OSINT

Malware Analysis – amadey – 404a7c5c03a53b10f0eed922316e6681

March 30, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:redline, family:smokeloader, family:socelars, family:vidar, botnet:5df88deb5dde677ba658b77ad5f60248, botnet:frtrack, botnet:pub1, backdoor, discovery, evasion, infostealer, persistence, ransomware, spyware,...

Malware Analysis – djvu – 1413865f4a87f28b94e00396de7459d2

March 30, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5df88deb5dde677ba658b77ad5f60248, discovery, persistence, ransomware, spyware, stealerMD5: 1413865f4a87f28b94e00396de7459d2SHA1: 549c641578f2dd01c2b257fe4cb5625977da8574ANALYSIS DATE: 2023-03-30T15:27:08ZTTPS: T1012, T1082, T1005, T1081,...

Malware Analysis – ransomware – 53586770fa7c3483b5b6b626ad7130e8

March 30, 2023

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 53586770fa7c3483b5b6b626ad7130e8SHA1: 36e3f72106c29c83a87ad69d58375038d0b6a326ANALYSIS DATE: 2023-03-30T16:24:25ZTTPS: T1082, T1012, T1120, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ransomware – b673d92b77489d12779dc1fb5e8f6fdd

March 30, 2023

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomware, upxMD5: b673d92b77489d12779dc1fb5e8f6fddSHA1: 1921915dc4400a4aa70ca68a6ba1fd99106a336fANALYSIS DATE: 2023-03-30T15:57:56ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – djvu – d2a9396b590d7fe9e348a090e03d9d3d

March 30, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5df88deb5dde677ba658b77ad5f60248, discovery, persistence, ransomware, spyware, stealerMD5: d2a9396b590d7fe9e348a090e03d9d3dSHA1: 90d5a76ed3a67d0565a7748a1d5f9aedb70b063cANALYSIS DATE: 2023-03-30T16:56:44ZTTPS: T1012, T1082, T1222, T1053,...

Malware Analysis – amadey – 474154bf80eeca7d3be7614bea80b4b8

March 30, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:redline, family:smokeloader, family:socelars, family:vidar, botnet:5df88deb5dde677ba658b77ad5f60248, botnet:pub1, backdoor, discovery, evasion, infostealer, persistence, ransomware, spyware, stealer,...

Malware Analysis – djvu – 62bc08785fba8084b146de9cb4aa493a

March 30, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5df88deb5dde677ba658b77ad5f60248, discovery, persistence, ransomware, spyware, stealerMD5: 62bc08785fba8084b146de9cb4aa493aSHA1: cbf7d9ea2adc622690b8e1af17351b91e40390ddANALYSIS DATE: 2023-03-30T17:31:32ZTTPS: T1012, T1082, T1053, T1005,...

Malware Analysis – amadey – 035d846ddc6a64f19b463d2ddf2bddaa

March 30, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, botnet:pub1, backdoor, discovery, persistence, ransomware, trojanMD5: 035d846ddc6a64f19b463d2ddf2bddaaSHA1: 56d52240fac546cadf5fc243ee3b938fbdab679eANALYSIS DATE: 2023-03-30T17:35:33ZTTPS: T1012, T1120, T1082,...

Malware Analysis – djvu – 42c20aa157f4523e908b8d6f9755e5cc

March 30, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5df88deb5dde677ba658b77ad5f60248, discovery, persistence, ransomware, spyware, stealerMD5: 42c20aa157f4523e908b8d6f9755e5ccSHA1: b7e2115f166d96b382dd369544db23b3aeea886cANALYSIS DATE: 2023-03-30T17:54:14ZTTPS: T1222, T1082, T1053, T1005,...

Malware Analysis – djvu – 06401e594be2ba59fe355f2c669ced41

March 30, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5df88deb5dde677ba658b77ad5f60248, discovery, persistence, ransomware, spyware, stealerMD5: 06401e594be2ba59fe355f2c669ced41SHA1: afab8237ea21303da96c8940b6add1df40c7602bANALYSIS DATE: 2023-03-30T17:56:22ZTTPS: T1053, T1005, T1081, T1012,...

OSINT

Malware Analysis – amadey – 404a7c5c03a53b10f0eed922316e6681

Malware Analysis – djvu – 1413865f4a87f28b94e00396de7459d2

Malware Analysis – ransomware – 53586770fa7c3483b5b6b626ad7130e8

Malware Analysis – ransomware – b673d92b77489d12779dc1fb5e8f6fdd

Malware Analysis – djvu – d2a9396b590d7fe9e348a090e03d9d3d

Malware Analysis – amadey – 474154bf80eeca7d3be7614bea80b4b8

Malware Analysis – djvu – 62bc08785fba8084b146de9cb4aa493a

Malware Analysis – amadey – 035d846ddc6a64f19b463d2ddf2bddaa

Malware Analysis – djvu – 42c20aa157f4523e908b8d6f9755e5cc

Malware Analysis – djvu – 06401e594be2ba59fe355f2c669ced41

Chinese RedGolf Group Targeting Windows and Linux Systems with KEYPLUG Backdoor

New Wi-Fi Protocol Security Flaw Affecting Linux, Android and iOS Devices

AlienFox Malware Targets API Keys and Secrets from AWS, Google, and Microsoft Cloud Services

Cyberstorage: Leveraging the Multi-Cloud to Combat Data Exfiltration

3CX Desktop App Supply Chain Attack Leaves Millions at Risk – Urgent Update on the Way!

LockBit 3.0 Ransomware Victim: tharworx[.]com

LockBit 3.0 Ransomware Victim: overseas-ast[.]com

LockBit 3.0 Ransomware Victim: hammondlumber[.]com

3CX App Supply Chain Attack Leaves Millions at Risk – Urgent Update on the Way!

RansomHouse Ransomware Victim: Hospital Clinic de Barcelona

Daily Vulnerability Trends: Thu Mar 30 2023

Karakurt Ransomware Victim: FINANCE INSTITUTION AUCTION

Google finds more Android, iOS zero-days used to install spyware

QNAP warns customers to patch Linux Sudo flaw in NAS devices

[ANUBIS] – Ransomware Victim: Dermatology Associates

CVE Alert: CVE-2025-11956 – Proliz Software Ltd. Co. – OBS (Student Affairs Information System)

[AKIRA] – Ransomware Victim: E-First Aid Supplies

[NIGHTSPIRE] – Ransomware Victim: vratatech

[NIGHTSPIRE] – Ransomware Victim: speedmais

You may have missed