LockBit 3.0 Ransomware Victim: veolus[.]com
LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the...
OSINT
LockBit 3.0 Ransomware Victim: dof[.]ca[.]gov
LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...
Indian foreign ministry’s Global Pravasi Rishta portal leaks expat passport details
The Cybernews research team reported that India’s government platform Global Pravasi Rishta Portal was leaking sensitive user data. Original post...
Malware Analysis – djvu – a086c884d1dc2920e8a959fcb8457f93
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:1808, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: a086c884d1dc2920e8a959fcb8457f93SHA1: 8a3e9388794c8ba3fcfd43906ea7942673cf26b0ANALYSIS DATE:...
Malware Analysis – medusalocker – 8645a413332f840e925bac3cf19ceb57
Score: 10 MALWARE FAMILY: medusalockerTAGS:family:medusalocker, evasion, ransomware, spyware, stealer, trojanMD5: 8645a413332f840e925bac3cf19ceb57SHA1: 87ca0cd2e1c04c2437d302f2864d1e68ea991677ANALYSIS DATE: 2022-12-12T15:09:16ZTTPS: T1005, T1081, T1082, T1088, T1089, T1112,...
Malware Analysis – djvu – 182bfc9ec8306d1ca638b0b503e6a941
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 182bfc9ec8306d1ca638b0b503e6a941SHA1: 3c92e8ce9be9b144be327fd7c8dc5becf25ed136ANALYSIS DATE: 2022-12-12T15:22:23ZTTPS: T1222, T1005, T1081, T1012,...
Malware Analysis – smokeloader – 0453295e7a2cbdaaeeb55c35d79027c9
Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 0453295e7a2cbdaaeeb55c35d79027c9SHA1: 929e1d564f254ef3be6bc198db6baca7707fa67eANALYSIS DATE: 2022-12-12T17:05:45ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...
Malware Analysis – djvu – d39f81d9c3234aef7cd5d6bd996686f3
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: d39f81d9c3234aef7cd5d6bd996686f3SHA1: a35001f1dcefbebe6087cd08132c141f12eed152ANALYSIS DATE: 2022-12-12T16:22:53ZTTPS: T1222, T1053, T1012, T1060,...
Malware Analysis – djvu – 117665adcf6258541591a576ef8f1bb0
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:1808, botnet:517, backdoor, bootkit, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 117665adcf6258541591a576ef8f1bb0SHA1: b479d82bd0b2bf6f207de043aa394a15437d84baANALYSIS...
Malware Analysis – persistence – 842d42bb052a77759c8f55d46021b2e0
Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 842d42bb052a77759c8f55d46021b2e0SHA1: 497403d1ba51ce198a46221395daf240c206bb36ANALYSIS DATE: 2022-12-12T17:28:00ZTTPS: T1005, T1081, T1082, T1012, T1120, T1060, T1112 ScoreMeaningExample10Known...
Malware Analysis – djvu – 9746e931befe5203bf5508cfa8cd17d1
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:1808, backdoor, bootkit, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 9746e931befe5203bf5508cfa8cd17d1SHA1: 31835e5a238cd99e0fa36643077fd657bd48f8a1ANALYSIS DATE:...
Malware Analysis – djvu – b5690302c24d9b994a654ade98a39c88
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: b5690302c24d9b994a654ade98a39c88SHA1: 944f6ed97f130119dbc71158fd28fff3aa38832bANALYSIS DATE: 2022-12-12T17:20:54ZTTPS: T1005, T1081, T1060, T1112,...
Malware Analysis – smokeloader – 7ca4d4ca99e04052b638422677b7add0
Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 7ca4d4ca99e04052b638422677b7add0SHA1: fc4741e176b584dca91476331597a3c3d3369657ANALYSIS DATE: 2022-12-12T17:17:06ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...
Cryptomining campaign targets Linux systems with Go-based CHAOS Malware
Researchers spotted a cryptocurrency mining campaign targeting Linux users with Go-based CHAOS malware (Trojan.Linux.CHAOSRAT). In November 2022, Trend Micro researchers...
Evilnum group targets legal entities with a new Janicab variant
A hack-for-hire group dubbed Evilnum is targeting travel and financial entities with the new Janicab malware variant. Kaspersky researchers reported that...
CoinTracker – 1,557,153 breached accounts
In December 2022, the Crypto & NFT taxes service CoinTracker reported a data breach that impacted over 1.5M of their...
Legitify – Detect And Remediate Misconfigurations And Security Risks Across All Your GitHub Assets
Strengthen the security posture of your GitHub organization! Detect and remediate misconfigurations, security and compliance issues across all your GitHub...
Malware Analysis – smokeloader – 8641bde8beb42a6d0719cfd21848a563
Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 8641bde8beb42a6d0719cfd21848a563SHA1: fc61c5a119308cf3111cef1e7ae86b1b67720a26ANALYSIS DATE: 2022-12-12T09:24:00ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...
Malware Analysis – – 03cea7c49abe78863ae2644ac77c8efb
Score: 10 MALWARE FAMILY: TAGS:MD5: 03cea7c49abe78863ae2644ac77c8efbSHA1: 59edd4b3c523af71219fff0e15f8daa6ec11783dANALYSIS DATE: 2022-12-12T09:40:42ZTTPS: T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...
Malware Analysis – dcrat – 09ba7117d4348bb27231cdffcc5b75a1
Score: 10 MALWARE FAMILY: dcratTAGS:family:dcrat, family:djvu, family:raccoon, family:redline, family:smokeloader, family:vidar, botnet:517, botnet:ec7a54fb6492ff3a52d09504b8ecf082, botnet:mario23_10, backdoor, bootkit, collection, discovery, infostealer, persistence, ransomware,...
Malware Analysis – lockbit – df7a9a45a10c1942225eb9be257fb752
Score: 10 MALWARE FAMILY: lockbitTAGS:family:lockbit, discovery, evasion, persistence, ransomwareMD5: df7a9a45a10c1942225eb9be257fb752SHA1: 874630d6f4bdf9224125d35f30c48bc6d1da8ec1ANALYSIS DATE: 2022-12-12T09:41:20ZTTPS: T1490, T1046, T1107, T1060, T1112, T1082 ScoreMeaningExample10Known...
Malware Analysis – djvu – ffc82918bc86df0a1dd97029426cc893
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: ffc82918bc86df0a1dd97029426cc893SHA1: 6da97d9b204e1e3f610f45031c2e8fbd6d90df27ANALYSIS DATE: 2022-12-12T10:05:47ZTTPS: T1082, T1012, T1005, T1081,...
Cobalt Stike Beacon Detected – 176[.]113[.]115[.]124:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Malware Analysis – djvu – 0591ce7264414813b1128e2f19f8c701
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 0591ce7264414813b1128e2f19f8c701SHA1: d3af240c112ca5f42811e3dfa773d2eb0593fb8cANALYSIS DATE: 2022-12-12T10:27:33ZTTPS: T1060, T1112, T1012, T1082,...
