Security

Malware Analysis – wannacry – f7c34b753c7230c8a312de2a6a1a2ab0

October 24, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: f7c34b753c7230c8a312de2a6a1a2ab0SHA1: 635ddf63f95e34967d2d8653d2d08f4f76177876ANALYSIS DATE: 2022-10-24T10:40:20ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – djvu – 1823a652c5e16ec21c93b389ace3aa4a

October 24, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, botnet:google2, botnet:nam7, botnet:newe, botnet:slovarik15btc, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5:...

Malware Analysis – locky – da863294f14ea0c1ab3e68ba6b45f0cf

October 24, 2022

Score: 10 MALWARE FAMILY: lockyTAGS:family:locky, ransomwareMD5: da863294f14ea0c1ab3e68ba6b45f0cfSHA1: c9143d4a1ef5d493660832efef9ff5df52e39a55ANALYSIS DATE: 2022-10-24T10:28:51ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Security experts targeted with malicious CVE PoC exploits on GitHub

October 24, 2022

Researchers discovered thousands of GitHub repositories that offer fake proof-of-concept (PoC) exploits for various flaws used to distribute malware. A team...

Malware Analysis – djvu – 1767f81e6b15d8125fedcf58948e3a0a

October 24, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 1767f81e6b15d8125fedcf58948e3a0aSHA1: de2a93d8806ba8a0f33f24bbf37260dbf54c64b2ANALYSIS DATE: 2022-10-24T02:03:24ZTTPS: T1012, T1082, T1222, T1053,...

Malware Analysis – discovery – 94ea4ebdb5ff16a4468fe5fdea591243

October 24, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, evasion, ransomware, spyware, stealerMD5: 94ea4ebdb5ff16a4468fe5fdea591243SHA1: 737419b9a66f61bb50b692aa7cd1eb2d740b9e4cANALYSIS DATE: 2022-10-24T02:40:22ZTTPS: T1490, T1059, T1107, T1005, T1081, T1012, T1120,...

Malware Analysis – djvu – 5e9f2be25372093f388c2270f6c16d7c

October 24, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 5e9f2be25372093f388c2270f6c16d7cSHA1: 89aa7779184920d4a942a55ef432e88f99b3b94eANALYSIS DATE: 2022-10-24T02:16:17ZTTPS: T1012, T1082, T1222, T1060,...

Malware Analysis – ransomware – cb211f677a774d5475c55fa639041eb1

October 24, 2022

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: cb211f677a774d5475c55fa639041eb1SHA1: 9caf0aeb45eb49e895e3bb283655a34d732ba9efANALYSIS DATE: 2022-10-24T02:40:15ZTTPS: T1082, T1012, T1120 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – wannacry – ad64bbe31bf2f9c77721bd430ec06fc0

October 24, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: ad64bbe31bf2f9c77721bd430ec06fc0SHA1: ff83b0292bdc8922ed327a3d52755e0ad52cd51eANALYSIS DATE: 2022-10-24T03:20:20ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – djvu – 436611c2bcb98900e1511bf06fa8ed69

October 24, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 436611c2bcb98900e1511bf06fa8ed69SHA1: 82d595b9d260714b4790cbe0a37a7b9972243a04ANALYSIS DATE: 2022-10-24T03:33:03ZTTPS: T1053, T1012, T1060, T1112,...

Malware Analysis – djvu – 22a9b2595531bd1d5a53cf2d72a30f8a

October 24, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 22a9b2595531bd1d5a53cf2d72a30f8aSHA1: 6738e9bac3b8512c0b0def79ff64a4349cb9edc2ANALYSIS DATE: 2022-10-24T03:27:08ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – ransomware – 9d8ef3799fb470997ad800632ec0b2aa

October 24, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 9d8ef3799fb470997ad800632ec0b2aaSHA1: 403fe426f70a0e998b1d55eaff6bc3f3c736cfb7ANALYSIS DATE: 2022-10-24T03:40:17ZTTPS: T1107, T1490, T1091, T1005, T1081, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – dcrat – bf47a099e77b3de9ac0bb423f28c0fba

October 24, 2022

Score: 10 MALWARE FAMILY: dcratTAGS:family:dcrat, family:djvu, family:redline, family:smokeloader, family:vidar, botnet:517, botnet:google2, botnet:mario23_10, botnet:nam7, botnet:slovarikinstalls, backdoor, brand:microsoft, collection, discovery, infostealer, persistence,...

Malware Analysis – evasion – 4c3f4cc7a76a621c7fdc52039d2274c2

October 24, 2022

Score: 8 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 4c3f4cc7a76a621c7fdc52039d2274c2SHA1: a023bb4d47c73d1112bc81559c7b4987d9fff755ANALYSIS DATE: 2022-10-24T04:30:05ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – djvu – dd303c8898ac01ca98d2dec144d6557c

October 24, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: dd303c8898ac01ca98d2dec144d6557cSHA1: d022402715e8edac5f6fe905f14e9d549cf6f40fANALYSIS DATE: 2022-10-24T03:43:59ZTTPS: T1060, T1112, T1082, T1012,...

