threatintel

Malware Analysis – djvu – 831ea71d4e3cc3e27250500e14d4ac25

January 18, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 831ea71d4e3cc3e27250500e14d4ac25SHA1: 8976eebf1416eb1bf968c346b08e7a32f5325908ANALYSIS DATE: 2023-01-18T10:45:15ZTTPS: T1082, T1012, T1222, T1005,...

Malware Analysis – djvu – 7a84a1a41a766c91cf8a3df085f960b6

January 18, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 7a84a1a41a766c91cf8a3df085f960b6SHA1: c44ee2b0d827561c5d53ae05399b1140530dcaeeANALYSIS DATE: 2023-01-18T09:44:29ZTTPS: T1005, T1081, T1060, T1112,...

Royal Ransomware Victim: K Azarosian Costello

January 18, 2023

RoyalRansomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the...

Malware Analysis – discovery – 054e745aa82ab8cfa9839012b88be92e

January 18, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: 054e745aa82ab8cfa9839012b88be92eSHA1: c559315cac54df311c1b8bc99f14bf37c3ddedb3ANALYSIS DATE: 2023-01-18T03:05:38ZTTPS: T1060, T1012, T1120, T1082, T1102, T1112, T1042 ScoreMeaningExample10Known badA...

Malware Analysis – – ad3bc99ab03f6fcef0215c0eb185bf6f

January 18, 2023

Score: 1 MALWARE FAMILY: TAGS:MD5: ad3bc99ab03f6fcef0215c0eb185bf6fSHA1: 135d0497aa12587d1970ff2e6d2eb9bc401c898fANALYSIS DATE: 2023-01-18T03:15:33ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – discovery – f14153bbd95fc26d9ccea77c49cf09b9

January 18, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, evasion, persistence, ransomware, spyware, stealer, trojanMD5: f14153bbd95fc26d9ccea77c49cf09b9SHA1: cb59f900711ea751c4322b4dab50fa2c0ee70b33ANALYSIS DATE: 2023-01-18T03:19:01ZTTPS: T1130, T1112, T1042, T1012, T1082,...

Malware Analysis – djvu – 7759fcd2fb56a92edd795ce8816beec2

January 18, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 7759fcd2fb56a92edd795ce8816beec2SHA1: 485ab66daee6cc85c335f793f0e3817256529ea8ANALYSIS DATE: 2023-01-18T05:41:10ZTTPS: T1222, T1005, T1081, T1082,...

Malware Analysis – discovery – cc11aad00f58586019f729fc87ae0770

January 18, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, evasion, persistence, ransomware, spyware, stealer, trojanMD5: cc11aad00f58586019f729fc87ae0770SHA1: 0ad616a4f634dc25f8d01496ebb4ce2c803036f2ANALYSIS DATE: 2023-01-18T03:44:20ZTTPS: T1082, T1012, T1120, T1112, T1042,...

Malware Analysis – djvu – 008d06f2da41aff875920ca2fc30dbeb

January 18, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 008d06f2da41aff875920ca2fc30dbebSHA1: 48a340ee73ea1f73ce0b5e107f92899fa31a81dfANALYSIS DATE: 2023-01-18T03:45:29ZTTPS: T1082, T1012, T1222, T1053,...

Malware Analysis – upx – adfd72bcc56ad11b2736584c152e3cdc

January 18, 2023

Score: 9 MALWARE FAMILY: upxTAGS:upxMD5: adfd72bcc56ad11b2736584c152e3cdcSHA1: 7c2745c476490a68d6a8a3ee3207312c7d7c5ac4ANALYSIS DATE: 2023-01-18T04:09:08ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Royal Ransomware Victim: Livingston

January 18, 2023

RoyalRansomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the...

Git patches two critical remote code execution security flaws

January 18, 2023

Git has patched two critical severity security vulnerabilities that could allow attackers to execute arbitrary code after successfully exploiting heap-based...

Hackers can use GitHub Codespaces to host and deliver malware

January 18, 2023

Researchers have demonstrated how threat actors can abuse the GitHub Codespaces' port forwarding' feature to host and distribute malware and...

