OSINT

Malware Analysis – djvu – 354aa164855b5cbaeafcd282b9a60958

October 13, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: 354aa164855b5cbaeafcd282b9a60958SHA1: 42023de2bf25ca33b5538b21655e5321594e8cf0ANALYSIS DATE:...

Malware Analysis – chaos – 101104ab266f519ef2eec3ef1137bcd2

October 13, 2022

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, ransomwareMD5: 101104ab266f519ef2eec3ef1137bcd2SHA1: 2aedc1d100bda8064273301d7c1433285220b73eANALYSIS DATE: 2022-10-13T10:21:04ZTTPS: T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – djvu – e2e744fb489405d8fdb26e14d960fb7a

October 13, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: e2e744fb489405d8fdb26e14d960fb7aSHA1: 7c2b44637e41e8d03a9069a4979cc60cfcb05f2dANALYSIS DATE: 2022-10-13T10:31:08ZTTPS: T1012, T1082, T1060, T1112,...

Malware Analysis – djvu – bb620b4c8cd29b0e565beb009a797cc4

October 13, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: bb620b4c8cd29b0e565beb009a797cc4SHA1: 1a1ed9f539edb451729fa238d0f7393e97ffe9c6ANALYSIS DATE: 2022-10-13T10:15:47ZTTPS: T1012, T1082, T1053, T1060,...

Cobalt Stike Beacon Detected – 43[.]142[.]81[.]62:80

October 13, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

YoWhatsApp, unofficial WhatsApp Android app spreads the Triada Trojan

October 13, 2022

Kaspersky researchers warn of a recently discovered malicious version of a popular WhatsApp messenger mod dubbed YoWhatsApp. Kaspersky researchers discovered...

Daily Vulnerability Trends: Thu Oct 13 2022

October 13, 2022

Daily Vulnerability Trends (sourced from VulnMon) CVE NAMECVE DescriptionCVE-2022-31680The vCenter Server contains an unsafe deserialisation vulnerability in the PSC (Platform...

Malicious WhatsApp mod distributed through legitimate apps

October 13, 2022

Last year, we wrote about the Triada Trojan inside FMWhatsApp, a modified WhatsApp build. At that time, we discovered that...

LockBit 3.0 Ransomware Victim: okibrasil[.]com

October 13, 2022

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

LockBit 3.0 Ransomware Victim: independence[.]com[.]co

October 13, 2022

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

LockBit 3.0 Ransomware Victim: cnachile[.]cl

October 13, 2022

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Malware Analysis – evasion – 78fb313740232b13615c14de5fe81d70

October 13, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomwareMD5: 78fb313740232b13615c14de5fe81d70SHA1: 45a8e75a5bb0e687a206dc031f21603907dbb8e0ANALYSIS DATE: 2022-10-12T21:41:16ZTTPS: T1082, T1112, T1060, T1491, T1004, T1064 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – dab2bb8982c1da0048f560e930afe95c

October 13, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: dab2bb8982c1da0048f560e930afe95cSHA1: 8b6418b55fec99d01ea7474231e1827f2ca56cbaANALYSIS DATE: 2022-10-13T02:41:03ZTTPS: T1091, T1005, T1081, T1082, T1107, T1490 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – cd0cf0b1117f9e493726ed593d5bf916

October 13, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: cd0cf0b1117f9e493726ed593d5bf916SHA1: 6e6cb292ac779f1030240d42562dad4e2e99cd7bANALYSIS DATE: 2022-10-13T02:41:03ZTTPS: T1107, T1490, T1091, T1005, T1081, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – smokeloader – 449b7be8f61cd4ffd5a80e8851ead125

October 13, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 449b7be8f61cd4ffd5a80e8851ead125SHA1: 25d911c7ff9d6d4fea8ab4aca26ff4d5559b35f7ANALYSIS DATE: 2022-10-13T02:31:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ransomware – 2935ee61391af466b8d503e016abe89c

October 13, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 2935ee61391af466b8d503e016abe89cSHA1: f0e642ae088d09252c2bd1d9b3aa57a5349c8627ANALYSIS DATE: 2022-10-13T03:20:35ZTTPS: T1112, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – ransomware – f4eea2dda8834439364e89108e16fd2a

October 13, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: f4eea2dda8834439364e89108e16fd2aSHA1: 19237f6fef37c80dc5df451057735cf720581b64ANALYSIS DATE: 2022-10-13T03:20:06ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 1306caaa78c7749015bda1066124157a

