threatintel

Malware Analysis – persistence – 420b2f010edbc63a68b2cce2cdf1e5e9

April 25, 2023

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 420b2f010edbc63a68b2cce2cdf1e5e9SHA1: 4cf5072cfe0eb42d387713067e2706902c89b294ANALYSIS DATE: 2023-04-25T17:27:15ZTTPS: T1130, T1112, T1107, T1490, T1082, T1060, T1012, T1120 ScoreMeaningExample10Known badA...

Malware Analysis – persistence – 3bceadd4c2c546aba24e24307f1defcd

April 25, 2023

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 3bceadd4c2c546aba24e24307f1defcdSHA1: 81e4110a72821a1b1f01a3f3a8bf89188af40067ANALYSIS DATE: 2023-04-25T17:27:20ZTTPS: T1107, T1490, T1082, T1060, T1112, T1012, T1120 ScoreMeaningExample10Known badA malware...

Malware Analysis – persistence – e736d07744f89f05460b1f12daeb8172

April 25, 2023

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: e736d07744f89f05460b1f12daeb8172SHA1: 19fb70308f0d47947eb6d2d5b572e96539d345bbANALYSIS DATE: 2023-04-25T17:27:21ZTTPS: T1012, T1120, T1082, T1107, T1490, T1112, T1060 ScoreMeaningExample10Known badA malware...

Malware Analysis – djvu – 66f62279e9722368a730adc3b67f2315

April 25, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5cb879265de0011bfc7588d5d251aee6, discovery, persistence, ransomware, stealerMD5: 66f62279e9722368a730adc3b67f2315SHA1: a9804ada1a10d8a5827029342283f6ffeea6f3d3ANALYSIS DATE: 2023-04-25T17:35:04ZTTPS: T1053, T1130, T1112, T1222, T1060,...

Malware Analysis – persistence – a202914a34dc528aa137bd394518d9b0

April 25, 2023

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: a202914a34dc528aa137bd394518d9b0SHA1: 4724934b61687cb1abe96bab137c7b1d4476f271ANALYSIS DATE: 2023-04-25T17:27:21ZTTPS: T1060, T1112, T1012, T1120, T1082, T1107, T1490 ScoreMeaningExample10Known badA malware...

Malware Analysis – djvu – 900c5a8f4afb3473c9dac0f984d746f4

April 25, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5cb879265de0011bfc7588d5d251aee6, discovery, persistence, ransomware, stealerMD5: 900c5a8f4afb3473c9dac0f984d746f4SHA1: 00dadacc6119c3e8ccdbe4477da2452d06e8a992ANALYSIS DATE: 2023-04-25T17:32:11ZTTPS: T1130, T1112, T1060, T1222, T1082,...

Malware Analysis – quasar – 5ec1610f2529bf6c482f43e8d7cb6235

April 25, 2023

Score: 10 MALWARE FAMILY: quasarTAGS:family:quasar, evasion, persistence, ransomware, spyware, trojanMD5: 5ec1610f2529bf6c482f43e8d7cb6235SHA1: a356a2a69d0551967f133b4b18c43703027e2383ANALYSIS DATE: 2023-04-25T17:40:13ZTTPS: T1107, T1490, T1088, T1089, T1112, T1031,...

Malware Analysis – evasion – 2c2bd73dcba2e7eb7fa78105c84ca2b1

April 25, 2023

Score: 8 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 2c2bd73dcba2e7eb7fa78105c84ca2b1SHA1: 24d7defc1e00739461dda0b275bd8304277aafd1ANALYSIS DATE: 2023-04-25T17:37:03ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – babuk – f9afb31bc17811e5ab4fa406f105b1fe

April 25, 2023

Score: 10 MALWARE FAMILY: babukTAGS:family:babuk, family:darkside, ransomwareMD5: f9afb31bc17811e5ab4fa406f105b1feSHA1: d1a9449dcc8a3aa0c887bce71f128866175f679aANALYSIS DATE: 2023-04-25T17:44:04ZTTPS: T1107, T1490, T1082, T1012, T1120 ScoreMeaningExample10Known badA malware family...

Malware Analysis – djvu – 4bc6e26f6bf9258473180f9805bbe508

April 25, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: 4bc6e26f6bf9258473180f9805bbe508SHA1: dacc8979f7e59e60be9cb842982ee0deca5b3248ANALYSIS DATE: 2023-04-25T17:41:03ZTTPS: T1130, T1112, T1060, T1222, T1082, T1053 ScoreMeaningExample10Known badA...

threatintel

Malware Analysis – persistence – 420b2f010edbc63a68b2cce2cdf1e5e9

Malware Analysis – persistence – 3bceadd4c2c546aba24e24307f1defcd

Malware Analysis – persistence – e736d07744f89f05460b1f12daeb8172

Malware Analysis – djvu – 66f62279e9722368a730adc3b67f2315

Malware Analysis – persistence – a202914a34dc528aa137bd394518d9b0

Malware Analysis – djvu – 900c5a8f4afb3473c9dac0f984d746f4

Malware Analysis – quasar – 5ec1610f2529bf6c482f43e8d7cb6235

Malware Analysis – evasion – 2c2bd73dcba2e7eb7fa78105c84ca2b1

Malware Analysis – babuk – f9afb31bc17811e5ab4fa406f105b1fe

Malware Analysis – djvu – 4bc6e26f6bf9258473180f9805bbe508

CISA: CISA Releases Two Industrial Control Systems Advisories

New SLP Vulnerability Could Let Attackers Launch 2200x Powerful DDoS Attacks

Iranian Hackers Launch Sophisticated Attacks Targeting Israel with PowerLess Backdoor

Posh C2 Detected – 159[.]69[.]180[.]8:443

Google Cloud Introduces Security AI Workbench for Faster Threat Detection and Analysis

Modernizing Vulnerability Management: The Move Toward Exposure Management

Lazarus Subgroup Targeting Apple Devices with New RustBucket macOS Malware

LockBit 3.0 Ransomware Victim: nagase[.]co[.]jp

LockBit 3.0 Ransomware Victim: gruponutresa[.]com

LockBit 3.0 Ransomware Victim: goforcloud[.]com

LockBit 3.0 Ransomware Victim: abro[.]se

LockBit 3.0 Ransomware Victim: ultimateimageprinting[.]com

Google Authenticator App Gets Cloud Backup Feature for TOTP Codes

Karakurt Ransomware Victim: Winona Powder Coating

CVE Alert: CVE-2025-3871

CVE Alert: CVE-2025-40923

CVE Alert: CVE-2025-40919

CVE Alert: CVE-2025-52786

CVE Alert: CVE-2025-40918

You may have missed