Cobalt Stike Beacon Detected – 134[.]17[.]5[.]117:81
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Month: May 2023
Cobalt Stike Beacon Detected – 43[.]138[.]150[.]136:80
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
US-CERT Vulnerability Summary for the Week of May 1, 2023
The CISA Vulnerability Bulletin provides a summary of new vulnerabilities that have been recorded by the National Institute of Standards and...
ShadowSpray – A Tool To Spray Shadow Credentials Across An Entire Domain In Hopes Of Abusing Long Forgotten GenericWrite/GenericAll DACLs Over Other Objects In The Domain
A tool to spray Shadow Credentials across an entire domain in hopes of abusing long forgotten GenericWrite/GenericAll DACLs over other...
Royal Ransomware Victim: Parker Drilling
RoyalRansomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the...
Malware Analysis – lockbit – 1076cc8ff67a56f502f92ac4bd1ef7a2
Score: 10 MALWARE FAMILY: lockbitTAGS:family:lockbit, ransomware, spyware, stealerMD5: 1076cc8ff67a56f502f92ac4bd1ef7a2SHA1: ced86dbfd2ea04cdd51f5f87d555a313a46226c3ANALYSIS DATE: 2023-05-15T15:18:00ZTTPS: T1491, T1112, T1082, T1005, T1081 ScoreMeaningExample10Known badA malware...
Malware Analysis – lockbit – 0633d74c0e25b59e42ea4b674417240c
Score: 10 MALWARE FAMILY: lockbitTAGS:family:lockbit, ransomware, spyware, stealerMD5: 0633d74c0e25b59e42ea4b674417240cSHA1: b1aeca1530d05004d37ab8dab996f9463a2dad9aANALYSIS DATE: 2023-05-15T15:17:56ZTTPS: T1005, T1081, T1491, T1112, T1082 ScoreMeaningExample10Known badA malware...
Malware Analysis – persistence – 1300732c2ecc5c87640c561678ecca57
Score: 8 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 1300732c2ecc5c87640c561678ecca57SHA1: 8dd040f529bac7d2e50984446dc4163d3e467d01ANALYSIS DATE: 2023-05-15T15:18:00ZTTPS: T1130, T1112, T1060, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...
Malware Analysis – ransomware – 1cb2cc59c6cbc0f5ca25f3bc3fe1c227
Score: 5 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 1cb2cc59c6cbc0f5ca25f3bc3fe1c227SHA1: 9c3ee8c6ce40fafc881f6931055b95bde631762aANALYSIS DATE: 2023-05-15T15:18:05ZTTPS: T1082, T1112, T1491 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...
Malware Analysis – wannacry – 2ac915b394e66a45719c308e66badd2a
Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, persistence, ransomware, spyware, stealer, wormMD5: 2ac915b394e66a45719c308e66badd2aSHA1: 5ec4fdbb9b2c9313631825562098995793ce6278ANALYSIS DATE: 2023-05-15T15:18:11ZTTPS: T1046, T1158, T1222, T1107, T1490,...
Malware Analysis – wannacry – 1f449b5387d2de73aeadcf0dd43b4b91
Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: 1f449b5387d2de73aeadcf0dd43b4b91SHA1: d943c20f180064a0939fb947a3cc8cfb8207c1f9ANALYSIS DATE: 2023-05-15T15:18:07ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...
Malware Analysis – wannacry – c2fdfde11d10b0bcd297d499c9c7a697
Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, persistence, ransomware, spyware, stealer, wormMD5: c2fdfde11d10b0bcd297d499c9c7a697SHA1: 755e1ccf2f93b8987116580253d0c40c93efaecaANALYSIS DATE: 2023-05-15T15:18:55ZTTPS: T1046, T1082, T1158, T1222, T1107,...
Malware Analysis – persistence – 394be7c9d8275464517ad821e05f2f8d
Score: 8 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 394be7c9d8275464517ad821e05f2f8dSHA1: f2432754122b798d5c2272e03b57d679ec07cdc7ANALYSIS DATE: 2023-05-15T15:18:12ZTTPS: T1082, T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...
