Security

Malware Analysis – djvu – 2055a04e632d1e5588b245b7cc8a52ac

October 14, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 2055a04e632d1e5588b245b7cc8a52acSHA1: 9f458f97c995c6a38e179be9d0cd3e6726a48543ANALYSIS DATE: 2022-10-14T15:01:12ZTTPS: T1053, T1012, T1082, T1005,...

Malware Analysis – ransomware – 7b6d799c95a79ddfbc88cf22c6a40807

October 14, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 7b6d799c95a79ddfbc88cf22c6a40807SHA1: a27e5ee122199eddccc6b0b2dc49de9a14e8d6c3ANALYSIS DATE: 2022-10-14T15:40:21ZTTPS: T1091, T1005, T1081, T1082, T1107, T1490 ScoreMeaningExample10Known badA malware...

Malware Analysis – danabot – a02834d5e9f234a27480e7bc13a5ee95

October 14, 2022

Score: 10 MALWARE FAMILY: danabotTAGS:family:danabot, family:djvu, family:redline, family:vidar, botnet:517, banker, bootkit, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5:...

Malware Analysis – ransomware – 86a6d2a60a39ead1e09ad35512710f80

October 14, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 86a6d2a60a39ead1e09ad35512710f80SHA1: 35b44dcaf8c7f291a5823d609aec557593f2d752ANALYSIS DATE: 2022-10-14T15:40:11ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – djvu – 61b3785a83a8f28a1beddfbb41ef1059

October 14, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 61b3785a83a8f28a1beddfbb41ef1059SHA1: 66e1801238581a6d183a5c2b34159c5c9e6065bfANALYSIS DATE: 2022-10-14T15:38:19ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – ransomware – b70ec686260b1821f07b44ed88dcd4e0

October 14, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: b70ec686260b1821f07b44ed88dcd4e0SHA1: 9e3290d79406c87f905263a45eebfca4f8a6e7dbANALYSIS DATE: 2022-10-14T15:40:41ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 4f2d1e4655d12d45efc26b1034034f9b

October 14, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 4f2d1e4655d12d45efc26b1034034f9bSHA1: b2e1b3fef5c75a44902b984e2e7c8d9e143fc4a9ANALYSIS DATE: 2022-10-14T15:40:34ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 9ce251bd921f81553ada59816d764cde

October 14, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 9ce251bd921f81553ada59816d764cdeSHA1: 43d4199349762939428ad422dfd6eac420517f22ANALYSIS DATE: 2022-10-14T15:40:51ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 4ebe2c03a302bcf4dee5d444101ee2d1

October 14, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 4ebe2c03a302bcf4dee5d444101ee2d1SHA1: e84606b85239c8bc1580f60ed58f5e2706c52dafANALYSIS DATE: 2022-10-14T15:40:57ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – smokeloader – 52ffaf10efe8795445a3df86abd0ded2

October 14, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 52ffaf10efe8795445a3df86abd0ded2SHA1: c1daa480214146034e1bdb20286196246b7a7428ANALYSIS DATE: 2022-10-14T16:38:02ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 00e5b549f8b6c6d6920d35aa68f25b02

October 14, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 00e5b549f8b6c6d6920d35aa68f25b02SHA1: d87b52dcbee58fa8ce933e22b06a39ffcb78677aANALYSIS DATE: 2022-10-14T16:28:14ZTTPS: T1082, T1005, T1081, T1060,...

Malware Analysis – djvu – 36f8a06ec4b02b186c2d8fa0b6be5609

October 14, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: 36f8a06ec4b02b186c2d8fa0b6be5609SHA1: 393ff0a550ab21ea3d9ea61a6dc1d59d71de06c3ANALYSIS DATE:...

Malware Analysis – wannacry – f180d23ede98f53a8dffd109ed624e85

October 14, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: f180d23ede98f53a8dffd109ed624e85SHA1: 7755fe529f6c4ff88d3955269c9a1d49235f5a56ANALYSIS DATE: 2022-10-14T16:00:14ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

WIP19, a new Chinese APT targets IT Service Providers and Telcos

October 14, 2022

Chinese-speaking threat actor, tracked as WIP19, is targeting telecommunications and IT service providers in the Middle East and Asia. SentinelOne researchers...

CISA: CISA Releases RedEye: Red Team Campaign Visualization and Reporting Tool

October 14, 2022

CISA Releases RedEye: Red Team Campaign Visualization and Reporting Tool CISA has released RedEye, an interactive open-source analytic tool to...

Matano – The Open-Source Security Lake Platform For AWS

October 14, 2022

Features Collect data from all your sources Matano lets you collect log data from sources using Download Matano If you...

Malware Analysis – xorist – 41084ab3be6d49c1483b0b192de7f636

October 14, 2022

Score: 10 MALWARE FAMILY: xoristTAGS:family:xorist, persistence, ransomware, spyware, stealer, upxMD5: 41084ab3be6d49c1483b0b192de7f636SHA1: d67312b7e4e6c0c127b12ca1bda92a8c7ad7c6c6ANALYSIS DATE: 2022-10-14T03:32:26ZTTPS: T1005, T1081, T1060, T1112 ScoreMeaningExample10Known badA...

