OSINT

Malware Analysis – evasion – a22787100dd832f4d9903c0f3ba68280

October 31, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealer, trojanMD5: a22787100dd832f4d9903c0f3ba68280SHA1: 627c7dcf888f5f8be877f34b9f253263bd816910ANALYSIS DATE: 2022-10-30T22:32:24ZTTPS: T1088, T1089, T1112, T1082, T1005, T1081,...

Malware Analysis – octo – fe8c5119c2e887e22028919ce65d5fc2

October 31, 2022

Score: 10 MALWARE FAMILY: octoTAGS:family:octo, banker, evasion, infostealer, ransomware, rat, trojanMD5: fe8c5119c2e887e22028919ce65d5fc2SHA1: c264d92e2ef991dad17896589b04344304b50fcfANALYSIS DATE: 2022-10-31T16:35:24ZTTPS: ScoreMeaningExample10Known badA malware family was...

Malware Analysis – smokeloader – 228c8eb91f844d89235c7bc80ad57a85

October 31, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 228c8eb91f844d89235c7bc80ad57a85SHA1: ad06384bedb70d6a90efe277bea1b440a6d76d83ANALYSIS DATE: 2022-10-31T15:34:53ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 144f0104997e1d57ec26ef608201819a

October 31, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 144f0104997e1d57ec26ef608201819aSHA1: 61e55c0094594a5714a945b07a4fc7a3baed3fffANALYSIS DATE: 2022-10-31T16:39:20ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – persistence – 7129291fc3d97377200f8a24ad06930a

October 31, 2022

Score: 8 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 7129291fc3d97377200f8a24ad06930aSHA1: 3f858d2837529e6c973ffa7c26c643e9748e7282ANALYSIS DATE: 2022-10-31T17:01:04ZTTPS: T1005, T1081, T1012, T1120, T1082, T1060, T1112 ScoreMeaningExample10Known...

Malware Analysis – smokeloader – 312b08af732069833358094647763db8

October 31, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 312b08af732069833358094647763db8SHA1: 6fba36cf4a478f5f6dddf3a335979947f85c313dANALYSIS DATE: 2022-10-31T17:26:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – f125e972f42ff30bf7df357311249aa3

October 31, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, botnet:mario23_10, botnet:slovarik1btc, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5: f125e972f42ff30bf7df357311249aa3SHA1: 9bd85179c11ea8cd9f0954a406c6cae4d9585106ANALYSIS...

Malware Analysis – spyware – 6468ee100d88c71d55dfdcf4e30f991e

October 31, 2022

Score: 7 MALWARE FAMILY: spywareTAGS:spyware, stealerMD5: 6468ee100d88c71d55dfdcf4e30f991eSHA1: 5c520d2d7dc4c9e5d536d3aff998185657d40ac8ANALYSIS DATE: 2022-10-31T17:01:04ZTTPS: T1012, T1120, T1082, T1005, T1081 ScoreMeaningExample10Known badA malware family was...

Wannacry, the hybrid malware that brought the world to its knees

October 31, 2022

Reflecting on the Wannacry ransomware attack, which is the lesson learnt e why most organizations are still ignoring it. In...

Snatch group claims to have hacked military provider HENSOLDT France

October 31, 2022

The Snatch ransomware group claims to have hacked HENSOLDT France, a company specializing in military and defense electronics. The Snatch ransomware group claims to...

GitHub flaw could have allowed attackers to takeover repositories of other users

October 31, 2022

A critical flaw in the cloud-based repository hosting service GitHub could’ve allowed attackers to takeover other repositories. The cloud-based repository...

LockBit 3.0 Ransomware Victim: seamlessglobalsolutions[.]com

October 31, 2022

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

LockBit 3.0 Ransomware Victim: close-upinternational[.]com[.]uy

October 31, 2022

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

LockBit 3.0 Ransomware Victim: sociedadbilbaina[.]com

October 31, 2022

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Reverse_SSH – SSH Based Reverse Shell

October 31, 2022

Want to use SSH for reverse shells? Now you can. Manage and connect to reverse shells with native SSH syntax...