October 13, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 1306caaa78c7749015bda1066124157aSHA1: 632fa98d225c8e3a40ef50b39c34f1791acdb902ANALYSIS DATE: 2022-10-13T03:21:04ZTTPS: T1082, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – ransomware – b1e5623d6e1520cbbe3ff97333118ddd

October 13, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: b1e5623d6e1520cbbe3ff97333118dddSHA1: 6566483e5b3350b55c5ef53623d87bcfc7be47ffANALYSIS DATE: 2022-10-13T03:21:04ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – d99a0b7820ff467bb1aad340e3ef3f88

October 13, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: d99a0b7820ff467bb1aad340e3ef3f88SHA1: a362e0f491ab3e2187f0ef6be6549a60320e5b40ANALYSIS DATE: 2022-10-13T03:41:03ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 96a55bb485d6ae72be9da2d0b87857dc

October 13, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 96a55bb485d6ae72be9da2d0b87857dcSHA1: 27d650da86dfc94347b6b114ae96858f01448de8ANALYSIS DATE: 2022-10-13T03:41:03ZTTPS: T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – danabot – babc8419c728d75ea8ee8c3b1cd9baf2

October 13, 2022

Score: 10 MALWARE FAMILY: danabotTAGS:family:danabot, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, banker, collection, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: babc8419c728d75ea8ee8c3b1cd9baf2SHA1:...

Malware Analysis – djvu – c13fa46fd3fe447a13ebaea04e252a09

October 13, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: c13fa46fd3fe447a13ebaea04e252a09SHA1: 200436ee43193d6998304c58ed06bcfdba73a002ANALYSIS DATE: 2022-10-13T03:21:06ZTTPS: T1082, T1005, T1081, T1012,...

Malware Analysis – ransomware – 4f65eec412c37cc7a975a8ea106bad54

October 13, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 4f65eec412c37cc7a975a8ea106bad54SHA1: 8d0a356b9ad5531ddebfc48f1674b83473fd4769ANALYSIS DATE: 2022-10-13T03:41:03ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

OSINT

Malware Analysis – djvu – 354aa164855b5cbaeafcd282b9a60958

Malware Analysis – chaos – 101104ab266f519ef2eec3ef1137bcd2

Malware Analysis – djvu – e2e744fb489405d8fdb26e14d960fb7a

Malware Analysis – djvu – bb620b4c8cd29b0e565beb009a797cc4

Cobalt Stike Beacon Detected – 43[.]142[.]81[.]62:80

YoWhatsApp, unofficial WhatsApp Android app spreads the Triada Trojan

Daily Vulnerability Trends: Thu Oct 13 2022

Malicious WhatsApp mod distributed through legitimate apps

LockBit 3.0 Ransomware Victim: okibrasil[.]com

LockBit 3.0 Ransomware Victim: independence[.]com[.]co

LockBit 3.0 Ransomware Victim: cnachile[.]cl

Malware Analysis – evasion – 78fb313740232b13615c14de5fe81d70

Malware Analysis – ransomware – dab2bb8982c1da0048f560e930afe95c

Malware Analysis – ransomware – cd0cf0b1117f9e493726ed593d5bf916

Malware Analysis – smokeloader – 449b7be8f61cd4ffd5a80e8851ead125

Malware Analysis – ransomware – 2935ee61391af466b8d503e016abe89c

Malware Analysis – ransomware – f4eea2dda8834439364e89108e16fd2a

Malware Analysis – ransomware – 1306caaa78c7749015bda1066124157a

Malware Analysis – ransomware – b1e5623d6e1520cbbe3ff97333118ddd

Malware Analysis – ransomware – d99a0b7820ff467bb1aad340e3ef3f88

Malware Analysis – ransomware – 96a55bb485d6ae72be9da2d0b87857dc

Malware Analysis – danabot – babc8419c728d75ea8ee8c3b1cd9baf2

Malware Analysis – djvu – c13fa46fd3fe447a13ebaea04e252a09

Malware Analysis – ransomware – 4f65eec412c37cc7a975a8ea106bad54

[QILIN] – Ransomware Victim: ANCO

[AKIRA] – Ransomware Victim: Montage Marketing Services

[AKIRA] – Ransomware Victim: Morris Communications Company LLC

[AKIRA] – Ransomware Victim: Seasons Federal Credit Union

[INCRANSOM] – Ransomware Victim: Vitalmex

You may have missed