OSINT

Malware Analysis – evasion – 807740e3472484d420667e6c0fcfb515

April 1, 2023

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 807740e3472484d420667e6c0fcfb515SHA1: 9df328dee54e0865376efc4ab90b7cd419c1784cANALYSIS DATE: 2023-04-01T16:28:46ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – brand:microsoft – 0a1d0cb632a7f7cde057b8c11c1248a2

April 1, 2023

Score: 10 MALWARE FAMILY: brand:microsoftTAGS:brand:microsoft, evasion, persistence, phishing, ransomware, trojanMD5: 0a1d0cb632a7f7cde057b8c11c1248a2SHA1: 651caf0aa2637d0b56411f1679eb68f43a7b00b2ANALYSIS DATE: 2023-04-01T16:19:08ZTTPS: T1012, T1120, T1082, T1088, T1089, T1112,...

Malware Analysis – evasion – 9871e57a53d3a334aca306c4321a7d07

April 1, 2023

Score: 8 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 9871e57a53d3a334aca306c4321a7d07SHA1: 5cc48c673d0205a1335f28e687d4b66b5b7d8b97ANALYSIS DATE: 2023-04-01T16:31:59ZTTPS: T1012, T1120, T1082, T1491, T1112 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – – 7866d944436d7983d61024fbbf38256b

April 1, 2023

Score: 3 MALWARE FAMILY: TAGS:MD5: 7866d944436d7983d61024fbbf38256bSHA1: 7e79db996465dfe542fc2d16f14fb8e92da7b75dANALYSIS DATE: 2023-04-01T16:58:41ZTTPS: T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – evasion – 660708319a500f1865fa9d2fadfa712d

April 1, 2023

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 660708319a500f1865fa9d2fadfa712dSHA1: b2ae3aef17095ab26410e0f1792a379a4a2966f8ANALYSIS DATE: 2023-04-01T16:52:30ZTTPS: T1004, T1112, T1082, T1491, T1088, T1089 ScoreMeaningExample10Known badA...

Malware Analysis – brand:pubg – f7b8cff13de0de32fa0f438c3aab7eae

April 1, 2023

Score: 10 MALWARE FAMILY: brand:pubgTAGS:brand:pubg, evasion, phishing, ransomwareMD5: f7b8cff13de0de32fa0f438c3aab7eaeSHA1: a6c449f9a3e1bce13c54159e9575aa66c4462b4eANALYSIS DATE: 2023-04-01T16:46:16ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – djvu – 61804db8a814f17f5cdc8243e6c609cf

April 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5df88deb5dde677ba658b77ad5f60248, discovery, persistence, ransomware, spyware, stealerMD5: 61804db8a814f17f5cdc8243e6c609cfSHA1: 815b35ca9dba75b0f8906b8e838599c757c3ab77ANALYSIS DATE: 2023-04-01T16:54:11ZTTPS: T1082, T1012, T1053, T1005,...

Malware Analysis – evasion – e13f0908d3f295ba5c61081ca835734f

April 1, 2023

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomwareMD5: e13f0908d3f295ba5c61081ca835734fSHA1: fe7972cbfde692e199017f39870032ecbe464138ANALYSIS DATE: 2023-04-01T17:01:08ZTTPS: T1491, T1112, T1012, T1120, T1082, T1060, T1158 ScoreMeaningExample10Known badA...

Malware Analysis – evasion – 26533eb236f3fb7aeef82f4920fd7af4

April 1, 2023

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 26533eb236f3fb7aeef82f4920fd7af4SHA1: 9af1504717b3a2f80f399407c660961a55bf1870ANALYSIS DATE: 2023-04-01T17:56:12ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – amadey – b27b89b27b109e38cbf776096847b093

April 1, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:vidar, botnet:5df88deb5dde677ba658b77ad5f60248, botnet:pub1, backdoor, discovery, evasion, persistence, ransomware, spyware, stealer, trojanMD5: b27b89b27b109e38cbf776096847b093SHA1: d22ae194c0244a5791171972b4e17e03b65a74e2ANALYSIS...

Malware Analysis – djvu – 4dc20f9e8a797dac6a43de2b18975aef

April 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5df88deb5dde677ba658b77ad5f60248, discovery, persistence, ransomware, spyware, stealerMD5: 4dc20f9e8a797dac6a43de2b18975aefSHA1: 0bc513fa63bb285ecca914a144d40d27d3e485deANALYSIS DATE: 2023-04-01T17:34:23ZTTPS: T1005, T1081, T1012, T1082,...

OSINT

Malware Analysis – evasion – 807740e3472484d420667e6c0fcfb515

Malware Analysis – brand:microsoft – 0a1d0cb632a7f7cde057b8c11c1248a2

Malware Analysis – evasion – 9871e57a53d3a334aca306c4321a7d07

Malware Analysis – – 7866d944436d7983d61024fbbf38256b

Malware Analysis – evasion – 660708319a500f1865fa9d2fadfa712d

Malware Analysis – brand:pubg – f7b8cff13de0de32fa0f438c3aab7eae

Malware Analysis – djvu – 61804db8a814f17f5cdc8243e6c609cf

Malware Analysis – evasion – e13f0908d3f295ba5c61081ca835734f

Malware Analysis – evasion – 26533eb236f3fb7aeef82f4920fd7af4

Malware Analysis – amadey – b27b89b27b109e38cbf776096847b093

Malware Analysis – djvu – 4dc20f9e8a797dac6a43de2b18975aef

Microsoft Fixes New Azure AD Vulnerability Impacting Bing Search and Major Apps

LockBit 3.0 Ransomware Victim: semsinc[.]net

LockBit 3.0 Ransomware Victim: etkinllc[.]com

LockBit 3.0 Ransomware Victim: ativy[.]com

Hackers Exploiting WordPress Elementor Pro Vulnerability: Millions of Sites at Risk!

Cacti, Realtek, and IBM Aspera Faspex Vulnerabilities Under Active Exploitation

Daily Vulnerability Trends: Sat Apr 01 2023

Karakurt Ransomware Victim: OptionMetrics

Consumer lender TMX discloses data breach impacting 4.8 million people

Hackers exploit bug in Elementor Pro WordPress plugin with 11M installs

15 million public-facing services vulnerable to CISA KEV flaws

Leaked Reality – 114,907 breached accounts

Sundry Files – 274,461 breached accounts

[ANUBIS] – Ransomware Victim: Dermatology Associates

CVE Alert: CVE-2025-11956 – Proliz Software Ltd. Co. – OBS (Student Affairs Information System)

[AKIRA] – Ransomware Victim: E-First Aid Supplies

[NIGHTSPIRE] – Ransomware Victim: vratatech

[NIGHTSPIRE] – Ransomware Victim: speedmais

You may have missed