threatintel

Malware Analysis – djvu – 548b95bb2513576d2887d1871bcc3990

October 20, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 548b95bb2513576d2887d1871bcc3990SHA1: 6699c6a95ea88d9c0e84ecd55fc47006e9870104ANALYSIS DATE: 2022-10-20T15:26:14ZTTPS: T1060, T1112, T1053, T1005,...

Malware Analysis – persistence – 1194a0f50753c9e2de2ca167e9126e4d

October 20, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 1194a0f50753c9e2de2ca167e9126e4dSHA1: 348b33d313f1adad9c4429ff59cae236f83b24dcANALYSIS DATE: 2022-10-20T15:20:33ZTTPS: T1082, T1107, T1490, T1091, T1060, T1112, T1005, T1081...

Malware Analysis – – 499eec4dab168f19d1ee282f66f724b0

October 20, 2022

Score: 8 MALWARE FAMILY: TAGS:MD5: 499eec4dab168f19d1ee282f66f724b0SHA1: ec42e15f7b138a5572a3b5cb1a022cd82f1d7279ANALYSIS DATE: 2022-10-20T15:29:32ZTTPS: T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – ransomware – 611aea0fc953a1a881cc939a9e3c3af5

October 20, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 611aea0fc953a1a881cc939a9e3c3af5SHA1: f70aee02ae0d06c6e6fd8a0e98931d1c660733cbANALYSIS DATE: 2022-10-20T15:40:15ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – djvu – 15ed67e24f385d965b44b8b439cf4fe0

October 20, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 15ed67e24f385d965b44b8b439cf4fe0SHA1: 22535d74b6488d8ea9b84f885afe33cb671890c2ANALYSIS DATE: 2022-10-20T15:49:37ZTTPS: T1222, T1053, T1005, T1081,...

Malware Analysis – ryuk – a650d5676dc2c91a3af2216044ddaf8c

October 20, 2022

Score: 10 MALWARE FAMILY: ryukTAGS:family:ryuk, discovery, evasion, ransomwareMD5: a650d5676dc2c91a3af2216044ddaf8cSHA1: 851eea629fda6f930ebfd7ac45de5e8bc3f506b5ANALYSIS DATE: 2022-10-20T15:40:19ZTTPS: T1158, T1222, T1082, T1012, T1120, T1053 ScoreMeaningExample10Known badA...

Malware Analysis – smokeloader – f2f1b97c733698ad3c6ddb4a12bc703e

October 20, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: f2f1b97c733698ad3c6ddb4a12bc703eSHA1: 51e3ca64e3b6b3f74a714df9d916303e5ffe22a3ANALYSIS DATE: 2022-10-20T15:41:30ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 0284ef0c5e906d8c6f03393d9cd82e63

October 20, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 0284ef0c5e906d8c6f03393d9cd82e63SHA1: df461c8ad24f1b90f6c711a9a3a58c4228b4a9d8ANALYSIS DATE: 2022-10-20T16:01:04ZTTPS: T1130, T1112, T1060, T1053,...

Malware Analysis – djvu – cb404fc3a8a024240f2804dd5128ff6c

October 20, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5: cb404fc3a8a024240f2804dd5128ff6cSHA1: b882d72fab44002a7a7b1c05abdef03badb3f9b8ANALYSIS...

Malware Analysis – persistence – b16fb95d7c624fb064dcfe39c746a29d

October 20, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: b16fb95d7c624fb064dcfe39c746a29dSHA1: 75f23d8fd87ca250ecc9dd66ca5c1d04a7e9540eANALYSIS DATE: 2022-10-20T16:00:28ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091, T1060, T1112...

Malware Analysis – ransomware – 332c1a9146276bc9abc1161e13efabde

October 20, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 332c1a9146276bc9abc1161e13efabdeSHA1: 6c366cd3b4a54f8e9f7ed6016aac9e7509b06102ANALYSIS DATE: 2022-10-20T16:14:30ZTTPS: T1091, T1005, T1081 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

CISA: CISA Requests for Comment on Microsoft 365 Security Configuration Baselines

October 20, 2022

CISA Requests for Comment on Microsoft 365 Security Configuration Baselines CISA has issued requests for comment (RFCs) on eight Microsoft...

CISA: Mozilla Releases Security Updates for Firefox

October 20, 2022

Mozilla Releases Security Updates for Firefox Mozilla has released security updates to address vulnerabilities in Firefox ESR and Firefox. An attacker could...

Internet disruptions observed as Russia targets critical infrastructure in Ukraine

October 20, 2022

While the Russian army is conducting coordinated missile and drone strikes in Ukraine experts observed Internet disruptions in the country....

PartyLoud – A Simple Tool To Generate Fake Web Browsing And Mitigate Tracking

October 20, 2022

PartyLoud is a highly configurable and straightforward free tool that helps you prevent tracking directly from your linux terminal, no...

