OSINT

Malware Analysis – ransomware – 8b9c9005f476efee5bc8572ebe809c75

October 18, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 8b9c9005f476efee5bc8572ebe809c75SHA1: b0e66376cb6689cbb274c96eafa5f2188db1cf7aANALYSIS DATE: 2022-10-18T15:43:56ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – d8499954c090d87e4b96f8f23fba2bf9

October 18, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: d8499954c090d87e4b96f8f23fba2bf9SHA1: 755c3889c6215d8fbf4d285c0fab265d33d638c2ANALYSIS DATE: 2022-10-18T15:43:45ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 8c23878d1e3d7e55e550fb9f448ee9cd

October 18, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 8c23878d1e3d7e55e550fb9f448ee9cdSHA1: 5947275ba5ba1d4bf4c142b149b49b971541de83ANALYSIS DATE: 2022-10-18T15:44:11ZTTPS: T1091, T1005, T1081, T1082, T1107, T1490 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 785707b3639ae4314f42739052fe4522

October 18, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 785707b3639ae4314f42739052fe4522SHA1: fa1662e7d4478ab2b90a896ad3aff21d6a750d0aANALYSIS DATE: 2022-10-18T15:44:22ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – evasion – be971d880e75cd48a669ea9e45f6f022

October 18, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: be971d880e75cd48a669ea9e45f6f022SHA1: 43b24f5108ff16c56e836082da80128fe516d8afANALYSIS DATE: 2022-10-18T16:40:18ZTTPS: T1107, T1490, T1012, T1120, T1082, T1031, T1562, T1489 ScoreMeaningExample10Known badA...

Malware Analysis – djvu – 30cc5141307b477bad1d38b3dc995a14

October 18, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: 30cc5141307b477bad1d38b3dc995a14SHA1:...

Malware Analysis – persistence – c0555bca1e61680eebfdc150c69f0e61

October 18, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: c0555bca1e61680eebfdc150c69f0e61SHA1: 11436e8b833d7c5b7e5484232e0b3599ed9f523eANALYSIS DATE: 2022-10-18T16:20:23ZTTPS: T1005, T1081, T1107, T1490, T1082, T1091, T1060, T1112...

Malware Analysis – persistence – 045fd4d06498c33b0b136601bc41114f

October 18, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 045fd4d06498c33b0b136601bc41114fSHA1: 78c5c444c587df842284bcf054f3b75047330e37ANALYSIS DATE: 2022-10-18T16:20:29ZTTPS: T1107, T1490, T1091, T1060, T1112, T1005, T1081, T1082...

OSINT

Malware Analysis – ransomware – 8b9c9005f476efee5bc8572ebe809c75

Malware Analysis – ransomware – d8499954c090d87e4b96f8f23fba2bf9

Malware Analysis – ransomware – 8c23878d1e3d7e55e550fb9f448ee9cd

Malware Analysis – ransomware – 785707b3639ae4314f42739052fe4522

Malware Analysis – evasion – be971d880e75cd48a669ea9e45f6f022

Malware Analysis – djvu – 30cc5141307b477bad1d38b3dc995a14

Malware Analysis – persistence – c0555bca1e61680eebfdc150c69f0e61

Malware Analysis – persistence – 045fd4d06498c33b0b136601bc41114f

Law enforcement arrested 31 suspects for stealing cars by hacking key fobs

China-linked APT41 group targets Hong Kong with Spyder Loader

Critical Remote Code Execution issue impacts popular post-exploitation toolkit Cobalt Strike

LockBit 3.0 Ransomware Victim: oomiya[.]co[.]jp

xnLinkFinder – A Python Tool Used To Discover Endpoints (And Potential Parameters) For A Given Target

Over 17000 Fortinet devices exposed online are very likely vulnerable to CVE-2022-40684

CVE-2022-28762: Zoom for macOS contains a debugging port misconfiguration

DiceyF deploys GamePlayerFramework in online casino development studio

Retail giant Woolworths discloses data breach of MyDeal online marketplace

New UEFI rootkit Black Lotus offered for sale at $5,000

Japanese tech firm Oomiya hit by LockBit 3.0. Multiple supply chains potentially impacted

JSubFinder – Searches Webpages For Javascript And Analyzes Them For Hidden Subdomains And Secrets

Bulgaria hit by a cyber attack originating from Russia

Interpol arrested 75 members of the cybercrime ring Black Axe

45,654 VMware ESXi servers reached End of Life on Oct. 15

Mysterious Prestige ransomware targets organizations in Ukraine and Poland

[BLACKSHRANTAC] – Ransomware Victim: TENAX Law Group PC

[DEVMAN] – Ransomware Victim: juntalocal[.]cdmx[.]gob[.]mx

[BLACKNEVAS] – Ransomware Victim: LATCOM

[DEVMAN] – Ransomware Victim: ocu[.]o**

[RADAR] – Ransomware Victim: Fouad Alghanim & Sons Group of Companies Holding W[.]L[.]L[.]

You may have missed