threatintel

Malware Analysis – djvu – 2f3198dca6975431ff979d0f69f65d98

March 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 2f3198dca6975431ff979d0f69f65d98SHA1: 2cb3bab08efa98a901875088e00508b3b6ac6aa9ANALYSIS DATE: 2023-02-28T23:29:37ZTTPS: T1082, T1053, T1012, T1060, T1112,...

Malware Analysis – – 6e39ec27fa4ca9c29b3aa99c72e331ab

March 1, 2023

Score: 1 MALWARE FAMILY: TAGS:MD5: 6e39ec27fa4ca9c29b3aa99c72e331abSHA1: 7ce72927205553f9af58da045f8ec303817cc21eANALYSIS DATE: 2023-02-28T22:43:35ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – redline – fe5c069ad1030674df73e3e2f7e2bb69

February 28, 2023

Score: 10 MALWARE FAMILY: redlineTAGS:family:redline, discovery, infostealer, persistence, ransomware, spywareMD5: fe5c069ad1030674df73e3e2f7e2bb69SHA1: 4b4e0e3f8e40f1ab4e80f66b709872a49decf592ANALYSIS DATE: 2023-02-28T15:50:04ZTTPS: T1082, T1060, T1112, T1102, T1012, T1042,...

Malware Analysis – djvu – 609a5bbafefdca32220e16f74da50f5c

February 28, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 609a5bbafefdca32220e16f74da50f5cSHA1: 77d18838754950e86e607d7291b9f2bd0924b224ANALYSIS DATE: 2023-02-28T16:00:50ZTTPS: T1082, T1222, T1005, T1081, T1053,...

Malware Analysis – djvu – 9ec41dd1867d529287f1ccd08ebcfccd

February 28, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 9ec41dd1867d529287f1ccd08ebcfccdSHA1: a1035784b860c04c51cf01c1836f4c51b1dbeb5dANALYSIS DATE: 2023-02-28T16:36:54ZTTPS: T1222, T1012, T1082, T1053, T1005,...

Malware Analysis – djvu – 39fd7442407083e8511099d654d70042

February 28, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 39fd7442407083e8511099d654d70042SHA1: a72e3a8a2c4a5402618bee30f390fd605b0e4e1bANALYSIS DATE: 2023-02-28T16:41:00ZTTPS: T1012, T1082, T1222, T1053, T1060,...

Malware Analysis – djvu – a59a27e1d92117055703577bcd2ad319

February 28, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: a59a27e1d92117055703577bcd2ad319SHA1: c5b4cb00f8ecdc964b32145c8321152854e40128ANALYSIS DATE: 2023-02-28T16:41:13ZTTPS: T1222, T1060, T1112, T1005, T1081,...

Malware Analysis – smokeloader – c6ff04eb73522bb772885a1c08e684f4

February 28, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: c6ff04eb73522bb772885a1c08e684f4SHA1: 7b6e09e7f42d8a396dcc52e0be4b043fd69885dbANALYSIS DATE: 2023-02-28T16:42:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – c4ef4596de254552c10a2d60445abe24

February 28, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: c4ef4596de254552c10a2d60445abe24SHA1: d48722cea5f8d11887023befcd14e91643664260ANALYSIS DATE: 2023-02-28T17:04:25ZTTPS: T1012, T1005, T1081, T1060, T1112,...

Malware Analysis – djvu – d65d1d03227b6b576e40e1abefa5001c

February 28, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, backdoor, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: d65d1d03227b6b576e40e1abefa5001cSHA1: b9947fd7f85370e4d97e8ccb46508553d2d022ddANALYSIS DATE: 2023-02-28T17:01:38ZTTPS: T1012,...

Malware Analysis – djvu – cbe7a7f098da9024d512594bb50f6937

February 28, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: cbe7a7f098da9024d512594bb50f6937SHA1: ad2d0201ab99ea2d7b30bc2ffadcb659093a658eANALYSIS DATE: 2023-02-28T17:00:30ZTTPS: T1012, T1005, T1081, T1060, T1112,...

threatintel

Malware Analysis – djvu – 2f3198dca6975431ff979d0f69f65d98

Malware Analysis – – 6e39ec27fa4ca9c29b3aa99c72e331ab

Malware Analysis – redline – fe5c069ad1030674df73e3e2f7e2bb69

Malware Analysis – djvu – 609a5bbafefdca32220e16f74da50f5c

Malware Analysis – djvu – 9ec41dd1867d529287f1ccd08ebcfccd

Malware Analysis – djvu – 39fd7442407083e8511099d654d70042

Malware Analysis – djvu – a59a27e1d92117055703577bcd2ad319

Malware Analysis – smokeloader – c6ff04eb73522bb772885a1c08e684f4

Malware Analysis – djvu – c4ef4596de254552c10a2d60445abe24

Malware Analysis – djvu – d65d1d03227b6b576e40e1abefa5001c

Malware Analysis – djvu – cbe7a7f098da9024d512594bb50f6937

New EX-22 Tool Empowers Hackers with Stealthy Ransomware Attacks on Enterprises

Bitdefender Releases Free Decryptor for MortalKombat Ransomware Strain

LockBit 3.0 Ransomware Victim: cobcreditunion[.]com

LockBit 3.0 Ransomware Victim: georgeleslie[.]co[.]uk

LockBit 3.0 Ransomware Victim: globalcommunities[.]org

LockBit 3.0 Ransomware Victim: wmich[.]edu

LockBit 3.0 Ransomware Victim: haeco[.]com

LockBit 3.0 Ransomware Victim: df[.]senac[.]br

LockBit 3.0 Ransomware Victim: nokair[.]com

LockBit 3.0 Ransomware Victim: princepalace[.]co[.]th

Application Security vs. API Security: What is the difference?

APT-C-36 Strikes Again: Blind Eagle Hackers Target Key Industries in Colombia

BlackCat/ALPHV Ransomware Victim: The Keen Group

BugCrowd Bug Bounty Disclosure: P3 – Publicly Editable Google Docs Linked from NASA SnowEx PPT –

BugCrowd Bug Bounty Disclosure: P3 – Details of the collaboration between NASA and Inmarsat Government and the type of contract –

Apple Products Multiple Vulnerabilities

Miljödata – 870,108 breached accounts

Cobalt Strike Beacon Detected – 119[.]91[.]203[.]199:88

You may have missed