Malware Analysis – snatch – 2fa3c5b2e6a0c465045fe8dd7f55dd9a

October 20, 2022

Score: 10 MALWARE FAMILY: snatchTAGS:family:snatch, ransomware, spyware, stealer, upxMD5: 2fa3c5b2e6a0c465045fe8dd7f55dd9aSHA1: 1e6ea91491804da44db10be25bd1ea36baa0b362ANALYSIS DATE: 2022-10-20T08:15:19ZTTPS: T1107, T1490, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 161d5d74281ab0315310fc0ba345d7f3

October 20, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 161d5d74281ab0315310fc0ba345d7f3SHA1: 0031fe55a758188fb7f1743c0a3b4b6426d9464bANALYSIS DATE: 2022-10-20T08:00:22ZTTPS: T1107, T1490, T1091, T1005, T1081, T1082 ScoreMeaningExample10Known badA malware...

Black Basta Ransomware Victim: ESSICKAIR

October 20, 2022

Black Basta Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Black Basta Ransomware Victim: METASYS

October 20, 2022

Black Basta Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Black Basta Ransomware Victim: A G Equipment Company

October 20, 2022

Black Basta Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Black Basta Ransomware Victim: TSC

October 20, 2022

Black Basta Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Malware Analysis – phobos – 3f37b06e74816784da1e831a340f381b

October 20, 2022

Score: 10 MALWARE FAMILY: phobosTAGS:family:phobos, evasion, persistence, ransomwareMD5: 3f37b06e74816784da1e831a340f381bSHA1: dc0a75381841eb844fe2efbcd9624b66309de690ANALYSIS DATE: 2022-10-20T08:15:35ZTTPS: T1490, T1059, T1107, T1060, T1112, T1031 ScoreMeaningExample10Known badA...

Malware Analysis – djvu – 4ce7edb3a966f0921ad4531008ac38a2

October 20, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 4ce7edb3a966f0921ad4531008ac38a2SHA1: 34b59085def8dd808add17dbf4639784746079b0ANALYSIS DATE: 2022-10-20T08:17:54ZTTPS: T1053, T1005, T1081, T1012,...

Malware Analysis – ransomware – ce36475e41157b1187801d6b663ab744

October 20, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: ce36475e41157b1187801d6b663ab744SHA1: 70a4c1e77ab8c2de2cdf928dabd7fedfbd7a41c4ANALYSIS DATE: 2022-10-20T08:15:26ZTTPS: T1059, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

threatintel

Malware Analysis – djvu – 548b95bb2513576d2887d1871bcc3990

Malware Analysis – persistence – 1194a0f50753c9e2de2ca167e9126e4d

Malware Analysis – – 499eec4dab168f19d1ee282f66f724b0

Malware Analysis – ransomware – 611aea0fc953a1a881cc939a9e3c3af5

Malware Analysis – djvu – 15ed67e24f385d965b44b8b439cf4fe0

Malware Analysis – ryuk – a650d5676dc2c91a3af2216044ddaf8c

Malware Analysis – smokeloader – f2f1b97c733698ad3c6ddb4a12bc703e

Malware Analysis – djvu – 0284ef0c5e906d8c6f03393d9cd82e63

Malware Analysis – djvu – cb404fc3a8a024240f2804dd5128ff6c

Malware Analysis – persistence – b16fb95d7c624fb064dcfe39c746a29d

Malware Analysis – ransomware – 332c1a9146276bc9abc1161e13efabde

CISA: CISA Requests for Comment on Microsoft 365 Security Configuration Baselines

CISA: Mozilla Releases Security Updates for Firefox

Internet disruptions observed as Russia targets critical infrastructure in Ukraine

PartyLoud – A Simple Tool To Generate Fake Web Browsing And Mitigate Tracking

Malware Analysis – snatch – 2fa3c5b2e6a0c465045fe8dd7f55dd9a

Malware Analysis – ransomware – 161d5d74281ab0315310fc0ba345d7f3

Black Basta Ransomware Victim: ESSICKAIR

Black Basta Ransomware Victim: METASYS

Black Basta Ransomware Victim: A G Equipment Company

Black Basta Ransomware Victim: TSC

Malware Analysis – phobos – 3f37b06e74816784da1e831a340f381b

Malware Analysis – djvu – 4ce7edb3a966f0921ad4531008ac38a2

Malware Analysis – ransomware – ce36475e41157b1187801d6b663ab744

France Jacks Into The Matrix For State Messaging – And Pays Too

Azure’s Bad Night Fuels Fresh Calls For Cloud Diversification In Europe

Australian Police Building Ai To Translate Emoji Used By ‘crimefluencers’

Proton Trains New Service To Expose Corporate Infosec Cover Ups

Docker Compose Vulnerability Opens Door To Host Level Writes – Patch Pronto

You may have missed