OSINT

Malware Analysis – amadey – 9a5af4928a4f33ef78c8fd81fce3c32e

November 22, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 9a5af4928a4f33ef78c8fd81fce3c32eSHA1: 87e9a81f0b1511448a63fb85b33178abcf1eda94ANALYSIS DATE:...

Malware Analysis – amadey – 3576bb82ff373abea71ab629615ea0dd

November 22, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 3576bb82ff373abea71ab629615ea0ddSHA1: 0abff39efc0bedc3b9f14e7c19458a1d7e2edb7fANALYSIS DATE:...

Malware Analysis – djvu – b6accd3374b36d1de13f8b6356ce76b3

November 22, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: b6accd3374b36d1de13f8b6356ce76b3SHA1: e323bed9a9b20bfe994020986f847118dbef2954ANALYSIS DATE: 2022-11-22T16:20:54ZTTPS: T1012, T1053, T1005, T1081,...

Malware Analysis – djvu – 2fa9ba0a3450613283ede851f4fc435f

November 22, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 2fa9ba0a3450613283ede851f4fc435fSHA1: f5c0694ff42e8f3ab4e6ffe065463a89b9e90a8dANALYSIS DATE: 2022-11-22T15:28:00ZTTPS: T1060, T1112, T1082, T1053,...

Ransomware Victim: Naulty, Scaricamazza and McDevitt, LLC

November 22, 2022

Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the...

Royal Ransomware Victim: McAndrews Law Offices

November 22, 2022

RoyalRansomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the...

Ransomware Victim: Virginia Farm Bureau

November 22, 2022

Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the...

Ransomware Victim: Cristal Controls

November 22, 2022

Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the...

Ransomware Victim: M2S Electronics

November 22, 2022

Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the...

Malware Analysis – amadey – aa6cc702008759077d3c1822fd115671

November 22, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: aa6cc702008759077d3c1822fd115671SHA1: f2f8a60909161ed4d7c3f8aeb1e8e0da6c98dcecANALYSIS DATE:...

Malware Analysis – evasion – 1ee52d16fa78a820fc177cd84e58e984

November 22, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomwareMD5: 1ee52d16fa78a820fc177cd84e58e984SHA1: db6a84a4fcf2fd01c42b4f3058e741bdde05094dANALYSIS DATE: 2022-11-22T17:50:49ZTTPS: T1490, T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 2f86489c9f5566ec7bd0d3cad8483f29

November 22, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 2f86489c9f5566ec7bd0d3cad8483f29SHA1: 60feeb5a3cfbafd6c6923f71b90a5806acc22d46ANALYSIS DATE: 2022-11-22T17:21:32ZTTPS: T1222, T1082, T1012, T1005,...

Malware Analysis – evasion – 13ffce8662080c941703c4cf419d6344

November 22, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomwareMD5: 13ffce8662080c941703c4cf419d6344SHA1: 61fc1a13276febbdfe8ec708ebcd25aea28d5a9fANALYSIS DATE: 2022-11-22T17:55:21ZTTPS: T1490, T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Aurora Stealer Malware is becoming a prominent threat in the cybercrime ecosystem

November 22, 2022

Researchers warn of threat actors employing a new Go-based malware dubbed Aurora Stealer in attacks in the wild. Aurora Stealer...

Ransomware Victim: Pressco Technology

November 22, 2022

Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the...

Ransomware Victim: www[.]maynards[.]com

November 22, 2022

Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the...

Ransomware Victim: Ivaco Rolling Mills

November 22, 2022

Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the...

Ransomware Victim: Fishmans

November 22, 2022

Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the...

Ransomware Victim: Quantum Plastics

November 22, 2022

Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the...

Ransomware Victim: Ortmeier Maschinen- und Vorrichtungsbau GmbH & Co[.] KG

November 22, 2022

Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the...

Ransomware Victim: ALLIANCE AFRICAINE D’ASSURANCES

November 22, 2022

Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the...

Ransomware Victim: Silverstone

November 22, 2022

Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the...

Ransomware Victim: Sheehan Family Companies

November 22, 2022

Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the...

Ransomware Victim: Sohnen Enterprises

November 22, 2022

Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the...

OSINT

Malware Analysis – amadey – 9a5af4928a4f33ef78c8fd81fce3c32e

Malware Analysis – amadey – 3576bb82ff373abea71ab629615ea0dd

Malware Analysis – djvu – b6accd3374b36d1de13f8b6356ce76b3

Malware Analysis – djvu – 2fa9ba0a3450613283ede851f4fc435f

Ransomware Victim: Naulty, Scaricamazza and McDevitt, LLC

Royal Ransomware Victim: McAndrews Law Offices

Ransomware Victim: Virginia Farm Bureau

Ransomware Victim: Cristal Controls

Ransomware Victim: M2S Electronics

Malware Analysis – amadey – aa6cc702008759077d3c1822fd115671

Malware Analysis – evasion – 1ee52d16fa78a820fc177cd84e58e984

Malware Analysis – djvu – 2f86489c9f5566ec7bd0d3cad8483f29

Malware Analysis – evasion – 13ffce8662080c941703c4cf419d6344

Aurora Stealer Malware is becoming a prominent threat in the cybercrime ecosystem

Ransomware Victim: Pressco Technology

Ransomware Victim: www[.]maynards[.]com

Ransomware Victim: Ivaco Rolling Mills

Ransomware Victim: Fishmans

Ransomware Victim: Quantum Plastics

Ransomware Victim: Ortmeier Maschinen- und Vorrichtungsbau GmbH & Co[.] KG

Ransomware Victim: ALLIANCE AFRICAINE D’ASSURANCES

Ransomware Victim: Silverstone

Ransomware Victim: Sheehan Family Companies

Ransomware Victim: Sohnen Enterprises

HackerOne Bug Bounty Disclosure: api-key-exposed-in-javascript-file-on-password-developer-site-sudosu

[QILIN] – Ransomware Victim: Tiger Communications

[QILIN] – Ransomware Victim: Ritenour School District

[CICADA3301] – Ransomware Victim: B&M – Expertise – Audit

[AKIRA] – Ransomware Victim: LeasePLUS

You may have missed