Security

Malware Analysis – evasion – 920256744075b2d2cffcfc5f62c7f2a9

November 29, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 920256744075b2d2cffcfc5f62c7f2a9SHA1: 39f2038cf721bc419feab931b3193d9b137d8c83ANALYSIS DATE: 2022-11-28T11:20:29ZTTPS: T1082, T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware...

Malware Analysis – amadey – d4988c46593dd409f6a35e3da0c2d372

November 29, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:dcrat, family:djvu, family:smokeloader, family:vidar, botnet:1148, botnet:517, backdoor, collection, discovery, infostealer, persistence, ransomware, rat, spyware, stealer,...

Malware Analysis – gandcrab – 85fab8174bc91d7c0538fb67336e852c

November 29, 2022

Score: 10 MALWARE FAMILY: gandcrabTAGS:family:gandcrab, backdoor, persistence, ransomwareMD5: 85fab8174bc91d7c0538fb67336e852cSHA1: 0c7fcf278d72608caf7443e8830f2365c67f9916ANALYSIS DATE: 2022-11-29T15:06:06ZTTPS: T1012, T1120, T1082, T1060, T1112 ScoreMeaningExample10Known badA malware...

Malware Analysis – evasion – 00cb45c4efd4053cef8bb8567dc0638e

November 29, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 00cb45c4efd4053cef8bb8567dc0638eSHA1: db0793c3b395697495e89460c35b0b3947c028f1ANALYSIS DATE: 2022-11-28T11:28:36ZTTPS: T1082, T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware...

Malware Analysis – persistence – 882f792ef927f4e8321e082d9a4d85ff

November 29, 2022

Score: 8 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 882f792ef927f4e8321e082d9a4d85ffSHA1: 0f7989d7ae20d6be6f18c38ae255a5ca1397a8dfANALYSIS DATE: 2022-11-29T15:43:03ZTTPS: T1005, T1081, T1060, T1112 ScoreMeaningExample10Known badA malware family...

Malware Analysis – amadey – 1eced7a5a078e0c14805e3d6cc93d280

November 29, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, backdoor, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 1eced7a5a078e0c14805e3d6cc93d280SHA1: 76d3e77ea0b6360f7d7483cb72420fdd48c23fecANALYSIS DATE: 2022-11-29T16:20:18ZTTPS: T1060, T1112,...

Malware Analysis – discovery – e46c76300df9430421c7e13d95e29ee1

November 29, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, evasion, exploit, ransomware, trojanMD5: e46c76300df9430421c7e13d95e29ee1SHA1: 27d15bc5235356a821ee0dbcf2e51d7905a57f55ANALYSIS DATE: 2022-11-29T16:15:05ZTTPS: T1082, T1053, T1222, T1031, T1112, T1089, T1012,...

Malware Analysis – persistence – 1d999ba847346e80594759ff8c32da49

November 29, 2022

Score: 6 MALWARE FAMILY: persistenceTAGS:persistenceMD5: 1d999ba847346e80594759ff8c32da49SHA1: 7abf3923d540addcc82a2cc0794c815dd6385cd1ANALYSIS DATE: 2022-11-29T15:43:20ZTTPS: T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – persistence – 2de26af68d2d6d73dae987eb2cdedd6e

November 29, 2022

Score: 6 MALWARE FAMILY: persistenceTAGS:persistenceMD5: 2de26af68d2d6d73dae987eb2cdedd6eSHA1: 34d7fdb906b79f2912598378359668c57e65bb5dANALYSIS DATE: 2022-11-29T15:43:35ZTTPS: T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – amadey – be134b7a6e1be0a218db18cf47ac9868

November 29, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:dcrat, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, infostealer, persistence, ransomware, rat, spyware, stealer, trojanMD5:...

Malware Analysis – djvu – 6cec15b58436d4c968d22bf229cd30c5

November 29, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, stealerMD5: 6cec15b58436d4c968d22bf229cd30c5SHA1: 1dc15ac0bc6346ed3ceefe4dea5e806ae65106dbANALYSIS DATE: 2022-11-29T17:03:11ZTTPS: T1082, T1012, T1053, T1060, T1112,...

Malware Analysis – evasion – 46780d2454e31a55bd5738667b0a0232

November 29, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 46780d2454e31a55bd5738667b0a0232SHA1: c49ebee0c97e4de75185aa74f94659914eb4960cANALYSIS DATE: 2022-11-29T16:26:34ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – play – 2e8897ef38d4abe4861360a4b6e895d5

November 29, 2022

Score: 10 MALWARE FAMILY: playTAGS:family:play, ransomware, spyware, stealerMD5: 2e8897ef38d4abe4861360a4b6e895d5SHA1: f668b1110d8a6b1a3f638fd8a6276a7a1efe18dbANALYSIS DATE: 2022-11-29T17:12:47ZTTPS: T1005, T1081, T1012, T1120, T1082 ScoreMeaningExample10Known badA malware...

CISA: CISA Releases Seven Industrial Control Systems Advisories

November 29, 2022

CISA Releases Seven Industrial Control Systems Advisories CISA released seven (7) Industrial Control Systems (ICS) advisories on November 29, 2022....

CISA adds Oracle Fusion Middleware flaw to its Known Exploited Vulnerabilities Catalog

November 29, 2022

CISA added a critical flaw impacting Oracle Fusion Middleware, tracked as CVE-2021-35587, to its Known Exploited Vulnerabilities Catalog. The U.S. Cybersecurity...

