OSINT

Malware Analysis – djvu – 02117002dd6e40b919ff3b59a2f3cf1b

November 19, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 02117002dd6e40b919ff3b59a2f3cf1bSHA1: a85ebba39171b4617e7e6104e8ad616fb9e83f33ANALYSIS DATE: 2022-11-19T17:08:36ZTTPS: T1060, T1112, T1005, T1081,...

Malware Analysis – redline – ca1cf4a9b531c3c6d84dbb188dc649ad

November 19, 2022

Score: 10 MALWARE FAMILY: redlineTAGS:family:redline, agilenet, discovery, evasion, infostealer, persistence, ransomware, spyware, stealerMD5: ca1cf4a9b531c3c6d84dbb188dc649adSHA1: 0bc2567aa74c9deaf85a78f4d675f16939dabd6dANALYSIS DATE: 2022-11-19T16:10:35ZTTPS: T1012, T1082, T1060,...

Malware Analysis – dcrat – e812b559b4f0a8fd5d11c86e2b7bbdea

November 19, 2022

Score: 10 MALWARE FAMILY: dcratTAGS:family:dcrat, family:djvu, family:redline, family:smokeloader, family:vidar, botnet:517, botnet:mario23_10, backdoor, collection, discovery, infostealer, persistence, ransomware, rat, spyware, stealer,...

Malware Analysis – djvu – 6836ea5f1dd9575394d3d549e29729f7

November 19, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: 6836ea5f1dd9575394d3d549e29729f7SHA1: 941860f0b34142aa11a1e5e4bbf10035568f1d7dANALYSIS DATE: 2022-11-19T17:29:41ZTTPS: T1130, T1112, T1060, T1222, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – smokeloader – c6e438c54033096a47d752040658de04

November 19, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: c6e438c54033096a47d752040658de04SHA1: 9856b7ab9e99830f5819408b61527b5f422d8f45ANALYSIS DATE: 2022-11-19T17:51:16ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ransomware – 49e12e0bd76941ab54dec0db51cd6e22

November 19, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 49e12e0bd76941ab54dec0db51cd6e22SHA1: da575ad370d523ed8017f354645dbae9f22180a7ANALYSIS DATE: 2022-11-19T17:34:38ZTTPS: T1107, T1490, T1005, T1081 ScoreMeaningExample10Known badA malware family was...

Black Friday and Cyber Monday, crooks are already at work

November 19, 2022

Every year during Black Friday and Cyber Monday, crooks take advantage of the bad habits of users with fraudulent schema....

Wodat – Windows Oracle Database Attack Toolkit

November 19, 2022

Simple port of the popular Oracle Database Attack Tool (ODAT) ( TEST Module tests if the given connection string can...

Bug Bounty

BugCrowd Bug Bounty Disclosure: – Impersonation via Broken Link Hijacking on https://sv.hellosign.com – By CoffeeAddict_exe

November 19, 2022

The below information is fully automated and the information is captured from the BugCrowd Disclosure website. The information was correct...

Bug Bounty

OSINT

Malware Analysis – djvu – 02117002dd6e40b919ff3b59a2f3cf1b

Malware Analysis – redline – ca1cf4a9b531c3c6d84dbb188dc649ad

Malware Analysis – dcrat – e812b559b4f0a8fd5d11c86e2b7bbdea

Malware Analysis – djvu – 6836ea5f1dd9575394d3d549e29729f7

Malware Analysis – smokeloader – c6e438c54033096a47d752040658de04

Malware Analysis – ransomware – 49e12e0bd76941ab54dec0db51cd6e22

Black Friday and Cyber Monday, crooks are already at work

Wodat – Windows Oracle Database Attack Toolkit

BugCrowd Bug Bounty Disclosure: – Impersonation via Broken Link Hijacking on https://sv.hellosign.com – By CoffeeAddict_exe

BugCrowd Bug Bounty Disclosure: – Panel access at https://news-push-88.op-mobile.opera.com/. – By rahul0x01

Cobalt Stike Beacon Detected – 123[.]60[.]223[.]157:9999

Cobalt Stike Beacon Detected – 101[.]35[.]149[.]44:80

Cobalt Stike Beacon Detected – 118[.]99[.]27[.]116:8080

Cobalt Stike Beacon Detected – 147[.]78[.]242[.]119:80

Cobalt Stike Beacon Detected – 139[.]196[.]171[.]222:443

Cobalt Stike Beacon Detected – 107[.]189[.]6[.]84:443

Cobalt Stike Beacon Detected – 101[.]35[.]149[.]44:443

Cobalt Stike Beacon Detected – 119[.]23[.]61[.]144:80

Cobalt Stike Beacon Detected – 120[.]79[.]252[.]209:80

Cobalt Stike Beacon Detected – 194[.]165[.]16[.]92:443

Cobalt Stike Beacon Detected – 79[.]133[.]56[.]243:443

Cobalt Stike Beacon Detected – 116[.]196[.]108[.]157:80

New improved versions of LodaRAT spotted in the wild

Daily Vulnerability Trends: Sat Nov 19 2022

BugCrowd Bug Bounty Disclosure: P3 – Publicly Editable Google Docs Linked from NASA SnowEx PPT –

BugCrowd Bug Bounty Disclosure: P3 – Details of the collaboration between NASA and Inmarsat Government and the type of contract –

Apple Products Multiple Vulnerabilities

Miljödata – 870,108 breached accounts

Cobalt Strike Beacon Detected – 119[.]91[.]203[.]199:88

You may have missed