threatintel

Malware Analysis – evasion – cfa24958fbf3252ae18c9ff59d740ba5

April 27, 2023

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: cfa24958fbf3252ae18c9ff59d740ba5SHA1: 3ad7265383ff3d43cdc5802b3339106f2e7aef6eANALYSIS DATE: 2023-04-27T15:17:02ZTTPS: T1070, T1031, T1562, T1489 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – amadey – bbf0b55abc4ca7fc1b9c4c466e0271e5

April 27, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:lumma, family:smokeloader, family:vidar, botnet:5cb879265de0011bfc7588d5d251aee6, botnet:pub1, backdoor, discovery, evasion, persistence, ransomware, spyware, stealer, trojanMD5: bbf0b55abc4ca7fc1b9c4c466e0271e5SHA1:...

Malware Analysis – djvu – 95b67bb3125cc3cb0052df60027907af

April 27, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5cb879265de0011bfc7588d5d251aee6, discovery, persistence, ransomware, spyware, stealerMD5: 95b67bb3125cc3cb0052df60027907afSHA1: 8fb0c5fc196fb70c0739cb289ea7e5a72536f650ANALYSIS DATE: 2023-04-27T15:24:49ZTTPS: T1005, T1081, T1060, T1112,...

Malware Analysis – djvu – 5831b53317ba956aaf51e6b5d7e532ab

April 27, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5cb879265de0011bfc7588d5d251aee6, discovery, persistence, ransomware, spyware, stealerMD5: 5831b53317ba956aaf51e6b5d7e532abSHA1: 457917dd86216bb1031b012eed3c21f0b38fbbb8ANALYSIS DATE: 2023-04-27T16:21:09ZTTPS: T1222, T1005, T1081, T1060,...

Malware Analysis – amadey – 0d54474c200d1ecddc41c0a860ca8d88

April 27, 2023

Malware Analysis – – c2ef48c7322c941dc4699fd5fafbaed8

April 27, 2023

Score: 1 MALWARE FAMILY: TAGS:MD5: c2ef48c7322c941dc4699fd5fafbaed8SHA1: 44c9b1547258d672994c4297d8b17ed839d0954cANALYSIS DATE: 2023-04-27T16:53:22ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – bb00788c9e1d68dc42525ba0c379eda4

April 27, 2023

Score: 5 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: bb00788c9e1d68dc42525ba0c379eda4SHA1: e0488c0968f9596e22dd7a9590be2b6d2fb390a6ANALYSIS DATE: 2023-04-27T17:57:59ZTTPS: T1082, T1112, T1491 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – djvu – e63a2e22193d1af2fe67db7362e1dc6e

April 27, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5cb879265de0011bfc7588d5d251aee6, discovery, persistence, ransomware, spyware, stealerMD5: e63a2e22193d1af2fe67db7362e1dc6eSHA1: 4a0043b3fb991ace6daf50d6ced0aad179335db0ANALYSIS DATE: 2023-04-27T17:41:35ZTTPS: T1012, T1082, T1005, T1081,...

threatintel

Malware Analysis – evasion – cfa24958fbf3252ae18c9ff59d740ba5

Malware Analysis – amadey – bbf0b55abc4ca7fc1b9c4c466e0271e5

Malware Analysis – djvu – 95b67bb3125cc3cb0052df60027907af

Malware Analysis – djvu – 5831b53317ba956aaf51e6b5d7e532ab

Malware Analysis – amadey – 0d54474c200d1ecddc41c0a860ca8d88

Malware Analysis – – c2ef48c7322c941dc4699fd5fafbaed8

Malware Analysis – ransomware – bb00788c9e1d68dc42525ba0c379eda4

Malware Analysis – djvu – e63a2e22193d1af2fe67db7362e1dc6e

Malware Analysis – amadey – 28cda8e2c5311765b5b4cbc1380e0cee

Malware Analysis – amadey – 036f9407ef3f17bca4e0e9f815abdbf5

CISA: CISA Releases One Industrial Control Systems Medical Advisory

Paperbug Attack: New Politically-Motivated Surveillance Campaign in Tajikistan

Google Gets Court Order to Take Down CryptBot That Infected Over 670,000 Computers

Black Basta Ransomware Victim: COACHCOMM

Black Basta Ransomware Victim: mastercorp

Black Basta Ransomware Victim: Gates Corporation

LimeRAT Malware Analysis: Extracting the Config

RTM Locker’s First Linux Ransomware Strain Targeting NAS and ESXi Hosts

Microsoft Confirms PaperCut Servers Used to Deliver LockBit and Cl0p Ransomware

LockBit 3.0 Ransomware Victim: silbon[.]es

LockBit 3.0 Ransomware Victim: fsdc[.]org[.]hk

LockBit 3.0 Ransomware Victim: bg2i[.]fr

LockBit 3.0 Ransomware Victim: multimedica[.]it

LockBit 3.0 Ransomware Victim: cdcbmestihl[.]com

Ubuntu Linux Kernel Multiple Vulnerabilities

Amd Warns Of New Meltdown, Spectre Like Bugs Affecting Cpus

You Have A Fake North Korean It Worker Problem Here’s How To Stop It

Ai Coding Tools Make Developers Slower But They Think They’re Faster, Studyfinds

How To Trick Chatgpt Into Revealing Windows Keys? I Give Up

You may have missed