OSINT

Malware Analysis – discovery – 56d6acb0c2d633d15c85b6076a777f52

February 13, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: 56d6acb0c2d633d15c85b6076a777f52SHA1: 9b374eabfe300fc1aba7c90ddd184bf49cc9c475ANALYSIS DATE: 2023-02-13T11:15:09ZTTPS: T1012, T1082, T1112, T1042, T1060 ScoreMeaningExample10Known badA malware family...

Malware Analysis – – 244f46780caa83b92f7379239599440f

February 13, 2023

Score: 1 MALWARE FAMILY: TAGS:MD5: 244f46780caa83b92f7379239599440fSHA1: a4b8a6ff8ef0aeceac679a4da652b04d1ff3f033ANALYSIS DATE: 2023-02-13T11:25:50ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – e494b79c75746c25bc46d8dcf8ae1732

February 13, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: e494b79c75746c25bc46d8dcf8ae1732SHA1: 4b395fb66d78adbe3f7c60d68bd7b528f0473174ANALYSIS DATE: 2023-02-13T11:01:46ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – smokeloader – b02479a6c16c1571bf7b6bf934253d52

February 13, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: b02479a6c16c1571bf7b6bf934253d52SHA1: 716af19d87a39199273b8612b0adabe66cb9ec2cANALYSIS DATE: 2023-02-13T11:07:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

LockBit 3.0 Ransomware Victim: laganscg[.]com

February 13, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

LockBit 3.0 Ransomware Victim: mdstrucking[.]com

February 13, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

LockBit 3.0 Ransomware Victim: greekpeak[.]net

February 13, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Daily Vulnerability Trends: Mon Feb 13 2023

February 13, 2023

Daily Vulnerability Trends (sourced from VulnMon) CVE NAMECVE DescriptionCVE-2022-23529** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason:...

Malware Analysis – smokeloader – 80b50e333e346fc877328d1ad3e2c0e4

February 13, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 80b50e333e346fc877328d1ad3e2c0e4SHA1: dc968b26bcd01cefb79a5865087b3f872394e29fANALYSIS DATE: 2023-02-13T03:02:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – octo – 229771c39436dc8dcf656b86021fa5a1

February 13, 2023

Score: 10 MALWARE FAMILY: octoTAGS:family:octo, banker, evasion, infostealer, ransomware, rat, trojanMD5: 229771c39436dc8dcf656b86021fa5a1SHA1: 61a94c8e576ad8f5efedebc3438b2cb67941fb33ANALYSIS DATE: 2023-02-13T02:58:17ZTTPS: ScoreMeaningExample10Known badA malware family was...

Malware Analysis – evasion – 11b95a7ff7a5bf4dd07ef50d9d2d55f1

February 13, 2023

Score: 8 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomwareMD5: 11b95a7ff7a5bf4dd07ef50d9d2d55f1SHA1: 7b0929727f6ff913c6f24b19dd7ec13b00693894ANALYSIS DATE: 2023-02-13T03:18:34ZTTPS: T1012, T1082, T1060, T1112, T1491, T1120 ScoreMeaningExample10Known badA malware...

Malware Analysis – discovery – c9d398b0b57f099e4405d878f8cae4ec

February 13, 2023

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploit, persistenceMD5: c9d398b0b57f099e4405d878f8cae4ecSHA1: 0fcab4492c6a47d9846e905b573e6645bb062554ANALYSIS DATE: 2023-02-13T03:02:12ZTTPS: T1060, T1082, T1222, T1012 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – djvu – ee12a9d02f45005bf7b170b7c830803d

February 13, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:laplas, family:rhadamanthys, family:smokeloader, family:vidar, botnet:19, backdoor, clipper, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: ee12a9d02f45005bf7b170b7c830803dSHA1:...

Malware Analysis – djvu – 3ab1a1a239e014d563c3a9bbb0492f29

February 13, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 3ab1a1a239e014d563c3a9bbb0492f29SHA1: de619d9dd49163cf0be8cd777ec9666a6e5e3a23ANALYSIS DATE: 2023-02-13T03:24:35ZTTPS: T1012, T1082, T1222, T1053,...