Malware Analysis – djvu – e380d1787e67a37c1a95ee975f924e81

October 24, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: e380d1787e67a37c1a95ee975f924e81SHA1: 69f7646edb8ffd6fc66374817a3ce0ef96d20e12ANALYSIS DATE: 2022-10-24T04:23:54ZTTPS: T1012, T1060, T1112, T1082,...

Malware Analysis – ransomware – d9709124efbd1d95435e4ca9e854d37d

October 24, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: d9709124efbd1d95435e4ca9e854d37dSHA1: f43d1cdc57d38b92185ef3157bf174976edf07e1ANALYSIS DATE: 2022-10-24T04:20:16ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – a3e5ea6ffe5935f03762ec7ebb6d5587

October 24, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: a3e5ea6ffe5935f03762ec7ebb6d5587SHA1: 8f0cf626239e07362909901e67e99dfdff0d57d8ANALYSIS DATE: 2022-10-24T04:40:16ZTTPS: T1107, T1490, T1091, T1005, T1081, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – djvu – 6550a62e79b1783a785f37bc0dc87007

October 24, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 6550a62e79b1783a785f37bc0dc87007SHA1: 6cd443018cfb7203da41bbc7c2cf35d0f928bfecANALYSIS DATE: 2022-10-24T04:33:26ZTTPS: T1082, T1012, T1053, T1005,...

Malware Analysis – evasion – 7624ff12dbea26dbd75f638093f3f2db

October 24, 2022

Score: 8 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 7624ff12dbea26dbd75f638093f3f2dbSHA1: 345adc3c451ba2a65179557113dbd4107208069bANALYSIS DATE: 2022-10-24T04:32:05ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – djvu – 53996bb886f888999df63dcebe90a3a1

October 24, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 53996bb886f888999df63dcebe90a3a1SHA1: 102361721dc1fae543ce13df826b8b123a39048fANALYSIS DATE: 2022-10-24T04:34:00ZTTPS: T1005, T1081, T1053, T1222,...

Shomon – Shodan Monitoring Integration For TheHive

October 24, 2022

ShoMon is a Shodan alert feeder for TheHive written in GoLang. With version 2.0, it is more powerful than ever!...

Malware Analysis – djvu – ab6ec2d920861f0b7a3eacab49e8d488

October 24, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: ab6ec2d920861f0b7a3eacab49e8d488SHA1: 3d7ce274a06bbfa09b376fe2d0912d1ae6b45e46ANALYSIS DATE: 2022-10-23T20:04:18ZTTPS: T1222, T1005, T1081, T1060,...

Malware Analysis – smokeloader – 138f6d817b90090fdb77cbec3dd51baa

October 24, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 138f6d817b90090fdb77cbec3dd51baaSHA1: 9dddc78e11f062ead2a8ff272fd24317ce423d64ANALYSIS DATE: 2022-10-23T20:19:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Security

Malware Analysis – wannacry – f7c34b753c7230c8a312de2a6a1a2ab0

Malware Analysis – djvu – 1823a652c5e16ec21c93b389ace3aa4a

Malware Analysis – locky – da863294f14ea0c1ab3e68ba6b45f0cf

Security experts targeted with malicious CVE PoC exploits on GitHub

Malware Analysis – djvu – 1767f81e6b15d8125fedcf58948e3a0a

Malware Analysis – discovery – 94ea4ebdb5ff16a4468fe5fdea591243

Malware Analysis – djvu – 5e9f2be25372093f388c2270f6c16d7c

Malware Analysis – ransomware – cb211f677a774d5475c55fa639041eb1

Malware Analysis – wannacry – ad64bbe31bf2f9c77721bd430ec06fc0

Malware Analysis – djvu – 436611c2bcb98900e1511bf06fa8ed69

Malware Analysis – djvu – 22a9b2595531bd1d5a53cf2d72a30f8a

Malware Analysis – ransomware – 9d8ef3799fb470997ad800632ec0b2aa

Malware Analysis – dcrat – bf47a099e77b3de9ac0bb423f28c0fba

Malware Analysis – evasion – 4c3f4cc7a76a621c7fdc52039d2274c2

Malware Analysis – djvu – dd303c8898ac01ca98d2dec144d6557c

Malware Analysis – djvu – e380d1787e67a37c1a95ee975f924e81

Malware Analysis – ransomware – d9709124efbd1d95435e4ca9e854d37d

Malware Analysis – ransomware – a3e5ea6ffe5935f03762ec7ebb6d5587

Malware Analysis – djvu – 6550a62e79b1783a785f37bc0dc87007

Malware Analysis – evasion – 7624ff12dbea26dbd75f638093f3f2db

Malware Analysis – djvu – 53996bb886f888999df63dcebe90a3a1

Shomon – Shodan Monitoring Integration For TheHive

Malware Analysis – djvu – ab6ec2d920861f0b7a3eacab49e8d488

Malware Analysis – smokeloader – 138f6d817b90090fdb77cbec3dd51baa

[AKIRA] – Ransomware Victim: Elliott Tax Service

[RHYSIDA] – Ransomware Victim: Automated Logistics Systems

[AKIRA] – Ransomware Victim: Benda Grace Stulz

[AKIRA] – Ransomware Victim: Palacios Marine & Industrial

[AKIRA] – Ransomware Victim: General Micro Systems

You may have missed