OSINT

Malware Analysis – djvu – f65c1bc6f57a0964c1cb68ef89ad44c6

March 9, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: f65c1bc6f57a0964c1cb68ef89ad44c6SHA1: d46497b7e0200fc399e964339b0a7805f2551ab4ANALYSIS DATE: 2023-03-09T17:34:46ZTTPS: T1082, T1005, T1081, T1012,...

Malware Analysis – amadey – 7b8fa1719da67f606547a11c93356b2e

March 9, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:laplas, family:pseudomanuscrypt, family:smokeloader, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, botnet:pub1, botnet:sprg, backdoor, clipper, discovery, evasion, loader, persistence, ransomware,...

Malware Analysis – djvu – 6bdc4ff9c91e4846d8924c28d7e909da

March 9, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 6bdc4ff9c91e4846d8924c28d7e909daSHA1: c504e74669f65893874e77d70d78c01526694d54ANALYSIS DATE: 2023-03-09T17:47:29ZTTPS: T1222, T1060, T1112, T1005,...

Malware Analysis – djvu – 58556e2d969b55db9c1731ee540cb31f

March 9, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 58556e2d969b55db9c1731ee540cb31fSHA1: e36eafc1c83133c0b4f322017b1be84e7c11eb9aANALYSIS DATE: 2023-03-09T17:38:47ZTTPS: T1060, T1112, T1012, T1005,...

OSINT

Malware Analysis – djvu – f65c1bc6f57a0964c1cb68ef89ad44c6

Malware Analysis – amadey – 7b8fa1719da67f606547a11c93356b2e

Malware Analysis – djvu – 6bdc4ff9c91e4846d8924c28d7e909da

Malware Analysis – djvu – 58556e2d969b55db9c1731ee540cb31f

IceFire Ransomware Exploits IBM Aspera Faspex to Attack Linux-Powered Enterprise Networks

Hackers Exploiting Remote Desktop Software Flaws to Deploy PlugX Malware

Acer confirms breach after 160GB of data for sale on hacking forum

Android March 2023 update fixes two critical code execution flaws

DuckDuckGo launches AI-powered search query answering tool

Emotet malware attacks return after three-month break

Hospital Clínic de Barcelona severely impacted by ransomware attack

Pen Testers using Vulnerability Scanners – Closing the Gap

New malware variant has “radio silence” mode to evade detection

Fortinet warns of new critical unauthenticated RCE vulnerability

Veeam fixes bug that lets hackers breach backup infrastructure

Ransomware gang posts video of data stolen from Minneapolis schools

Bitwarden flaw can let hackers steal passwords using iframes

FBI investigates data breach impacting U.S. House members and staff

Does Your Help Desk Know Who’s Calling?

Iranian Hackers Target Women Involved in Human Rights and Middle East Politics

Cobalt Stike Beacon Detected – 216[.]83[.]38[.]235:80

Cobalt Stike Beacon Detected – 119[.]91[.]141[.]173:8001

Cobalt Stike Beacon Detected – 39[.]98[.]167[.]247:80

Cobalt Stike Beacon Detected – 179[.]43[.]162[.]6:10443

[NIGHTSPIRE] – Ransomware Victim: Enem Nostrum Remedies Pvt[.] Ltd

[THEGENTLEMEN] – Ransomware Victim: St Stephen’s International

[QILIN] – Ransomware Victim: Mango’s Tropical Cafe

Cobalt Strike Beacon Detected – 121[.]41[.]167[.]80:80

Cobalt Strike Beacon Detected – 38[.]190[.]224[.]63:80

You may have missed