OSINT

Malware Analysis – evasion – fbd0afe5bd3d0d61feb21680b304d7ae

October 21, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: fbd0afe5bd3d0d61feb21680b304d7aeSHA1: 2c61d60f8b1b52688b5642f646c89dad124f466eANALYSIS DATE: 2022-10-21T10:53:04ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – evasion – cc88f21406eaeed70a890f53e57c98b6

October 21, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: cc88f21406eaeed70a890f53e57c98b6SHA1: 1d497ae9e273441f1e800d3efafbf50119dd3242ANALYSIS DATE: 2022-10-21T10:52:05ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – – 25a65cbfc9d34f5367acb5ea2a32e3ef

October 21, 2022

Score: 7 MALWARE FAMILY: TAGS:MD5: 25a65cbfc9d34f5367acb5ea2a32e3efSHA1: 4bbea845641b884f5e07005881caa3a157f3ce55ANALYSIS DATE: 2022-10-21T10:52:05ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – – d199c202beb4380e2f675e93c36cf0f4

October 21, 2022

Score: 7 MALWARE FAMILY: TAGS:MD5: d199c202beb4380e2f675e93c36cf0f4SHA1: 94037ffde778e4f0c49bc357d8e84a991f3baf6fANALYSIS DATE: 2022-10-21T10:53:04ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – c4951ce5e946596e0356979341e6f240

October 21, 2022

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: c4951ce5e946596e0356979341e6f240SHA1: 530e602b959009f80b5161aeb0eaec7c75dfd826ANALYSIS DATE: 2022-10-21T10:54:03ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – – 43bd113a0952172bcba57055f5a707bb

October 21, 2022

Score: 7 MALWARE FAMILY: TAGS:MD5: 43bd113a0952172bcba57055f5a707bbSHA1: accdbdc724fbe4a45c4de5f9f0bdfc369e8fb35dANALYSIS DATE: 2022-10-21T10:53:04ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – smokeloader – 800687c66b176288d45e1a1b2fd59009

October 21, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 800687c66b176288d45e1a1b2fd59009SHA1: 386b050115a3624751c825252931fe333d8cdcd4ANALYSIS DATE: 2022-10-21T10:56:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

News URSNIF variant doesn’t support banking features

October 21, 2022

A new variant of the popular Ursnif malware is used as a backdoor to deliver next-stage payloads and steal sensitive...

Daily Vulnerability Trends: Fri Oct 21 2022

October 21, 2022

Daily Vulnerability Trends (sourced from VulnMon) CVE NAMECVE DescriptionCVE-2022-41852Those using JXPath to interpret untrusted XPath expressions may be vulnerable to...

LockBit 3.0 Ransomware Victim: eureka-puzzle[.]eu

October 21, 2022

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

LockBit 3.0 Ransomware Victim: eeckman[.]eu

October 21, 2022

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Healthcare system Advocate Aurora Health data breach potentially impacted 3M patients

October 21, 2022

Healthcare system Advocate Aurora Health (AAH) disclosed a data breach that exposed the personal data of 3,000,000 patients. The US-based...

Malware Analysis – persistence – 67539d1128a73ced00a692b4f3bdd401

October 21, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 67539d1128a73ced00a692b4f3bdd401SHA1: d7a945d19f1c6d2c9cd8c27ee81e5f0a76579068ANALYSIS DATE: 2022-10-21T02:00:27ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091, T1060, T1112...

Malware Analysis – evasion – 7566b7d7a5839725c9c64961a0c8b920

October 21, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomwareMD5: 7566b7d7a5839725c9c64961a0c8b920SHA1: 1c580b6f7f3276e68cbccaf4e0857ec490fe6775ANALYSIS DATE: 2022-10-20T06:11:45ZTTPS: T1490, T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – cf711afc5eca3498429bb1422b41d7a5

October 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: cf711afc5eca3498429bb1422b41d7a5SHA1: 364304eb925d2702c123736c16ab07e9d10dcf6dANALYSIS DATE: 2022-10-21T01:58:03ZTTPS: T1012, T1082, T1005, T1081,...

