LockBit 3.0 Ransomware Victim: prinovaglobal[.]com
LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...
threatintel
Data of 5.7M Gemini users available for sale on hacking forums
Gemini crypto exchange warns users of an ongoing phishing campaign after a third-party vendor suffered a security breach. Gemini crypto...
AzureHound – Azure Data Exporter For BloodHound
The BloodHound data collector for Microsoft Azure Get AzureHound Release Binaries Download the appropriate binary for your platform from one...
Royal Ransomware Victim: Mol
RoyalRansomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the...
Malware Analysis – djvu – fb4179ed52ae3e372dbd7236c36bad07
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: fb4179ed52ae3e372dbd7236c36bad07SHA1: 3a429fab3ada61843ff58cd601a3240f16bc2e83ANALYSIS DATE: 2022-12-16T10:20:19ZTTPS: T1060, T1112, T1082, T1012, T1053, T1005,...
Cobalt Stike Beacon Detected – 167[.]172[.]24[.]169:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Malware Analysis – danabot – 9135f94621c62d8cfe3fe6744c9f758d
Score: 10 MALWARE FAMILY: danabotTAGS:family:danabot, family:djvu, family:raccoon, family:redline, family:smokeloader, botnet:ec7a54fb6492ff3a52d09504b8ecf082, botnet:mario23_10, backdoor, banker, bootkit, collection, discovery, infostealer, persistence, ransomware, spyware,...
Cobalt Stike Beacon Detected – 109[.]94[.]208[.]57:8080
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 77[.]73[.]134[.]23:80
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 121[.]5[.]61[.]8:8018
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 5[.]188[.]86[.]237:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 179[.]43[.]142[.]137:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Malware Analysis – persistence – 428e2d6500b98a6059153e4a99bee22c
Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 428e2d6500b98a6059153e4a99bee22cSHA1: 94ca95c70255418b797e9362dcc757748a90f0b8ANALYSIS DATE: 2022-12-16T11:15:17ZTTPS: T1060, T1112, T1082, T1012, T1120 ScoreMeaningExample10Known badA malware family was...
Malware Analysis – djvu – d43c377cdb96ad470ca9027731874927
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: d43c377cdb96ad470ca9027731874927SHA1: d2a38f21af1751b7c7df960d1b82f89713fd6edfANALYSIS DATE: 2022-12-16T10:51:23ZTTPS: T1012, T1082, T1053, T1005, T1081, T1222,...
Malware Analysis – djvu – fccbc13f323309afe196fa33904f0e58
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: fccbc13f323309afe196fa33904f0e58SHA1: 0969d306413a3835c6e42d583625162e49a2585fANALYSIS DATE: 2022-12-16T10:40:26ZTTPS: T1012, T1005, T1081, T1060, T1112, T1222,...
Malware Analysis – danabot – aa3588f61f67b311ed58e70083f072bc
Score: 10 MALWARE FAMILY: danabotTAGS:family:danabot, family:djvu, family:raccoon, family:redline, family:smokeloader, botnet:ec7a54fb6492ff3a52d09504b8ecf082, botnet:mario23_10, backdoor, banker, bootkit, collection, discovery, infostealer, persistence, ransomware, spyware,...
CISA adds Veeam Backup and Replication bugs to Known Exploited Vulnerabilities Catalog
US CISA added two vulnerabilities impacting Veeam Backup & Replication software to its Known Exploited Vulnerabilities Catalog. The U.S. Cybersecurity and Infrastructure...
MCCrash botnet targets private Minecraft servers, Microsoft warns
Microsoft announced that a botnet dubbed MCCrash is launching distributed denial-of-service (DDoS) attacks against private Minecraft servers. Microsoft spotted a...
Microsoft revised CVE-2022-37958 severity due to its broader scope
Microsoft revised the severity rate for the CVE-2022-37958 flaw which was addressed with Patch Tuesday security updates for September 2022....
Malware Analysis – danabot – cebcff470e19eb9de81af95cfe2b86bc
Score: 10 MALWARE FAMILY: danabotTAGS:family:danabot, family:dcrat, family:djvu, family:raccoon, family:redline, family:smokeloader, botnet:ec7a54fb6492ff3a52d09504b8ecf082, botnet:mario23_10, backdoor, banker, bootkit, collection, discovery, infostealer, persistence, ransomware,...
Malware Analysis – ransomware – d7986651c677f683616da3ae1b4d1ff7
Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: d7986651c677f683616da3ae1b4d1ff7SHA1: a1b03ce87f537131a031a2618e02d13e29dd760aANALYSIS DATE: 2022-12-16T05:29:05ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...
Malware Analysis – persistence – ff77c452d18d840f60f3b9007fbe5379
Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: ff77c452d18d840f60f3b9007fbe5379SHA1: 2e52628c8e985b5b08f04fdc99e44c937ee1b59fANALYSIS DATE: 2022-12-16T03:47:07ZTTPS: T1012, T1120, T1082, T1060, T1112 ScoreMeaningExample10Known badA malware family was...
Malware Analysis – djvu – 6824a72ba14def6475ee1937ec2d7594
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 6824a72ba14def6475ee1937ec2d7594SHA1: 33112b56093f382724359c112518bac080e504fcANALYSIS DATE: 2022-12-16T04:43:33ZTTPS: T1005, T1081, T1012, T1082, T1060, T1112,...
Malware Analysis – djvu – 1fbdb1063b832e6529118d4ab7e66971
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:raccoon, family:redline, family:smokeloader, botnet:ec7a54fb6492ff3a52d09504b8ecf082, botnet:mario23_10, backdoor, bootkit, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5:...
