OSINT

Malware Analysis – djvu – b4fb108e628474068b70b975ee54817f

January 14, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: b4fb108e628474068b70b975ee54817fSHA1: 05a0863ba7cb981d91807961c1dad86887d8867dANALYSIS DATE: 2023-01-14T03:25:23ZTTPS: T1222, T1012, T1053, T1082,...

Malware Analysis – revengerat – 19c677bb8cda5703f42c143bb4251e6a

January 14, 2023

Score: 10 MALWARE FAMILY: revengeratTAGS:family:revengerat, family:xmrig, botnet:guest, discovery, evasion, miner, persistence, ransomware, stealer, trojanMD5: 19c677bb8cda5703f42c143bb4251e6aSHA1: ad85336a7304a4e58b2a4f5c40b02f578aa00923ANALYSIS DATE: 2023-01-14T05:20:28ZTTPS: T1082, T1112,...

Malware Analysis – djvu – dd389d4033a9f3b4b038bb25d124cb46

January 14, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:rhadamanthys, family:smokeloader, family:vidar, botnet:19, backdoor, discovery, persistence, ransomware, spyware, stealer, trojanMD5: dd389d4033a9f3b4b038bb25d124cb46SHA1: 7ed92f2d935aaf50af22423d774ebe0b8613c8f2ANALYSIS DATE: 2023-01-14T05:03:02ZTTPS:...

Malware Analysis – njrat – 596e8b4c50fa6579495c12756c3b5f14

January 14, 2023

Score: 10 MALWARE FAMILY: njratTAGS:family:njrat, botnet:hacked, discovery, evasion, persistence, ransomware, trojanMD5: 596e8b4c50fa6579495c12756c3b5f14SHA1: de331021e0b2f8fcb792db5cef59472c1964b3bfANALYSIS DATE: 2023-01-14T04:54:53ZTTPS: T1112, T1042, T1060, T1012, T1031,...

Malware Analysis – djvu – 45b0220aa7be949fcf01f1c68daedbb6

January 14, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 45b0220aa7be949fcf01f1c68daedbb6SHA1: e743588797a064205c212beef52235d4224231e2ANALYSIS DATE: 2023-01-14T05:07:02ZTTPS: T1012, T1082, T1060, T1112,...

OSINT

Malware Analysis – djvu – b4fb108e628474068b70b975ee54817f

Malware Analysis – revengerat – 19c677bb8cda5703f42c143bb4251e6a

Malware Analysis – djvu – dd389d4033a9f3b4b038bb25d124cb46

Malware Analysis – njrat – 596e8b4c50fa6579495c12756c3b5f14

Malware Analysis – djvu – 45b0220aa7be949fcf01f1c68daedbb6

European police takes down call centers behind cryptocurrency scams

MetaMask warns of new ‘Address Poisoning’ cryptocurrency scam

RAT malware campaign tries to evade detection using polyglot files

Scattered Spider hackers use old Intel driver to bypass security

Cisco warns of auth bypass bug with public exploit in EoL routers

Royal Mail cyberattack linked to LockBit ransomware operation

PoC exploits released for critical bugs in popular WordPress plugins

New Dark Pink APT group targets govt and military with custom malware

NortonLifeLock warns that hackers breached Password Manager accounts

Fortinet: Govt networks targeted with now-patched SSL-VPN zero-day

Microsoft: Cuba ransomware hacking Exchange servers via OWASSRF flaw

Microsoft: Exchange Server 2013 reaches end of support in 90 days

The Week in Ransomware – January 13th 2023 – LockBit in the spotlight

Vice Society ransomware claims attack on Australian firefighting service

Royal Mail halts international services after cyberattack

Twitter claims leaked data of 200M users not stolen from its systems

Android TV box on Amazon came pre-installed with malware

Gootkit malware abuses VLC to infect healthcare orgs with Cobalt Strike

Hackers exploit Control Web Panel flaw to open reverse shells

Cobalt Strike Beacon Detected – 121[.]43[.]37[.]134:4434

Cobalt Strike Beacon Detected – 119[.]29[.]231[.]118:443

Cobalt Strike Beacon Detected – 39[.]101[.]74[.]162:443

Cobalt Strike Beacon Detected – 8[.]218[.]112[.]112:8880

Cobalt Strike Beacon Detected – 47[.]109[.]48[.]57:443

You may have missed