OSINT

Malware Analysis – djvu – ec606e5e431b4d6be09c3362a40cf60b

January 14, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:rhadamanthys, family:smokeloader, family:vidar, botnet:19, backdoor, discovery, persistence, ransomware, spyware, stealer, trojanMD5: ec606e5e431b4d6be09c3362a40cf60bSHA1: d807d99153a82a491d19420eb133d4415aa0c057ANALYSIS DATE: 2023-01-14T03:02:49ZTTPS:...

Malware Analysis – lockbit – 260235a69a60ca8f424e1809fc01fd2b

January 14, 2023

Score: 10 MALWARE FAMILY: lockbitTAGS:family:lockbit, ransomware, spyware, stealerMD5: 260235a69a60ca8f424e1809fc01fd2bSHA1: 0647b7f536beeefa04eafbe877ad9e7227334aadANALYSIS DATE: 2023-01-14T03:06:36ZTTPS: T1082, T1005, T1081, T1012, T1112 ScoreMeaningExample10Known badA malware...

Malware Analysis – djvu – b4fb108e628474068b70b975ee54817f

January 14, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: b4fb108e628474068b70b975ee54817fSHA1: 05a0863ba7cb981d91807961c1dad86887d8867dANALYSIS DATE: 2023-01-14T03:25:23ZTTPS: T1222, T1012, T1053, T1082,...

Malware Analysis – djvu – dd389d4033a9f3b4b038bb25d124cb46

January 14, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:rhadamanthys, family:smokeloader, family:vidar, botnet:19, backdoor, discovery, persistence, ransomware, spyware, stealer, trojanMD5: dd389d4033a9f3b4b038bb25d124cb46SHA1: 7ed92f2d935aaf50af22423d774ebe0b8613c8f2ANALYSIS DATE: 2023-01-14T05:03:02ZTTPS:...

Malware Analysis – njrat – 596e8b4c50fa6579495c12756c3b5f14

January 14, 2023

Score: 10 MALWARE FAMILY: njratTAGS:family:njrat, botnet:hacked, discovery, evasion, persistence, ransomware, trojanMD5: 596e8b4c50fa6579495c12756c3b5f14SHA1: de331021e0b2f8fcb792db5cef59472c1964b3bfANALYSIS DATE: 2023-01-14T04:54:53ZTTPS: T1112, T1042, T1060, T1012, T1031,...

Malware Analysis – djvu – 45b0220aa7be949fcf01f1c68daedbb6

January 14, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 45b0220aa7be949fcf01f1c68daedbb6SHA1: e743588797a064205c212beef52235d4224231e2ANALYSIS DATE: 2023-01-14T05:07:02ZTTPS: T1012, T1082, T1060, T1112,...

Malware Analysis – revengerat – 19c677bb8cda5703f42c143bb4251e6a

January 14, 2023

Score: 10 MALWARE FAMILY: revengeratTAGS:family:revengerat, family:xmrig, botnet:guest, discovery, evasion, miner, persistence, ransomware, stealer, trojanMD5: 19c677bb8cda5703f42c143bb4251e6aSHA1: ad85336a7304a4e58b2a4f5c40b02f578aa00923ANALYSIS DATE: 2023-01-14T05:20:28ZTTPS: T1082, T1112,...

OSINT

Malware Analysis – djvu – ec606e5e431b4d6be09c3362a40cf60b

Malware Analysis – lockbit – 260235a69a60ca8f424e1809fc01fd2b

Malware Analysis – djvu – b4fb108e628474068b70b975ee54817f

Malware Analysis – djvu – dd389d4033a9f3b4b038bb25d124cb46

Malware Analysis – njrat – 596e8b4c50fa6579495c12756c3b5f14

Malware Analysis – djvu – 45b0220aa7be949fcf01f1c68daedbb6

Malware Analysis – revengerat – 19c677bb8cda5703f42c143bb4251e6a

Scattered Spider hackers use old Intel driver to bypass security

Cisco warns of auth bypass bug with public exploit in EoL routers

Royal Mail cyberattack linked to LockBit ransomware operation

PoC exploits released for critical bugs in popular WordPress plugins

New Dark Pink APT group targets govt and military with custom malware

NortonLifeLock warns that hackers breached Password Manager accounts

Fortinet: Govt networks targeted with now-patched SSL-VPN zero-day

Microsoft: Cuba ransomware hacking Exchange servers via OWASSRF flaw

Microsoft: Exchange Server 2013 reaches end of support in 90 days

The Week in Ransomware – January 13th 2023 – LockBit in the spotlight

Vice Society ransomware claims attack on Australian firefighting service

Royal Mail halts international services after cyberattack

European police takes down call centers behind cryptocurrency scams

MetaMask warns of new ‘Address Poisoning’ cryptocurrency scam

RAT malware campaign tries to evade detection using polyglot files

Threema claims encryption flaws never had a real-world impact

Twitter claims leaked data of 200M users not stolen from its systems

[PEAR] – Ransomware Victim: Gerson & Schwartz Accident & Injury Lawyers

[SINOBI] – Ransomware Victim: Crown Automotive Sales

Cobalt Strike Beacon Detected – 119[.]91[.]41[.]170:80

Cobalt Strike Beacon Detected – 124[.]220[.]48[.]168:2379

Cobalt Strike Beacon Detected – 81[.]70[.]255[.]195:8080

You may have missed