Malware Analysis – smokeloader – e3ab48a33e6c51a9585255a0a0170830

October 21, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: e3ab48a33e6c51a9585255a0a0170830SHA1: 278f874f675777f9b22837202eba8ac4164835eaANALYSIS DATE: 2022-10-21T02:13:09ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – d01e1338a1c7a2aa61733ef47a7ac35d

October 21, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: d01e1338a1c7a2aa61733ef47a7ac35dSHA1: 966185c9056e67418f987dbc892d948e908f1802ANALYSIS DATE: 2022-10-21T02:01:05ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 476635a30e84fa5142f3b0258807cdc1

October 21, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 476635a30e84fa5142f3b0258807cdc1SHA1: 48e256b43da8ae4a2dc4f788d1e8e60ba6a5efc3ANALYSIS DATE: 2022-10-21T02:05:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – d40382764d622393e1a1bb318c43b5e8

October 21, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: d40382764d622393e1a1bb318c43b5e8SHA1: e3b59e16efdb0843e0e195dc67b305201602ee02ANALYSIS DATE: 2022-10-21T02:07:06ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – f7788b8b55dc237a0e70a76712cd67b8

October 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: f7788b8b55dc237a0e70a76712cd67b8SHA1: 77b729ddebfdf4c258fca4dedeabdeb0c4b26c32ANALYSIS DATE: 2022-10-21T02:44:32ZTTPS: T1053, T1005, T1081, T1012,...

Malware Analysis – smokeloader – c629d6f58117d412173063ef636e6b65

October 21, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: c629d6f58117d412173063ef636e6b65SHA1: 46c77ccde087080cb5ade178f10e813d48dac71bANALYSIS DATE: 2022-10-21T03:06:13ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – dd8ebe57e3ae851a6bc1c6b34067ea21

October 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: dd8ebe57e3ae851a6bc1c6b34067ea21SHA1: 0a48af08cfcbebd2af414e4e0780608ae8885d4cANALYSIS DATE: 2022-10-21T02:48:11ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – djvu – 6711fe2dd09ebaa38866fd2347707c5c

October 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, stealerMD5: 6711fe2dd09ebaa38866fd2347707c5cSHA1: eb2788616697987a23aa49421e26c9aacc1742a3ANALYSIS DATE: 2022-10-21T02:38:04ZTTPS: T1222, T1060, T1112, T1082, T1012,...

Malware Analysis – persistence – 48a90ac8127abfd31c44ffcb0feccb79

October 21, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 48a90ac8127abfd31c44ffcb0feccb79SHA1: 8a1ffd8215b73fc85999f837ff275430f3062186ANALYSIS DATE: 2022-10-21T03:40:18ZTTPS: T1082, T1107, T1490, T1091, T1060, T1112, T1005, T1081...

OSINT

Malware Analysis – evasion – fbd0afe5bd3d0d61feb21680b304d7ae

Malware Analysis – evasion – cc88f21406eaeed70a890f53e57c98b6

Malware Analysis – – 25a65cbfc9d34f5367acb5ea2a32e3ef

Malware Analysis – – d199c202beb4380e2f675e93c36cf0f4

Malware Analysis – ransomware – c4951ce5e946596e0356979341e6f240

Malware Analysis – – 43bd113a0952172bcba57055f5a707bb

Malware Analysis – smokeloader – 800687c66b176288d45e1a1b2fd59009

News URSNIF variant doesn’t support banking features

Daily Vulnerability Trends: Fri Oct 21 2022

LockBit 3.0 Ransomware Victim: eureka-puzzle[.]eu

LockBit 3.0 Ransomware Victim: eeckman[.]eu

Healthcare system Advocate Aurora Health data breach potentially impacted 3M patients

Malware Analysis – persistence – 67539d1128a73ced00a692b4f3bdd401

Malware Analysis – evasion – 7566b7d7a5839725c9c64961a0c8b920

Malware Analysis – djvu – cf711afc5eca3498429bb1422b41d7a5

Malware Analysis – smokeloader – e3ab48a33e6c51a9585255a0a0170830

Malware Analysis – smokeloader – d01e1338a1c7a2aa61733ef47a7ac35d

Malware Analysis – smokeloader – 476635a30e84fa5142f3b0258807cdc1

Malware Analysis – smokeloader – d40382764d622393e1a1bb318c43b5e8

Malware Analysis – djvu – f7788b8b55dc237a0e70a76712cd67b8

Malware Analysis – smokeloader – c629d6f58117d412173063ef636e6b65

Malware Analysis – djvu – dd8ebe57e3ae851a6bc1c6b34067ea21

Malware Analysis – djvu – 6711fe2dd09ebaa38866fd2347707c5c

Malware Analysis – persistence – 48a90ac8127abfd31c44ffcb0feccb79

HackerOne Bug Bounty Disclosure: socks-heap-buffer-overflow-via-malicious-http-redirect-with-oversized-hostname-abdullah

HackerOne Bug Bounty Disclosure: buffer-over-read-missing-nul-termination-in-addvariable-causes-undefined-behavior-sagorhawlader

HackerOne Bug Bounty Disclosure: blockstack-org-is-vulnerable-to-cve-cve–x-aulia

HackerOne Bug Bounty Disclosure: blockstack-browser-for-mac-leaks-core-api-password-to-rd-parties-frozensolid

HackerOne Bug Bounty Disclosure: logout-bypass-vulnerability-in-hiro-so-anonymous

You may have missed