OSINT

Malware Analysis – amadey – 9a2a7a1bf5fce12479673c598886e0eb

March 11, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:laplas, family:pseudomanuscrypt, family:redline, family:smokeloader, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, botnet:pub1, botnet:sprg, backdoor, clipper, discovery, infostealer, loader, persistence,...

Malware Analysis – djvu – 8525f75b65ad910ccd74c1a08d70efa8

March 11, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 8525f75b65ad910ccd74c1a08d70efa8SHA1: c230ffced0fe8e2122ed655b7331ad5e692b1490ANALYSIS DATE: 2023-03-11T09:24:10ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – amadey – fda35e2d619136257720ce6084fb58cd

March 11, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:laplas, family:smokeloader, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, botnet:pub1, botnet:sprg, backdoor, clipper, discovery, persistence, ransomware, spyware, stealer, trojanMD5:...

Malware Analysis – smokeloader – 5bf3877b8fd815085586d2de55398d00

March 11, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 5bf3877b8fd815085586d2de55398d00SHA1: c542cf69aee77009d8a4727e423a88900726979fANALYSIS DATE: 2023-03-11T11:01:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – evasion – 4a84df07dff0c3424bc90ce8d0938b06

March 11, 2023

Score: 5 MALWARE FAMILY: evasionTAGS:evasionMD5: 4a84df07dff0c3424bc90ce8d0938b06SHA1: b883da20bd85c49972b46c50db40589767dd201cANALYSIS DATE: 2023-03-11T10:58:22ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – e8dcd90463339d7a2c9f28cdea5fa8df

March 11, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: e8dcd90463339d7a2c9f28cdea5fa8dfSHA1: 215c67423859b770f595bb6b9ec46f392f8de7c0ANALYSIS DATE: 2023-03-11T10:33:59ZTTPS: T1082, T1012, T1005, T1081,...

Malware Analysis – djvu – cd9756f38524bab1b74b7c39db74c4b9

March 11, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: cd9756f38524bab1b74b7c39db74c4b9SHA1: 0a128916538431c21b9413f98119082bf21890aaANALYSIS DATE: 2023-03-11T11:02:20ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – djvu – 8e335bde5ed8b1c9f9f459074421901b

March 11, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 8e335bde5ed8b1c9f9f459074421901bSHA1: 1a6e47d0857208e0570b63d09532dde77494a816ANALYSIS DATE: 2023-03-11T11:11:02ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – djvu – 8e72f80f57f0a2061ed8707b4ae8bd0b

March 11, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 8e72f80f57f0a2061ed8707b4ae8bd0bSHA1: 067df8847a06e814faa9709ff132934f1bb954e5ANALYSIS DATE: 2023-03-11T11:11:02ZTTPS: T1005, T1081, T1060, T1112,...

Malware Analysis – djvu – da75c7fe6dca73c9e3df80dacf68d82e

March 11, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: da75c7fe6dca73c9e3df80dacf68d82eSHA1: 191d3ad1944f32f6beeb6194f006b3f21d0b5615ANALYSIS DATE: 2023-03-11T11:11:02ZTTPS: T1082, T1130, T1112, T1060,...

Malware Analysis – smokeloader – ac9b8ee2453bae125e950f895d79846d

March 11, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: ac9b8ee2453bae125e950f895d79846dSHA1: 70ab4b5ef6e73202b0cb9655f020682af2b2be9dANALYSIS DATE: 2023-03-11T11:05:15ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

RansomHouse Ransomware Victim: Delaware Life Insurance Company

March 11, 2023

RansomHouse Logo NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Daily Vulnerability Trends: Sat Mar 11 2023

March 11, 2023

Daily Vulnerability Trends (sourced from VulnMon) CVE NAMECVE DescriptionCVE-2023-21716Microsoft Word Remote Code Execution VulnerabilityCVE-2023-25610 No description provided CVE-2023-27532Vulnerability in Veeam...

Vice Society Ransomware Victim: Berkeley County Schools

March 11, 2023

Vice Society Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Malware Analysis – amadey – c561a34103a1003f3c6de1e2423ade7c

March 11, 2023

Malware Analysis – evasion – e2f5edd025b87d51036bb52654aedc08

March 11, 2023

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, ransomware, trojanMD5: e2f5edd025b87d51036bb52654aedc08SHA1: 64f3751d5dbbb85e4cbffa38bee8ce1ecaa1331cANALYSIS DATE: 2023-03-11T04:12:04ZTTPS: T1112, T1012, T1082, T1107, T1490, T1088, T1089 ScoreMeaningExample10Known badA...

Malware Analysis – neshta – 3db3ee8509e8ce9c12936a1d5b82cca1

March 11, 2023

Score: 10 MALWARE FAMILY: neshtaTAGS:family:neshta, family:ramnit, banker, persistence, ransomware, spyware, stealer, trojan, upx, wormMD5: 3db3ee8509e8ce9c12936a1d5b82cca1SHA1: a0d8b919d49d820b506864493b82fa78228afc3fANALYSIS DATE: 2023-03-11T04:17:03ZTTPS: T1112, T1005,...

