threatintel

Malware Analysis – djvu – 303b4f10a8e0d954f4dd3957e154115e

October 13, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 303b4f10a8e0d954f4dd3957e154115eSHA1: 634c5e625b7dc33dd9ec642a4804d84d406247e8ANALYSIS DATE: 2022-10-13T04:17:25ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – ransomware – 5bfd634e7ac4c3af07795bf372900438

October 13, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 5bfd634e7ac4c3af07795bf372900438SHA1: 858e1d79faa655435ae505da31c93ac765e754d9ANALYSIS DATE: 2022-10-13T03:41:04ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – smokeloader – 83491e1098bb33db8d7031012fb0b9ee

October 13, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 83491e1098bb33db8d7031012fb0b9eeSHA1: bd2adcf7b00e5a308aef20c8230f781d71a77974ANALYSIS DATE: 2022-10-13T04:35:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ransomware – 8e36f9c207ef759a245d7163396a0214

October 13, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 8e36f9c207ef759a245d7163396a0214SHA1: 2f2f8e3101c7a15ed35b3a2a99194466e2ce0bf4ANALYSIS DATE: 2022-10-13T04:41:04ZTTPS: T1107, T1490, T1091, T1005, T1081, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 46e0ca7ac55d9abaf3919faccbd19c48

October 13, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 46e0ca7ac55d9abaf3919faccbd19c48SHA1: 58f48d86e6d9e15f912e74a992595eb4711bad47ANALYSIS DATE: 2022-10-13T04:41:04ZTTPS: T1107, T1490, T1091, T1005, T1081, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – djvu – 3cb2e6b95ab69028f2c9134c048a63e8

October 13, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, stealerMD5: 3cb2e6b95ab69028f2c9134c048a63e8SHA1: e9349fd825a9bc00d9385d229422364c04d90fccANALYSIS DATE: 2022-10-13T04:32:05ZTTPS: T1130, T1112, T1053, T1060, T1222,...

Malware Analysis – ransomware – ea142a4996841131344cef783c74a6ff

October 13, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: ea142a4996841131344cef783c74a6ffSHA1: 83578e4a549ab21b6b38fad4782c4aeecb8bfe5eANALYSIS DATE: 2022-10-13T04:42:05ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 3d3ce60c54769f43cc846cd02aa2d764

October 13, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 3d3ce60c54769f43cc846cd02aa2d764SHA1: 46241f75ee1717e9ca601c204354c0656a2faff7ANALYSIS DATE: 2022-10-13T04:42:04ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 25f75f20df196dfb6b741ff34db2d8fa

October 13, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 25f75f20df196dfb6b741ff34db2d8faSHA1: b664a9f60e304ac6e3f830c7bacbcd68af2475b2ANALYSIS DATE: 2022-10-13T04:42:05ZTTPS: T1107, T1490, T1091, T1005, T1081, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 3fbc6e5194658e7002c4566d883ee832

October 13, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 3fbc6e5194658e7002c4566d883ee832SHA1: 937ca54be053e9cc89064472d4329a7a5436ca02ANALYSIS DATE: 2022-10-13T04:42:04ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – c6f2e0bb8a38f77da39ffd91982c1fa8

October 13, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: c6f2e0bb8a38f77da39ffd91982c1fa8SHA1: 76440c2ee0d6c958568b8388279cdb5a3c642badANALYSIS DATE: 2022-10-13T04:42:05ZTTPS: T1107, T1490, T1091, T1005, T1081, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – e8be108263e9911badc264e5d9cf3852

October 13, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: e8be108263e9911badc264e5d9cf3852SHA1: 9a23be6ee2da10230a27c15c79ef4ceb1e0f034aANALYSIS DATE: 2022-10-13T04:42:05ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – c9940322c64db390abd6f8095f89b5f4

October 13, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: c9940322c64db390abd6f8095f89b5f4SHA1: 44ca100d0dee7e801a02e4128319da15742c315aANALYSIS DATE: 2022-10-13T04:42:05ZTTPS: T1091, T1005, T1081, T1082, T1107, T1490 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – e098be2348879d120c081c5c3ec6e80c

October 13, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: e098be2348879d120c081c5c3ec6e80cSHA1: 16fe2ee6ec637de4117fbf76dffe53297d801c24ANALYSIS DATE: 2022-10-13T04:42:05ZTTPS: T1107, T1490, T1091, T1005, T1081, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 9ae38b82366b2ab04d70d7f1b6b8ece8

