threatintel

Malware Analysis – discovery – 199cad31ad21ac6a8edb62035892669a

November 4, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, ransomwareMD5: 199cad31ad21ac6a8edb62035892669aSHA1: abc8509b631cdd4063f4bb22213ad9961043cfd6ANALYSIS DATE: 2022-11-04T09:59:30ZTTPS: T1082, T1057, T1012 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – smokeloader – 8c5802d28df242578c2b1bf06fb05816

November 4, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 8c5802d28df242578c2b1bf06fb05816SHA1: 4f851c4b86f65c1198512865742eac529f7c7284ANALYSIS DATE: 2022-11-04T11:34:29ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 2edfe3bc031c5cc9cc5bdf18aa7c3a02

November 4, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 2edfe3bc031c5cc9cc5bdf18aa7c3a02SHA1: b557b50822a2d788b410ead1e005197a0a4130d7ANALYSIS DATE: 2022-11-04T10:56:05ZTTPS: T1005, T1081, T1222, T1082, T1012, T1060,...

Malware Analysis – djvu – ac975fb5af0a817d64a23d721b525548

November 4, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: ac975fb5af0a817d64a23d721b525548SHA1: 45c53870a65c9fb494ab5e522a9a52124f0c60b6ANALYSIS DATE: 2022-11-04T10:31:04ZTTPS: T1130, T1112, T1060, T1222, T1082, T1053 ScoreMeaningExample10Known badA...

Malware Analysis – djvu – 46caeb9b470ef973d88cace1fae23f25

November 4, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, botnet:slovarik1btc, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5: 46caeb9b470ef973d88cace1fae23f25SHA1: 3d8c919f658bdcb22e96bc55852db4dd565fce2aANALYSIS DATE:...

The 10th edition of the ENISA Threat Landscape (ETL) report is out!

November 4, 2022

I’m proud to announce the release of the 10th edition of the ENISA Threat Landscape (ETL) on the state of...

Cisco addressed several high-severity flaws in its products

November 4, 2022

Cisco addressed multiple flaws impacting its products, including high-severity issues in identity, email, and web security solutions. Cisco addressed multiple...

LockBit 3.0 Ransomware Victim: hettichbenelux[.]com

November 4, 2022

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

LockBit 3.0 Ransomware Victim: santimuni[.]com

November 4, 2022

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

LockBit 3.0 Ransomware Victim: kingteam[.]com[.]tw

November 4, 2022

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

LockBit 3.0 Ransomware Victim: cacula[.]com

November 4, 2022

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Malware Analysis – – 045f8512e0b82b10dcd510492ae75a02

November 4, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: 045f8512e0b82b10dcd510492ae75a02SHA1: db7936f5f9e2f75634f5b39597bd68e1dc2d9618ANALYSIS DATE: 2022-11-04T03:18:03ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – wannacry – 328ec0632c2a5318d3c189eceab6b488

November 4, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: 328ec0632c2a5318d3c189eceab6b488SHA1: bbd958285c9744c460f7da1ccda942c47d245cc6ANALYSIS DATE: 2022-11-04T03:00:34ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – djvu – a8cf6c4ce9bae2e0433a9d6f5a9090b0

November 4, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, botnet:mario23_10, botnet:slovarik1btc, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5: a8cf6c4ce9bae2e0433a9d6f5a9090b0SHA1: 2b33cde4309e82bb278132dfddbf90319b2c9139ANALYSIS...

Malware Analysis – djvu – c8974837ee9e62f78817492ef2cc71ff

November 4, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, botnet:mario23_10, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5: c8974837ee9e62f78817492ef2cc71ffSHA1: 7e580765dd04d1c42c33611d39bd2682f0e5aa29ANALYSIS DATE:...

Malware Analysis – djvu – 52f22a333f60f4af27239ae51eb9d3d7

November 4, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 52f22a333f60f4af27239ae51eb9d3d7SHA1: 3bc9e4286878a61737763f260e5eefec96f1f20bANALYSIS DATE: 2022-11-04T05:51:22ZTTPS: T1012, T1082, T1053, T1005, T1081, T1060,...

Malware Analysis – smokeloader – 8611fcd3c059993ae37c038f0682507a

November 4, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 8611fcd3c059993ae37c038f0682507aSHA1: 82a2f78e8594faff95889690b93fb37ed96ad242ANALYSIS DATE: 2022-11-04T05:05:33ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – dc64e4857ede57bf4a938088261cbce4

November 4, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: dc64e4857ede57bf4a938088261cbce4SHA1: 4f35ebc663ef9df15ddd9e5676f63e43a0138665ANALYSIS DATE: 2022-11-04T05:31:17ZTTPS: T1053, T1005, T1081, T1012, T1060, T1112,...

Malware Analysis – smokeloader – 8aeee4f03c86f2d4377129edc204d26c

November 4, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 8aeee4f03c86f2d4377129edc204d26cSHA1: 931c011b463b6f122ff0009d1cbb022786ea70acANALYSIS DATE: 2022-11-04T05:31:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

threatintel

Malware Analysis – discovery – 199cad31ad21ac6a8edb62035892669a

Malware Analysis – smokeloader – 8c5802d28df242578c2b1bf06fb05816

Malware Analysis – djvu – 2edfe3bc031c5cc9cc5bdf18aa7c3a02

Malware Analysis – djvu – ac975fb5af0a817d64a23d721b525548

Malware Analysis – djvu – 46caeb9b470ef973d88cace1fae23f25

The 10th edition of the ENISA Threat Landscape (ETL) report is out!

Cisco addressed several high-severity flaws in its products

LockBit 3.0 Ransomware Victim: hettichbenelux[.]com

LockBit 3.0 Ransomware Victim: santimuni[.]com

LockBit 3.0 Ransomware Victim: kingteam[.]com[.]tw

LockBit 3.0 Ransomware Victim: cacula[.]com

Malware Analysis – – 045f8512e0b82b10dcd510492ae75a02

Malware Analysis – wannacry – 328ec0632c2a5318d3c189eceab6b488

Malware Analysis – djvu – a8cf6c4ce9bae2e0433a9d6f5a9090b0

Malware Analysis – djvu – c8974837ee9e62f78817492ef2cc71ff

Malware Analysis – djvu – 52f22a333f60f4af27239ae51eb9d3d7

Malware Analysis – smokeloader – 8611fcd3c059993ae37c038f0682507a

Malware Analysis – djvu – dc64e4857ede57bf4a938088261cbce4

Malware Analysis – smokeloader – 8aeee4f03c86f2d4377129edc204d26c

Cobalt Stike Beacon Detected – 20[.]82[.]145[.]211:80

Cobalt Stike Beacon Detected – 152[.]136[.]153[.]12:8009

Cobalt Stike Beacon Detected – 5[.]44[.]42[.]42:80

Cobalt Stike Beacon Detected – 120[.]48[.]9[.]221:9999

Cobalt Stike Beacon Detected – 81[.]68[.]158[.]178:443

[QILIN] – Ransomware Victim: Custom Food Ingredients

[SAFEPAY] – Ransomware Victim: ingrammicro[.]com

[QILIN] – Ransomware Victim: tissot[.]com

HackerOne Bug Bounty Disclosure: bypass-no-links-restriction-in-biography-via-protocol-relative-url-yoyomiski

HackerOne Bug Bounty Disclosure: mozilla-vpn-clients-rce-via-file-write-and-path-traversal-trein

You may have missed