Malware Analysis – evasion – 59ef3417d45e5f5c01e9618aa5e98d8c

November 29, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 59ef3417d45e5f5c01e9618aa5e98d8cSHA1: b130a6752cd9ca2ba059b90be2f058006467006bANALYSIS DATE: 2022-11-28T05:38:31ZTTPS: T1107, T1490, T1082, T1060, T1112 ScoreMeaningExample10Known badA malware...

Malware Analysis – persistence – 7599d5919745385851e310c31135d0cc

November 29, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 7599d5919745385851e310c31135d0ccSHA1: 3c473d1f04329bc2a59d8f363867b7a477c83af4ANALYSIS DATE: 2022-11-28T05:36:38ZTTPS: T1107, T1490, T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – evasion – ad1fbf4bd151e7d15210a1825d5f09e4

November 29, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealer, trojanMD5: ad1fbf4bd151e7d15210a1825d5f09e4SHA1: 32f5e56271ad25af3c1ef94df6cf3db010508d8dANALYSIS DATE: 2022-11-28T05:25:56ZTTPS: T1060, T1112, T1012, T1082, T1158, T1088,...

Malware Analysis – persistence – 06b4b16ce0ad5d1be4ab1c30a7785ba0

November 29, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 06b4b16ce0ad5d1be4ab1c30a7785ba0SHA1: 830a92afc80440e39dd3259ec6546f21adf89149ANALYSIS DATE: 2022-11-28T05:38:38ZTTPS: T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – evasion – ad1860ba37160c5cd9c8edfd9a6f244e

November 29, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealer, trojanMD5: ad1860ba37160c5cd9c8edfd9a6f244eSHA1: afbcf0a29389b0dd2c404d3f510d9bad45c25766ANALYSIS DATE: 2022-11-28T05:43:01ZTTPS: T1112, T1012, T1082, T1060, T1158, T1088,...

Malware Analysis – persistence – 1e4e9740b6dfd25244f39aa4bd5321c9

November 29, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 1e4e9740b6dfd25244f39aa4bd5321c9SHA1: 19e7e9d26a12a3441ed44e32d7985e829a9acdbcANALYSIS DATE: 2022-11-28T05:43:54ZTTPS: T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – – 56d9e668c269c3af0ef56c1449f4d07c

November 29, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: 56d9e668c269c3af0ef56c1449f4d07cSHA1: 3c9d803e3f03f4390d05cc6d260986006684c725ANALYSIS DATE: 2022-11-28T05:44:21ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – persistence – 17255f13e6914fbc1dd9dec40a0f05cd

November 29, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 17255f13e6914fbc1dd9dec40a0f05cdSHA1: 69142df7d8539ceec58cd37b5b2ed4197de709edANALYSIS DATE: 2022-11-28T05:41:03ZTTPS: T1107, T1490, T1082, T1060, T1112 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – persistence – b19031e17bc0fbe1b2d2c0169afc3c98

November 29, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: b19031e17bc0fbe1b2d2c0169afc3c98SHA1: 7d9f905adde04ee646eb54c2e791108ed707ebedANALYSIS DATE: 2022-11-28T05:50:00ZTTPS: T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Security

Malware Analysis – evasion – 920256744075b2d2cffcfc5f62c7f2a9

Malware Analysis – amadey – d4988c46593dd409f6a35e3da0c2d372

Malware Analysis – gandcrab – 85fab8174bc91d7c0538fb67336e852c

Malware Analysis – evasion – 00cb45c4efd4053cef8bb8567dc0638e

Malware Analysis – persistence – 882f792ef927f4e8321e082d9a4d85ff

Malware Analysis – amadey – 1eced7a5a078e0c14805e3d6cc93d280

Malware Analysis – discovery – e46c76300df9430421c7e13d95e29ee1

Malware Analysis – persistence – 1d999ba847346e80594759ff8c32da49

Malware Analysis – persistence – 2de26af68d2d6d73dae987eb2cdedd6e

Malware Analysis – amadey – be134b7a6e1be0a218db18cf47ac9868

Malware Analysis – djvu – 6cec15b58436d4c968d22bf229cd30c5

Malware Analysis – evasion – 46780d2454e31a55bd5738667b0a0232

Malware Analysis – play – 2e8897ef38d4abe4861360a4b6e895d5

CISA: CISA Releases Seven Industrial Control Systems Advisories

CISA adds Oracle Fusion Middleware flaw to its Known Exploited Vulnerabilities Catalog

Malware Analysis – evasion – 59ef3417d45e5f5c01e9618aa5e98d8c

Malware Analysis – persistence – 7599d5919745385851e310c31135d0cc

Malware Analysis – evasion – ad1fbf4bd151e7d15210a1825d5f09e4

Malware Analysis – persistence – 06b4b16ce0ad5d1be4ab1c30a7785ba0

Malware Analysis – evasion – ad1860ba37160c5cd9c8edfd9a6f244e

Malware Analysis – persistence – 1e4e9740b6dfd25244f39aa4bd5321c9

Malware Analysis – – 56d9e668c269c3af0ef56c1449f4d07c

Malware Analysis – persistence – 17255f13e6914fbc1dd9dec40a0f05cd

Malware Analysis – persistence – b19031e17bc0fbe1b2d2c0169afc3c98

Miljödata – 870,108 breached accounts

Cobalt Strike Beacon Detected – 119[.]91[.]203[.]199:88

Cobalt Strike Beacon Detected – 106[.]54[.]239[.]134:80

Cobalt Strike Beacon Detected – 81[.]69[.]98[.]230:50010

Cobalt Strike Beacon Detected – 103[.]43[.]18[.]10:80

You may have missed