OSINT

Malware Analysis – djvu – f5c178148b3caf9df80d0ebdad21247f

November 13, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, family:vidar, botnet:123, botnet:517, botnet:mario23_10, backdoor, collection, discovery, evasion, infostealer, persistence, ransomware, spyware, stealer,...

Posh C2 Detected – 132[.]145[.]106[.]12:8443

November 13, 2022

The Information provided at the time of posting was detected as "Posh C2". Depending on when you are viewing this...

Lockbit gang leaked data stolen from global high-tech giant Thales

November 13, 2022

The Lockbit 3.0 ransomware gang started leaking the information allegedly stolen from the global high-tech company Thales. Thales is a...

Daily Vulnerability Trends: Sun Nov 13 2022

November 13, 2022

Daily Vulnerability Trends (sourced from VulnMon) CVE NAMECVE DescriptionCVE-2022-27510Unauthorized access to Gateway user capabilitiesCVE-2021-1961Possible buffer overflow due to lack of...

LockBit 3.0 Ransomware Victim: sinopecthc[.]com

November 13, 2022

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the...

LockBit 3.0 Ransomware Victim: stavbar[.]cz

November 13, 2022

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

LockBit 3.0 Ransomware Victim: adnec[.]ae

November 13, 2022

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

LockBit 3.0 Ransomware Victim: oehc[.]corsica

November 13, 2022

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

LockBit 3.0 Ransomware Victim: chahousing[.]org

November 13, 2022

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Malware Analysis – azov – 9c4c2f4f00522c9ebe08905270b2ac4b

November 13, 2022

Score: 10 MALWARE FAMILY: azovTAGS:family:azov, persistence, ransomware, spyware, stealer, wiperMD5: 9c4c2f4f00522c9ebe08905270b2ac4bSHA1: 63e0b1975eaadd99a742fc279ee1956377686f10ANALYSIS DATE: 2022-11-13T05:01:05ZTTPS: T1012, T1120, T1082, T1060, T1112, T1005,...

Malware Analysis – djvu – f5c2841aa3c4f73419578a3155f14f8b

November 13, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: f5c2841aa3c4f73419578a3155f14f8bSHA1: c50a926ebcfabc9c4b1174adaacb29b1ca71f6b9ANALYSIS DATE: 2022-11-13T03:03:24ZTTPS: T1060, T1112, T1082, T1012,...

Malware Analysis – azov – 24b6dcaa8998f7478e80b33f438ea830

November 13, 2022

Score: 10 MALWARE FAMILY: azovTAGS:family:azov, persistence, ransomware, wiperMD5: 24b6dcaa8998f7478e80b33f438ea830SHA1: 6af7f3d7627ab41a1b897388dd71c6cf42017d7aANALYSIS DATE: 2022-11-13T05:01:05ZTTPS: T1060, T1112, T1012, T1120, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – azov – a029befa6a4679c3a724d759022e57d9

November 13, 2022

Score: 10 MALWARE FAMILY: azovTAGS:family:azov, persistence, ransomware, wiperMD5: a029befa6a4679c3a724d759022e57d9SHA1: 4c44b4de48bb7969e57b2561a80913cacdc1d97cANALYSIS DATE: 2022-11-13T05:01:05ZTTPS: T1012, T1120, T1082, T1060, T1112 ScoreMeaningExample10Known badA malware...

Malware Analysis – azov – 4e363abe84806737799677097880529c

November 13, 2022

Score: 10 MALWARE FAMILY: azovTAGS:family:azov, persistence, ransomware, wiperMD5: 4e363abe84806737799677097880529cSHA1: d75cef7e653213c4688a25baf316baae7b55c739ANALYSIS DATE: 2022-11-13T05:01:05ZTTPS: T1060, T1112, T1012, T1120, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – azov – 0a79ead8fad6e0365a90587afcd6ff10

November 13, 2022

Score: 10 MALWARE FAMILY: azovTAGS:family:azov, persistence, ransomware, spyware, stealer, wiperMD5: 0a79ead8fad6e0365a90587afcd6ff10SHA1: 72daf9625dc1d0ed57719193f1716f9432b65a06ANALYSIS DATE: 2022-11-13T05:01:05ZTTPS: T1005, T1081, T1060, T1112, T1012, T1120,...

Bug Bounty

BugCrowd Bug Bounty Disclosure: – Panel access at https://news-push-88.op-mobile.opera.com/. – By rahul0x01

November 13, 2022

The below information is fully automated and the information is captured from the BugCrowd Disclosure website. The information was correct...

Malware Analysis – azov – 0b72cdba79b42fb9f35cc35aeee84521

November 13, 2022

Score: 10 MALWARE FAMILY: azovTAGS:family:azov, persistence, ransomware, spyware, stealer, wiperMD5: 0b72cdba79b42fb9f35cc35aeee84521SHA1: b7700c891d9d3474da904eea3fda2cd4a595b4deANALYSIS DATE: 2022-11-13T05:04:24ZTTPS: T1060, T1112, T1012, T1120, T1082, T1005,...