Malware Analysis – ransomware – 5f8946681a31e505ae08bb52c759adb5

February 13, 2023

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 5f8946681a31e505ae08bb52c759adb5SHA1: 332fcdeffda7aa2927f59438d84038f3d4096f8fANALYSIS DATE: 2023-02-13T05:54:12ZTTPS: T1012, T1082, T1057 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – djvu – 4ab7e38f1d06c623036555954c3f1918

February 13, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 4ab7e38f1d06c623036555954c3f1918SHA1: 3599db93f3825bdf8a7b339c405c8194f9c3a675ANALYSIS DATE: 2023-02-13T05:23:52ZTTPS: T1012, T1082, T1222, T1005,...

Malware Analysis – smokeloader – 46de5533299ec397c04dabb10f3bb157

February 13, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 46de5533299ec397c04dabb10f3bb157SHA1: 764e0fa6f5db8e7f352a632a53e9632ee2fcc772ANALYSIS DATE: 2023-02-13T05:05:30ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – lockbit – e9cd8c321b68118611a0863b0b91b8f5

February 13, 2023

Score: 10 MALWARE FAMILY: lockbitTAGS:family:lockbit, discovery, evasion, persistence, ransomwareMD5: e9cd8c321b68118611a0863b0b91b8f5SHA1: dde3509b41639f4ae7383bcd7b1c17db88b667cfANALYSIS DATE: 2023-02-13T05:20:04ZTTPS: T1490, T1046, T1107, T1491, T1112, T1060, T1018,...

OSINT

Malware Analysis – discovery – 56d6acb0c2d633d15c85b6076a777f52

Malware Analysis – – 244f46780caa83b92f7379239599440f

Malware Analysis – djvu – e494b79c75746c25bc46d8dcf8ae1732

Malware Analysis – smokeloader – b02479a6c16c1571bf7b6bf934253d52

LockBit 3.0 Ransomware Victim: laganscg[.]com

LockBit 3.0 Ransomware Victim: mdstrucking[.]com

LockBit 3.0 Ransomware Victim: greekpeak[.]net

Daily Vulnerability Trends: Mon Feb 13 2023

Malware Analysis – smokeloader – 80b50e333e346fc877328d1ad3e2c0e4

Malware Analysis – octo – 229771c39436dc8dcf656b86021fa5a1

Malware Analysis – evasion – 11b95a7ff7a5bf4dd07ef50d9d2d55f1

Malware Analysis – discovery – c9d398b0b57f099e4405d878f8cae4ec

Malware Analysis – djvu – ee12a9d02f45005bf7b170b7c830803d

Malware Analysis – djvu – 3ab1a1a239e014d563c3a9bbb0492f29

Malware Analysis – ransomware – 5f8946681a31e505ae08bb52c759adb5

Malware Analysis – djvu – 4ab7e38f1d06c623036555954c3f1918

Malware Analysis – smokeloader – 46de5533299ec397c04dabb10f3bb157

Malware Analysis – lockbit – e9cd8c321b68118611a0863b0b91b8f5

Cobalt Stike Beacon Detected – 217[.]12[.]206[.]146:4433

Cobalt Stike Beacon Detected – 185[.]25[.]119[.]26:443

Cobalt Stike Beacon Detected – 167[.]179[.]67[.]5:2087

LockBit 3.0 Ransomware Victim: lhermite-agri[.]com

LockBit 3.0 Ransomware Victim: mhstech[.]com

LockBit 3.0 Ransomware Victim: ppinvestors[.]com

HackerOne Bug Bounty Disclosure: socks-heap-buffer-overflow-via-malicious-http-redirect-with-oversized-hostname-abdullah

HackerOne Bug Bounty Disclosure: buffer-over-read-missing-nul-termination-in-addvariable-causes-undefined-behavior-sagorhawlader

HackerOne Bug Bounty Disclosure: blockstack-org-is-vulnerable-to-cve-cve–x-aulia

HackerOne Bug Bounty Disclosure: blockstack-browser-for-mac-leaks-core-api-password-to-rd-parties-frozensolid

HackerOne Bug Bounty Disclosure: logout-bypass-vulnerability-in-hiro-so-anonymous

You may have missed