OSINT

Malware Analysis – njrat – 338307656795cb8779872642e718aabd

November 14, 2022

Score: 10 MALWARE FAMILY: njratTAGS:family:njrat, family:quasar, agilenet, discovery, evasion, persistence, ransomware, spyware, stealer, themida, trojanMD5: 338307656795cb8779872642e718aabdSHA1: fe6f07fc7a8894397863015445a8029cc716d18eANALYSIS DATE: 2022-11-14T14:32:14ZTTPS: T1082,...

Bug Bounty

BugCrowd Bug Bounty Disclosure: – Panel access at https://news-push-88.op-mobile.opera.com/. – By rahul0x01

November 14, 2022

The below information is fully automated and the information is captured from the BugCrowd Disclosure website. The information was correct...

Malware Analysis – amadey – a2376addbda8d143eaa7a151533fb520

November 14, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:redline, family:smokeloader, family:vidar, botnet:517, botnet:mario23_10, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5:...

Malware Analysis – djvu – d1973cdcf0c4bece9b084bfe132ac646

November 14, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: d1973cdcf0c4bece9b084bfe132ac646SHA1: e81906a8c90bc7621e6db284f7baf809c49d1687ANALYSIS DATE: 2022-11-14T15:21:14ZTTPS: T1012, T1082, T1060, T1112,...

Malware Analysis – discovery – d7d3f9503f8cd61e82b159821e67c5a7

November 14, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, evasion, persistence, ransomware, spyware, stealer, trojan, upxMD5: d7d3f9503f8cd61e82b159821e67c5a7SHA1: 433ccebedaf60d3aff42811bc32f8ae5fe64570eANALYSIS DATE: 2022-11-14T14:59:25ZTTPS: T1060, T1112, T1031, T1089,...

Malware Analysis – discovery – ad3f76e4dc5baa1ee64142b5c68069de

November 14, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: ad3f76e4dc5baa1ee64142b5c68069deSHA1: 3a63df7eee1733e275aeeda1a2f853fe6fcec2fcANALYSIS DATE: 2022-11-14T14:56:39ZTTPS: T1082, T1012, T1060, T1112, T1042 ScoreMeaningExample10Known badA malware family...

Malware Analysis – evasion – aae3cffcd65424b439135a22b9945214

November 14, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: aae3cffcd65424b439135a22b9945214SHA1: 2122535f42a7bb3629dcf82335b6483bca4e3002ANALYSIS DATE: 2022-11-14T15:44:24ZTTPS: T1012, T1120, T1082, T1031, T1491, T1112 ScoreMeaningExample10Known badA malware family...

Malware Analysis – discovery – 50dd766cdf8e4eaf3f1f551133b36cad

November 14, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: 50dd766cdf8e4eaf3f1f551133b36cadSHA1: d057e7cf9007af8c0886a6021a91e65d7be55bdfANALYSIS DATE: 2022-11-14T16:34:17ZTTPS: T1012, T1082, T1120, T1112, T1222, T1057, T1060 ScoreMeaningExample10Known badA...

Malware Analysis – djvu – 1143c8f208bab79acbe46861f271cc4d

November 14, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 1143c8f208bab79acbe46861f271cc4dSHA1: 12732617f010643844ca19052a1fa19d6935989cANALYSIS DATE: 2022-11-14T16:01:53ZTTPS: T1130, T1112, T1005, T1081,...

Malware Analysis – smokeloader – f31e97e5eb2a8288857d0f69f101a272

November 14, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: f31e97e5eb2a8288857d0f69f101a272SHA1: 59a891e040fa64a8b0ae316f3166f8e8219679c1ANALYSIS DATE: 2022-11-14T16:26:05ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – asyncrat – 7e3e4674ff8480cf2653ce1cd03998cd

November 14, 2022

Score: 10 MALWARE FAMILY: asyncratTAGS:family:asyncrat, botnet:windows update manager, evasion, ransomware, rat, spyware, stealer, upxMD5: 7e3e4674ff8480cf2653ce1cd03998cdSHA1: 35d97809832fa9fd3583dd63f58f39283c61257eANALYSIS DATE: 2022-11-14T16:45:57ZTTPS: T1005, T1081,...

Malware Analysis – djvu – 3fc9f410788283b73297b7472e35ddd3

November 14, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 3fc9f410788283b73297b7472e35ddd3SHA1: b48afa6f5177fa136f14ad6538f71e7614ccc855ANALYSIS DATE: 2022-11-14T17:12:01ZTTPS: T1012, T1005, T1081, T1082,...

Malware Analysis – amadey – ea0d0b9ace17fa512a03d29b7ced82d7

November 14, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:redline, family:smokeloader, family:vidar, botnet:123, botnet:517, botnet:@redlinevip cloud (tg: @fatherofcarders), botnet:boy, botnet:mario23_10, backdoor, collection, discovery,...

Malware Analysis – wannacry – 5e05425b6e422dbaf6965fef2d259190

November 14, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, persistence, ransomware, spyware, stealer, wormMD5: 5e05425b6e422dbaf6965fef2d259190SHA1: 8eea22f7bd1d14a510d90cd145b9af58889fbaf1ANALYSIS DATE: 2022-11-14T17:41:52ZTTPS: T1107, T1490, T1060, T1112, T1158,...

OSINT

Malware Analysis – njrat – 338307656795cb8779872642e718aabd

BugCrowd Bug Bounty Disclosure: – Panel access at https://news-push-88.op-mobile.opera.com/. – By rahul0x01

Malware Analysis – amadey – a2376addbda8d143eaa7a151533fb520

Malware Analysis – djvu – d1973cdcf0c4bece9b084bfe132ac646

Malware Analysis – discovery – d7d3f9503f8cd61e82b159821e67c5a7

Malware Analysis – discovery – ad3f76e4dc5baa1ee64142b5c68069de

Malware Analysis – evasion – aae3cffcd65424b439135a22b9945214

Malware Analysis – discovery – 50dd766cdf8e4eaf3f1f551133b36cad

Malware Analysis – djvu – 1143c8f208bab79acbe46861f271cc4d

Malware Analysis – smokeloader – f31e97e5eb2a8288857d0f69f101a272

Malware Analysis – asyncrat – 7e3e4674ff8480cf2653ce1cd03998cd

Malware Analysis – djvu – 3fc9f410788283b73297b7472e35ddd3

Malware Analysis – amadey – ea0d0b9ace17fa512a03d29b7ced82d7

Malware Analysis – wannacry – 5e05425b6e422dbaf6965fef2d259190

Massive Black hat SEO campaign used +15K WordPress sites

KmsdBot, a new evasive bot for cryptomining activity and DDoS attacks

Unblob – Extract Files From Any Kind Of Container Formats

Cobalt Stike Beacon Detected – 172[.]104[.]240[.]104:443

Cobalt Stike Beacon Detected – 124[.]71[.]145[.]63:4433

Cobalt Stike Beacon Detected – 180[.]76[.]105[.]82:8443

Cobalt Stike Beacon Detected – 43[.]143[.]119[.]212:443

Cobalt Stike Beacon Detected – 45[.]55[.]56[.]183:443

Cobalt Stike Beacon Detected – 5[.]199[.]168[.]128:443

Cobalt Stike Beacon Detected – 193[.]233[.]203[.]214:443

[J] – Ransomware Victim: ****[.]com[.]au

[PLAY] – Ransomware Victim: Encore Repair Services

[PLAY] – Ransomware Victim: Professional’s Choice Sports

[PLAY] – Ransomware Victim: Wright Tool

[PLAY] – Ransomware Victim: Tavo Packaging Inc

You may have missed