October 13, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 9ae38b82366b2ab04d70d7f1b6b8ece8SHA1: 356448d61c93b8866b61ee412fb76cf4c5629c9dANALYSIS DATE: 2022-10-13T04:42:05ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – dharma – 8ce606be5e21897d0c2c27c9cc403d37

October 13, 2022

Score: 10 MALWARE FAMILY: dharmaTAGS:family:dharma, persistence, ransomware, spyware, stealerMD5: 8ce606be5e21897d0c2c27c9cc403d37SHA1: 35282d2247a0ab9840aa4e709faf4c1766c329cdANALYSIS DATE: 2022-10-13T04:43:03ZTTPS: T1060, T1112, T1005, T1081, T1107, T1490 ScoreMeaningExample10Known...

Malware Analysis – ransomware – c26f9d5978e4e716e8bbf2dae555f037

October 13, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: c26f9d5978e4e716e8bbf2dae555f037SHA1: 3b00b47b422b15b8a3e259ff8f5e49cd8bf430dcANALYSIS DATE: 2022-10-13T04:42:05ZTTPS: T1091, T1005, T1081, T1082, T1107, T1490 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 83b49ae5278e28fc5e27523553b59a31

October 13, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 83b49ae5278e28fc5e27523553b59a31SHA1: cd6e1d99797a0147e4d110d54586601156a12ff9ANALYSIS DATE: 2022-10-13T04:42:05ZTTPS: T1107, T1490, T1091, T1005, T1081, T1082 ScoreMeaningExample10Known badA malware...

threatintel

Malware Analysis – djvu – 303b4f10a8e0d954f4dd3957e154115e

Malware Analysis – ransomware – 5bfd634e7ac4c3af07795bf372900438

Malware Analysis – smokeloader – 83491e1098bb33db8d7031012fb0b9ee

Malware Analysis – ransomware – 8e36f9c207ef759a245d7163396a0214

Malware Analysis – ransomware – 46e0ca7ac55d9abaf3919faccbd19c48

Malware Analysis – djvu – 3cb2e6b95ab69028f2c9134c048a63e8

Malware Analysis – ransomware – ea142a4996841131344cef783c74a6ff

Malware Analysis – ransomware – 3d3ce60c54769f43cc846cd02aa2d764

Malware Analysis – ransomware – 25f75f20df196dfb6b741ff34db2d8fa

Malware Analysis – ransomware – 3fbc6e5194658e7002c4566d883ee832

Malware Analysis – ransomware – c6f2e0bb8a38f77da39ffd91982c1fa8

Malware Analysis – ransomware – e8be108263e9911badc264e5d9cf3852

Malware Analysis – ransomware – c9940322c64db390abd6f8095f89b5f4

Malware Analysis – ransomware – e098be2348879d120c081c5c3ec6e80c

Malware Analysis – ransomware – 9ae38b82366b2ab04d70d7f1b6b8ece8

Malware Analysis – dharma – 8ce606be5e21897d0c2c27c9cc403d37

Malware Analysis – ransomware – c26f9d5978e4e716e8bbf2dae555f037

Malware Analysis – ransomware – 83b49ae5278e28fc5e27523553b59a31

Why Most Red Teams are Really Pentesters

Cobalt Stike Beacon Detected – 1[.]15[.]41[.]180:82

Cobalt Stike Beacon Detected – 124[.]220[.]148[.]236:80

Cobalt Stike Beacon Detected – 185[.]243[.]41[.]201:8080

Cobalt Stike Beacon Detected – 5[.]44[.]42[.]15:443

Cobalt Stike Beacon Detected – 109[.]166[.]233[.]139:443

HackerOne Bug Bounty Disclosure: socks-heap-buffer-overflow-via-malicious-http-redirect-with-oversized-hostname-abdullah

HackerOne Bug Bounty Disclosure: buffer-over-read-missing-nul-termination-in-addvariable-causes-undefined-behavior-sagorhawlader

HackerOne Bug Bounty Disclosure: blockstack-org-is-vulnerable-to-cve-cve–x-aulia

HackerOne Bug Bounty Disclosure: blockstack-browser-for-mac-leaks-core-api-password-to-rd-parties-frozensolid

HackerOne Bug Bounty Disclosure: logout-bypass-vulnerability-in-hiro-so-anonymous

You may have missed