analysis – djvu – c4dd2d3cd811e87ae1ceaa1b9718f4a1

Malware Analysis – – 326c4f6e417c419eddf40f8d1035e046

Malware Analysis – djvu – 486033dcb4db27a1157bc1531dfb6fa7

Brute Ratel C4 Detected – 18[.]180[.]186[.]166:80

Malware Analysis – ransomware – 31656fb93e948d7c349457d7f5c6dfec

Malware Analysis – ransomware – 59631f469b3a3781d8bcf3174e91d3cc

Malware Analysis – djvu – 4e842f7e1ac9182d03f7234b0700656d

Malware Analysis – lockergoga – 16bcc3b7f32c41e7c7222bf37fe39fe6

Daily Vulnerability Trends: Sun Jan 08 2023

LockBit 3.0 Ransomware Victim: juarez[.]gob[.]mx

LockBit 3.0 Ransomware Victim: 100x100banco[.]com

LockBit 3.0 Ransomware Victim: takamiya[.]co

Vice Society Ransomware Victim: City Lit

Vice Society Ransomware Victim: Swift Academies

Vice Society Ransomware Victim: Duty Free Philippines

REST-Attacker – Designed As A Proof-Of-Concept For The Feasibility Of Testing Generic Real-World REST Implementations

Cobalt Stike Beacon Detected – 216[.]83[.]45[.]202:443

Cobalt Stike Beacon Detected – 37[.]220[.]87[.]12:80

Cobalt Stike Beacon Detected – 195[.]178[.]120[.]143:5000

Cobalt Stike Beacon Detected – 162[.]33[.]177[.]42:443

Malware Analysis – lockbit – 2c0eeb266061631845a9e21156801afd

Malware Analysis – lockbit – ebe673b2ee28dd65565f2f389279ac47

Malware Analysis – smokeloader – 721848630792cc8d766f7a66b7dff04e

Microsoft Dangles Extended Windows 10 Support In Exchange For Reward Points

What If Microsoft Just Turned You Off? Security Pro Counts The Cost Ofdependency

Psylo Browser Tries To Obscure Digital Fingerprints By Giving Every Tab Its Ownip Address

French City Of Lyon Ditching Microsoft For Open Source Office And Collab Tools

Tesla Robotaxi Videos Show Elon’s Way Behind Waymo

You may have missed