OSINT

Malware Analysis – djvu – 18a90c9b87ee69d9ec981e6a6fef24d3

February 7, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 18a90c9b87ee69d9ec981e6a6fef24d3SHA1: 79d84c4730aafc64a9788f63daa0c63e06f22160ANALYSIS DATE: 2023-02-07T10:44:48ZTTPS: T1060, T1112, T1012, T1082,...

db3e02ab722873b0378b0d0ba9b9ec398ebc53e7937651bd54a40e4348730fb6

Heap_Detective – The Simple Way To Detect Heap Memory Pitfalls In C++ And C

February 7, 2023

This tool uses the taint analysis technique for static analysis and aims to identify points of heap memory usage vulnerabilities...

Daily Vulnerability Trends: Tue Feb 07 2023

February 7, 2023

Daily Vulnerability Trends (sourced from VulnMon) CVE NAMECVE DescriptionCVE-2021-27365An issue was discovered in the Linux kernel through 5.11.3. Certain iSCSI...

LockBit 3.0 Ransomware Victim: royalmailgroup[.]com

February 7, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Malware Analysis – smokeloader – 1c176d9d7cd461e38da54137fcbd1b5c

February 7, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 1c176d9d7cd461e38da54137fcbd1b5cSHA1: 4994a9c806485bdc7149782de04b2f524ff328fbANALYSIS DATE: 2023-02-07T03:05:48ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – amadey – e69c2d0c4452da5c0558107642430855

February 7, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:laplas, family:smokeloader, family:vidar, botnet:19, backdoor, clipper, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: e69c2d0c4452da5c0558107642430855SHA1:...

Malware Analysis – djvu – bb3ab1eefcaf81e64610d3a0c62cd760

February 7, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: bb3ab1eefcaf81e64610d3a0c62cd760SHA1: 59a0c4bfd9637e9185d7490fb0626ae818db30a4ANALYSIS DATE: 2023-02-07T05:49:45ZTTPS: T1053, T1012, T1082, T1060,...

Malware Analysis – play – 223eff1610b432a1f1aa06c60bd7b9a6

February 7, 2023

Score: 10 MALWARE FAMILY: playTAGS:family:play, ransomware, spyware, stealerMD5: 223eff1610b432a1f1aa06c60bd7b9a6SHA1: 14177730443c65aefeeda3162b324fdedf9cf9e0ANALYSIS DATE: 2023-02-07T04:27:17ZTTPS: T1012, T1120, T1082, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – smokeloader – b0c85396bd605ee72398773f1bca2015

February 7, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: b0c85396bd605ee72398773f1bca2015SHA1: 6d09ae234c43abe8666ac87d7426eb9cccca10ffANALYSIS DATE: 2023-02-07T04:34:56ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 7062f3341be62a7e6590f1afba296c54

February 7, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 7062f3341be62a7e6590f1afba296c54SHA1: 3bfb73d4f3ceecd97a047aaa294bdbe6bd415c1bANALYSIS DATE: 2023-02-07T05:33:28ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

LimeVPN – 23,348 breached accounts

February 7, 2023

HIBP In October 2020, the VPN provider LimeVPN suffered a data breach that exposed the personal information of tens of...

Cobalt Stike Beacon Detected – 81[.]161[.]229[.]119:10443

February 7, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 91[.]215[.]85[.]176:83

February 7, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 20[.]211[.]120[.]220:80

February 7, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 84[.]32[.]131[.]91:8080

February 7, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...