Malware Analysis – azov – be6b6d25baf6bdcfb2b82982a1c02e51

November 13, 2022

Score: 10 MALWARE FAMILY: azovTAGS:family:azov, persistence, ransomware, spyware, stealer, wiperMD5: be6b6d25baf6bdcfb2b82982a1c02e51SHA1: 950f8696908ab1de8f49eb9e80a1dff469071086ANALYSIS DATE: 2022-11-13T05:04:05ZTTPS: T1060, T1112, T1012, T1120, T1082, T1005,...

Malware Analysis – azov – 5438961a5f8b3fb4f1ab25c327d032b7

November 13, 2022

Score: 10 MALWARE FAMILY: azovTAGS:family:azov, persistence, ransomware, wiperMD5: 5438961a5f8b3fb4f1ab25c327d032b7SHA1: 600928b807a35dbaec7b3ee913aba4fece17c688ANALYSIS DATE: 2022-11-13T05:04:05ZTTPS: T1060, T1112, T1012, T1120, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – azov – 85dd5fce0c097ca0d61f3e8894bb3fc3

November 13, 2022

Score: 10 MALWARE FAMILY: azovTAGS:family:azov, persistence, ransomware, spyware, stealer, wiperMD5: 85dd5fce0c097ca0d61f3e8894bb3fc3SHA1: 84de7b63b9ca39dc2b32cdef9a1431f244e29a13ANALYSIS DATE: 2022-11-13T05:02:04ZTTPS: T1060, T1112, T1012, T1120, T1082, T1005,...

Malware Analysis – azov – 0a8a8d7d504c21ca27d8bca620a46595

November 13, 2022

Score: 10 MALWARE FAMILY: azovTAGS:family:azov, persistence, ransomware, spyware, stealer, wiperMD5: 0a8a8d7d504c21ca27d8bca620a46595SHA1: 23787a4bc091c821543a54b86d91d24dee9455bdANALYSIS DATE: 2022-11-13T05:39:03ZTTPS: T1005, T1081, T1012, T1120, T1082, T1060,...

Malware Analysis – djvu – e22e75d5a31222d5ca54cc0efe34e77b

November 13, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: e22e75d5a31222d5ca54cc0efe34e77bSHA1: 0822b46fc90c5956581dbbeac1bafe2b3a455b57ANALYSIS DATE: 2022-11-13T05:09:56ZTTPS: T1012, T1082, T1005, T1081,...

Malware Analysis – djvu – 988bdaa991663005b67ac9b548fe5188

November 13, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, family:vidar, botnet:10k, botnet:517, botnet:mario23_10, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5:...

Malware Analysis – azov – 9a5211f6e491d812d15363168783906c

November 13, 2022

Score: 10 MALWARE FAMILY: azovTAGS:family:azov, persistence, ransomware, spyware, stealer, wiperMD5: 9a5211f6e491d812d15363168783906cSHA1: 0d06ee595404de3264da3c71f489392b64fa1e2eANALYSIS DATE: 2022-11-13T05:39:03ZTTPS: T1060, T1112, T1012, T1120, T1082, T1005,...

OSINT

Malware Analysis – djvu – f5c178148b3caf9df80d0ebdad21247f

Posh C2 Detected – 132[.]145[.]106[.]12:8443

Lockbit gang leaked data stolen from global high-tech giant Thales

Daily Vulnerability Trends: Sun Nov 13 2022

LockBit 3.0 Ransomware Victim: sinopecthc[.]com

LockBit 3.0 Ransomware Victim: stavbar[.]cz

LockBit 3.0 Ransomware Victim: adnec[.]ae

LockBit 3.0 Ransomware Victim: oehc[.]corsica

LockBit 3.0 Ransomware Victim: chahousing[.]org

Malware Analysis – azov – 9c4c2f4f00522c9ebe08905270b2ac4b

Malware Analysis – djvu – f5c2841aa3c4f73419578a3155f14f8b

Malware Analysis – azov – 24b6dcaa8998f7478e80b33f438ea830

Malware Analysis – azov – a029befa6a4679c3a724d759022e57d9

Malware Analysis – azov – 4e363abe84806737799677097880529c

Malware Analysis – azov – 0a79ead8fad6e0365a90587afcd6ff10

BugCrowd Bug Bounty Disclosure: – Panel access at https://news-push-88.op-mobile.opera.com/. – By rahul0x01

Malware Analysis – azov – 0b72cdba79b42fb9f35cc35aeee84521

Malware Analysis – azov – be6b6d25baf6bdcfb2b82982a1c02e51

Malware Analysis – azov – 5438961a5f8b3fb4f1ab25c327d032b7

Malware Analysis – azov – 85dd5fce0c097ca0d61f3e8894bb3fc3

Malware Analysis – azov – 0a8a8d7d504c21ca27d8bca620a46595

Malware Analysis – djvu – e22e75d5a31222d5ca54cc0efe34e77b

Malware Analysis – djvu – 988bdaa991663005b67ac9b548fe5188

Malware Analysis – azov – 9a5211f6e491d812d15363168783906c

Cobalt Strike Beacon Detected – 119[.]91[.]203[.]199:88

Cobalt Strike Beacon Detected – 106[.]54[.]239[.]134:80

Cobalt Strike Beacon Detected – 81[.]69[.]98[.]230:50010

Cobalt Strike Beacon Detected – 103[.]43[.]18[.]10:80

Cobalt Strike Beacon Detected – 38[.]190[.]198[.]55:80

You may have missed