Malware Analysis – wannacry – 8a57ccbdf2dcb09bc1a9d2d35f915d9c
Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, spyware, stealer, wormMD5: 8a57ccbdf2dcb09bc1a9d2d35f915d9cSHA1: 8e6376685135132a39e7ca2be4642dc31e1d5650ANALYSIS DATE: 2023-05-15T15:18:43ZTTPS: T1046, T1158, T1222, T1082, T1005, T1081...
Malware Analysis – persistence – c835bbc4c4eb718ba0653d7b9a5f4448
Score: 8 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: c835bbc4c4eb718ba0653d7b9a5f4448SHA1: aad74838886e587fe4fa3c982afa7089fa37a846ANALYSIS DATE: 2023-05-15T15:18:59ZTTPS: T1082, T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...
Malware Analysis – wannacry – f066dceeee455ba85d1234f7024e329c
Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, persistence, ransomware, spyware, stealer, wormMD5: f066dceeee455ba85d1234f7024e329cSHA1: 764827d483e28cfe62159a807d5197ad64d9dc13ANALYSIS DATE: 2023-05-15T15:19:13ZTTPS: T1046, T1222, T1112, T1107, T1490,...
Malware Analysis – wannacry – 8770099822dbafc9758e953329833fa6
Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, persistence, ransomware, wormMD5: 8770099822dbafc9758e953329833fa6SHA1: c4c8eea66b6abfc392f46699831e73ac07c1fc70ANALYSIS DATE: 2023-05-15T16:35:05ZTTPS: T1046, T1112, T1158, T1222, T1012, T1082, T1060,...
Malware Analysis – djvu – 5579d34a9533f3b050cd53498b0f2486
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: 5579d34a9533f3b050cd53498b0f2486SHA1: d4c413ce8b60ec812328616f6ec1f77f78c19bd1ANALYSIS DATE: 2023-05-15T15:32:15ZTTPS: T1082, T1012, T1053, T1060, T1112, T1222 ScoreMeaningExample10Known badA...
Malware Analysis – ransomware – e1ec93bc29802c555f801849d4a90ec8
Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: e1ec93bc29802c555f801849d4a90ec8SHA1: f26acf48013ceac53ecbc969e640fb99e26635d8ANALYSIS DATE: 2023-05-15T16:17:40ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...
Malware Analysis – evasion – 11430f9bdbb02c4e3002377210c0caa2
Score: 10 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 11430f9bdbb02c4e3002377210c0caa2SHA1: 6a461c4f2487f2fc39a1d059096de661bd691057ANALYSIS DATE: 2023-05-15T17:17:35ZTTPS: T1112, T1012, T1120, T1082, T1107, T1490, T1031, T1562, T1489, T1018...
Malware Analysis – smokeloader – f8d947b83f40d8e8f8c23f5d2403b827
Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: f8d947b83f40d8e8f8c23f5d2403b827SHA1: 92fdaf5e8317e43ed9fc71d8249db064bbfd0c73ANALYSIS DATE: 2023-05-15T17:05:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...
Malware Analysis – phobos – f76cea55cfa44e913be198fabfbbf8bc
Score: 10 MALWARE FAMILY: phobosTAGS:family:phobos, evasion, persistence, ransomware, spyware, stealerMD5: f76cea55cfa44e913be198fabfbbf8bcSHA1: b5396284576de154380caef6d63b1c6d38b2f05bANALYSIS DATE: 2023-05-15T17:13:32ZTTPS: T1490, T1059, T1107, T1005, T1081, T1012,...
Malware Analysis – evasion – b042f35c249fcb91b84f3bfb89a7c584
Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomwareMD5: b042f35c249fcb91b84f3bfb89a7c584SHA1: a01331293438f0b3b4c836792c78a70df53db3a3ANALYSIS DATE: 2023-05-15T17:08:18ZTTPS: T1490, T1082, T1018, T1112, T1107, T1060, T1491, T1012, T1120...
Daily Threat Intelligence – May 15 – 2023
Are you still operating on vulnerable Microsoft SQL (MS SQL) servers? Security researchers have taken the wraps off of a...