Malware Analysis – – deebbea18401e8b5e83c410c6d3a8b4e

March 11, 2023

Score: 8 MALWARE FAMILY: TAGS:MD5: deebbea18401e8b5e83c410c6d3a8b4eSHA1: 96d81e77b6af8f54a5ac07b2c613a5655dd05353ANALYSIS DATE: 2023-03-11T04:18:05ZTTPS: T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – lockbit – 4fca4d754e6dda3c6d0a2e0c6ec70f20

March 11, 2023

Score: 10 MALWARE FAMILY: lockbitTAGS:family:lockbit, ransomwareMD5: 4fca4d754e6dda3c6d0a2e0c6ec70f20SHA1: 3f6179eccd1f79b61db349186106cbc58bb6ba20ANALYSIS DATE: 2023-03-11T04:15:05ZTTPS: T1491, T1112, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – chaos – 2430019335d88321467e82ab8f51546b

March 11, 2023

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, evasion, ransomware, spyware, stealerMD5: 2430019335d88321467e82ab8f51546bSHA1: 7d233a893492e0efd4d7e919941325b5d44abeb7ANALYSIS DATE: 2023-03-11T04:22:04ZTTPS: T1490, T1059, T1107, T1082, T1012, T1005, T1081...

Malware Analysis – dharma – 2bbb2d9be1a993a8dfef0dd719c589a0

March 11, 2023

Score: 10 MALWARE FAMILY: dharmaTAGS:family:dharma, persistence, ransomware, spyware, stealerMD5: 2bbb2d9be1a993a8dfef0dd719c589a0SHA1: c03d6401902a7b07ac88dbde7f93c6cc74e57221ANALYSIS DATE: 2023-03-11T04:46:42ZTTPS: T1005, T1081, T1107, T1490, T1060, T1112, T1082...

Malware Analysis – persistence – 0d730b155b46fe1ec3e4503ae55db4d0

March 11, 2023

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 0d730b155b46fe1ec3e4503ae55db4d0SHA1: b32739129fac8810ebc99cf12a45b8c2c2e17176ANALYSIS DATE: 2023-03-11T04:22:05ZTTPS: T1107, T1490, T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – evasion – b7e2303419be1561979a92cde8e16670

March 11, 2023

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, ransomware, trojanMD5: b7e2303419be1561979a92cde8e16670SHA1: 5d1ec037dcb468ba9b08f1293f1fb1ff62034a12ANALYSIS DATE: 2023-03-11T04:52:03ZTTPS: T1112, T1107, T1490, T1082, T1012, T1088, T1089 ScoreMeaningExample10Known badA...

Malware Analysis – medusalocker – 19ddac9782acd73f66c5fe040e86ddee

March 11, 2023

Score: 10 MALWARE FAMILY: medusalockerTAGS:family:medusalocker, evasion, ransomware, spyware, stealer, trojanMD5: 19ddac9782acd73f66c5fe040e86ddeeSHA1: 24ceba1e2951cde8e41939da21c6ba3030fc531dANALYSIS DATE: 2023-03-11T04:46:04ZTTPS: T1107, T1490, T1082, T1088, T1089, T1112,...

OSINT

Malware Analysis – amadey – 9a2a7a1bf5fce12479673c598886e0eb

Malware Analysis – djvu – 8525f75b65ad910ccd74c1a08d70efa8

Malware Analysis – amadey – fda35e2d619136257720ce6084fb58cd

Malware Analysis – smokeloader – 5bf3877b8fd815085586d2de55398d00

Malware Analysis – evasion – 4a84df07dff0c3424bc90ce8d0938b06

Malware Analysis – djvu – e8dcd90463339d7a2c9f28cdea5fa8df

Malware Analysis – djvu – cd9756f38524bab1b74b7c39db74c4b9

Malware Analysis – djvu – 8e335bde5ed8b1c9f9f459074421901b

Malware Analysis – djvu – 8e72f80f57f0a2061ed8707b4ae8bd0b

Malware Analysis – djvu – da75c7fe6dca73c9e3df80dacf68d82e

Malware Analysis – smokeloader – ac9b8ee2453bae125e950f895d79846d

RansomHouse Ransomware Victim: Delaware Life Insurance Company

Daily Vulnerability Trends: Sat Mar 11 2023

Vice Society Ransomware Victim: Berkeley County Schools

Malware Analysis – amadey – c561a34103a1003f3c6de1e2423ade7c

Malware Analysis – evasion – e2f5edd025b87d51036bb52654aedc08

Malware Analysis – neshta – 3db3ee8509e8ce9c12936a1d5b82cca1

Malware Analysis – – deebbea18401e8b5e83c410c6d3a8b4e

Malware Analysis – lockbit – 4fca4d754e6dda3c6d0a2e0c6ec70f20

Malware Analysis – chaos – 2430019335d88321467e82ab8f51546b

Malware Analysis – dharma – 2bbb2d9be1a993a8dfef0dd719c589a0

Malware Analysis – persistence – 0d730b155b46fe1ec3e4503ae55db4d0

Malware Analysis – evasion – b7e2303419be1561979a92cde8e16670

Malware Analysis – medusalocker – 19ddac9782acd73f66c5fe040e86ddee

Cobalt Strike Beacon Detected – 47[.]121[.]136[.]179:443

Cobalt Strike Beacon Detected – 112[.]125[.]88[.]176:443

Cobalt Strike Beacon Detected – 117[.]72[.]181[.]104:443

Cobalt Strike Beacon Detected – 47[.]96[.]13[.]97:443

Cobalt Strike Beacon Detected – 8[.]153[.]97[.]202:443

You may have missed