Nissan North America data breach caused by vendor-exposed database

January 18, 2023

Nissan North America has begun sending data breach notifications informing customers of a breach at a third-party service provider that...

Over 4,000 Sophos Firewall devices vulnerable to RCE attacks

January 18, 2023

Over 4,000 Sophos Firewall devices exposed to Internet access are vulnerable to attacks targeting a critical remote code execution (RCE)...

MSI accidentally breaks Secure Boot for hundreds of motherboards

January 18, 2023

Over 290 MSI motherboards are reportedly affected by an insecure default UEFI Secure Boot setting settings that allows any operating...

Researchers to release PoC exploit for critical ManageEngine RCE bug, patch now

January 18, 2023

Proof-of-concept exploit code will be released later this week for a critical vulnerability allowing remote code execution (RCE) without authentication...

IT Burnout may be Putting Your Organization at Risk

January 18, 2023

The heavy responsibility of securing organizations against cyber-attacks is overwhelming and weighs heavier on security professionals, recent data shows. In...

Hackers turn to Google search ads to push info-stealing malware

January 18, 2023

Hackers are setting up fake websites for popular free and open-source software to promote malicious downloads through advertisements in Google...

Cobalt Stike Beacon Detected – 66[.]165[.]243[.]44:80

January 18, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 124[.]221[.]169[.]111:9999

January 18, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 91[.]240[.]118[.]212:82

January 18, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 179[.]43[.]156[.]148:443

January 18, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – 1dbe2a7afbed81c1d517f0d29c08cd03

January 18, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 1dbe2a7afbed81c1d517f0d29c08cd03SHA1: 06bb32dd20d2726d9d1fb859c70846d70e6988eaANALYSIS DATE: 2023-01-17T23:52:48ZTTPS: T1005, T1081, T1222, T1082,...

threatintel

Malware Analysis – djvu – 831ea71d4e3cc3e27250500e14d4ac25

Malware Analysis – djvu – 7a84a1a41a766c91cf8a3df085f960b6

Royal Ransomware Victim: K Azarosian Costello

Malware Analysis – discovery – 054e745aa82ab8cfa9839012b88be92e

Malware Analysis – – ad3bc99ab03f6fcef0215c0eb185bf6f

Malware Analysis – discovery – f14153bbd95fc26d9ccea77c49cf09b9

Malware Analysis – djvu – 7759fcd2fb56a92edd795ce8816beec2

Malware Analysis – discovery – cc11aad00f58586019f729fc87ae0770

Malware Analysis – djvu – 008d06f2da41aff875920ca2fc30dbeb

Malware Analysis – upx – adfd72bcc56ad11b2736584c152e3cdc

Royal Ransomware Victim: Livingston

Git patches two critical remote code execution security flaws

Hackers can use GitHub Codespaces to host and deliver malware

Nissan North America data breach caused by vendor-exposed database

Over 4,000 Sophos Firewall devices vulnerable to RCE attacks

MSI accidentally breaks Secure Boot for hundreds of motherboards

Researchers to release PoC exploit for critical ManageEngine RCE bug, patch now

IT Burnout may be Putting Your Organization at Risk

Hackers turn to Google search ads to push info-stealing malware

Cobalt Stike Beacon Detected – 66[.]165[.]243[.]44:80

Cobalt Stike Beacon Detected – 124[.]221[.]169[.]111:9999

Cobalt Stike Beacon Detected – 91[.]240[.]118[.]212:82

Cobalt Stike Beacon Detected – 179[.]43[.]156[.]148:443

Malware Analysis – djvu – 1dbe2a7afbed81c1d517f0d29c08cd03

Security Awareness Training that Works for Changing Employee Behavior

Security Awareness Training that Works for Changing Employee Behavior

FreeOnes – 960,213 breached accounts

Cobalt Strike Beacon Detected – 47[.]120[.]32[.]72:8081

Cobalt Strike Beacon Detected – 8[.]147[.]128[.]54:443

Cobalt Strike Beacon Detected – 43[.]100[.]27[.]141:8443

You may have missed

Security Awareness Training that Works for Changing Employee Behavior