OSINT

Malware Analysis – – 1e9d4af109f42baa420598b1cb38d307

February 8, 2023

Score: 1 MALWARE FAMILY: TAGS:MD5: 1e9d4af109f42baa420598b1cb38d307SHA1: 71db2886b1dde3e92bbab3af7be627f253532736ANALYSIS DATE: 2023-02-08T10:46:04ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – discovery – e9d243eb7e4f2576ff96c3143f2fb30d

February 8, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: e9d243eb7e4f2576ff96c3143f2fb30dSHA1: 22bf98b87e9f9adbd2c8e7f7737527a59eb81676ANALYSIS DATE: 2023-02-08T10:04:52ZTTPS: T1012, T1082, T1112, T1042, T1060 ScoreMeaningExample10Known badA malware family...

Malware Analysis – persistence – 52b05e7505ad1a8b287ad019764574ac

February 8, 2023

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 52b05e7505ad1a8b287ad019764574acSHA1: bdbf153dde1200c80ae0c4cdbb9d43e155337d67ANALYSIS DATE: 2023-02-08T10:33:00ZTTPS: T1012, T1082, T1120, T1060, T1112 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – djvu – 0cecc0fdd634ffe7605faf597e6e8283

February 8, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:gozi, family:laplas, family:smokeloader, botnet:1001, backdoor, banker, clipper, discovery, isfb, persistence, ransomware, stealer, trojanMD5: 0cecc0fdd634ffe7605faf597e6e8283SHA1: 3bbdb6599d477bf73b5c0a679c418a80a0dbf141ANALYSIS...

Malware Analysis – chaos – df96e57feb8b5e1265a93d409a77cf45

February 8, 2023

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, ransomwareMD5: df96e57feb8b5e1265a93d409a77cf45SHA1: 5aa167a4755cf0b86385f8e62b5b403e72ccf203ANALYSIS DATE: 2023-02-08T10:52:04ZTTPS: T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – ransomware – 4bfc92bc80045b031e7c14070143e1d3

February 8, 2023

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 4bfc92bc80045b031e7c14070143e1d3SHA1: 0d80e47173d8952f35edc76f0fc8c74b4829ee49ANALYSIS DATE: 2023-02-08T11:03:23ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – ransomware – 74392d410bd20b67ebd23bdc9b6ec372

February 8, 2023

Score: 5 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 74392d410bd20b67ebd23bdc9b6ec372SHA1: a05c73b391df124349eff51c2b32e54d6822edd8ANALYSIS DATE: 2023-02-08T11:36:17ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – lockbit – 5761ee98b1c2fea31b5408516a8929ea

February 8, 2023

Score: 10 MALWARE FAMILY: lockbitTAGS:family:lockbit, evasion, persistence, ransomwareMD5: 5761ee98b1c2fea31b5408516a8929eaSHA1: 4d043df23e55088bfc04c14dfb9ddb329a703cc1ANALYSIS DATE: 2023-02-08T10:56:37ZTTPS: T1490, T1059, T1107, T1491, T1112, T1018, T1060, T1082...

Daily Vulnerability Trends: Wed Feb 08 2023

February 8, 2023

Daily Vulnerability Trends (sourced from VulnMon) CVE NAMECVE DescriptionCVE-2022-44268ImageMagick 7.1.0-49 is vulnerable to Information Disclosure. When it parses a PNG...

Malware Analysis – smokeloader – 7f2d28e3c305aa30e921a8eb72a1300f

February 8, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 7f2d28e3c305aa30e921a8eb72a1300fSHA1: 289d3bebdf2950ae5a32da78a6220df29c3ecd34ANALYSIS DATE: 2023-02-08T03:36:01ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 7b2adf17b3cfe12e19ec2db76a1529cc

February 8, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:gozi, family:laplas, family:smokeloader, botnet:1001, backdoor, banker, clipper, discovery, isfb, persistence, ransomware, stealer, trojanMD5: 7b2adf17b3cfe12e19ec2db76a1529ccSHA1: ffcb202abd02838b2c5f8469cdbfba4f3156f47cANALYSIS...

Malware Analysis – djvu – bcde1dc8e93f8b260586afff22acce04

February 8, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:gozi, family:laplas, family:smokeloader, botnet:1001, backdoor, banker, clipper, discovery, isfb, persistence, ransomware, stealer, trojanMD5: bcde1dc8e93f8b260586afff22acce04SHA1: 2faba3fd359f9bc0e47c1b06f01cd16029b60064ANALYSIS...

CISA: CISA Releases ESXiArgs Ransomware Recovery Script

February 8, 2023

CISA Releases ESXiArgs Ransomware Recovery Script CISA has released a recovery script for organizations that have fallen victim to ESXiArgs...