Malware Analysis – discovery – 50e562833fe474485dc04902a6496e90

October 14, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploit, persistenceMD5: 50e562833fe474485dc04902a6496e90SHA1: dc35c1b38267a47ae5ea7e650709d80b3837cab5ANALYSIS DATE: 2022-10-14T04:30:04ZTTPS: T1112, T1060, T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 2642f5f309e1dd23eed278b904042263

October 14, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 2642f5f309e1dd23eed278b904042263SHA1: d0c4d1da177f8180d7f08f1b1cf3d6625e02cb27ANALYSIS DATE: 2022-10-14T08:03:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – magniber – b23cae8d39d76a08197382e0d9d5c297

October 14, 2022

Score: 10 MALWARE FAMILY: magniberTAGS:family:magniber, ransomwareMD5: b23cae8d39d76a08197382e0d9d5c297SHA1: 2bcc921be8477c6cce77ff4782e068ca798318deANALYSIS DATE: 2022-10-14T08:35:04ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – djvu – eebef1c49575877f734b1a71ae2d2a0f

October 14, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: eebef1c49575877f734b1a71ae2d2a0fSHA1: 8f9e40ac71b660296cabad8dd9860a65d51d7d45ANALYSIS DATE: 2022-10-14T08:26:27ZTTPS: T1222, T1082, T1053, T1005,...

Malware Analysis – – da802fc3ba7c09de9bc43c738a3c780b

October 14, 2022

Score: 7 MALWARE FAMILY: TAGS:MD5: da802fc3ba7c09de9bc43c738a3c780bSHA1: 4fea576b5306f92ef22520e5ee77aba057137504ANALYSIS DATE: 2022-10-14T08:36:26ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – chaos – 9adfbfb490528068ca3074432b96ecc6

October 14, 2022

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, evasion, persistence, ransomware, spyware, stealerMD5: 9adfbfb490528068ca3074432b96ecc6SHA1: 545f15d3e9b413f06ca9b64c75e34de0a3626e5eANALYSIS DATE: 2022-10-14T08:40:09ZTTPS: T1490, T1059, T1107, T1082, T1005, T1081,...

Cobalt Stike Beacon Detected – 154[.]26[.]130[.]12:443

October 14, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Security

Malware Analysis – djvu – 2055a04e632d1e5588b245b7cc8a52ac

Malware Analysis – ransomware – 7b6d799c95a79ddfbc88cf22c6a40807

Malware Analysis – danabot – a02834d5e9f234a27480e7bc13a5ee95

Malware Analysis – ransomware – 86a6d2a60a39ead1e09ad35512710f80

Malware Analysis – djvu – 61b3785a83a8f28a1beddfbb41ef1059

Malware Analysis – ransomware – b70ec686260b1821f07b44ed88dcd4e0

Malware Analysis – ransomware – 4f2d1e4655d12d45efc26b1034034f9b

Malware Analysis – ransomware – 9ce251bd921f81553ada59816d764cde

Malware Analysis – ransomware – 4ebe2c03a302bcf4dee5d444101ee2d1

Malware Analysis – smokeloader – 52ffaf10efe8795445a3df86abd0ded2

Malware Analysis – djvu – 00e5b549f8b6c6d6920d35aa68f25b02

Malware Analysis – djvu – 36f8a06ec4b02b186c2d8fa0b6be5609

Malware Analysis – wannacry – f180d23ede98f53a8dffd109ed624e85

WIP19, a new Chinese APT targets IT Service Providers and Telcos

CISA: CISA Releases RedEye: Red Team Campaign Visualization and Reporting Tool

Matano – The Open-Source Security Lake Platform For AWS

Malware Analysis – xorist – 41084ab3be6d49c1483b0b192de7f636

Malware Analysis – discovery – 50e562833fe474485dc04902a6496e90

Malware Analysis – smokeloader – 2642f5f309e1dd23eed278b904042263

Malware Analysis – magniber – b23cae8d39d76a08197382e0d9d5c297

Malware Analysis – djvu – eebef1c49575877f734b1a71ae2d2a0f

Malware Analysis – – da802fc3ba7c09de9bc43c738a3c780b

Malware Analysis – chaos – 9adfbfb490528068ca3074432b96ecc6

Cobalt Stike Beacon Detected – 154[.]26[.]130[.]12:443

HackerOne Bug Bounty Disclosure: socks-heap-buffer-overflow-via-malicious-http-redirect-with-oversized-hostname-abdullah

HackerOne Bug Bounty Disclosure: buffer-over-read-missing-nul-termination-in-addvariable-causes-undefined-behavior-sagorhawlader

HackerOne Bug Bounty Disclosure: blockstack-org-is-vulnerable-to-cve-cve–x-aulia

HackerOne Bug Bounty Disclosure: blockstack-browser-for-mac-leaks-core-api-password-to-rd-parties-frozensolid

HackerOne Bug Bounty Disclosure: logout-bypass-vulnerability-in-hiro-so-anonymous

You may have missed