Armenian Entities Hit by New Version of OxtaRAT Spying Tool
Entities in Armenia have come under a cyber attack using an updated version of a backdoor called OxtaRAT that allows...
New Mirai Botnet Variant ‘V3G4’ Exploiting 13 Flaws to Target Linux and IoT Devices
A new variant of the notorious Mirai botnet has been found leveraging several security vulnerabilities to propagate itself to Linux...
LockBit 3.0 Ransomware Victim: newbridge[.]org
LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...
LockBit 3.0 Ransomware Victim: myerspower[.]com
LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the...
LockBit 3.0 Ransomware Victim: coreautomation[.]com
LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...
Cobalt Stike Beacon Detected – 86[.]38[.]217[.]13:5454
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 34[.]234[.]209[.]157:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 204[.]48[.]27[.]227:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 43[.]139[.]1[.]48:8888
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 3[.]76[.]214[.]24:80
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 96[.]43[.]99[.]82:6003
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 164[.]92[.]138[.]223:8888
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 162[.]19[.]155[.]49:8008
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 3[.]236[.]86[.]244:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 43[.]142[.]68[.]138:5672
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 43[.]138[.]121[.]8:8080
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 150[.]158[.]41[.]176:800
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Malware Analysis – persistence – 5f77cb5129da0751684b33dd4348b842
Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 5f77cb5129da0751684b33dd4348b842SHA1: 4585da0ff7a763be1a46d78134624f7cd13e6940ANALYSIS DATE: 2023-02-17T09:39:19ZTTPS: T1060, T1112, T1005, T1081, T1082, T1012, T1120 ScoreMeaningExample10Known...
Malware Analysis – djvu – 526a47fe8d9412f34715d5e7d076867e
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 526a47fe8d9412f34715d5e7d076867eSHA1: ec884f0092138965ba915dc68dea00e9aed5d6bfANALYSIS DATE: 2023-02-17T10:00:16ZTTPS: T1012, T1082, T1005, T1081,...
Malware Analysis – smokeloader – 872424630248155787ee40b92d729795
Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 872424630248155787ee40b92d729795SHA1: 35c615cffa793680d5c50acfdd3707cfc817c339ANALYSIS DATE: 2023-02-17T10:03:11ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...
Malware Analysis – djvu – 1ec53a299c766db9fb3b32427526bd0b
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 1ec53a299c766db9fb3b32427526bd0bSHA1: 3c57b013ae239b7fa9d329e9e57ac5e99d295996ANALYSIS DATE: 2023-02-17T10:21:25ZTTPS: T1060, T1112, T1222, T1012,...
Malware Analysis – djvu – e54ae4c8a68d9bb0b8e04bae12af7aa2
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: e54ae4c8a68d9bb0b8e04bae12af7aa2SHA1: e4add6a96dec78af50508a511154a7675d82cc34ANALYSIS DATE: 2023-02-17T10:44:41ZTTPS: T1060, T1112, T1005, T1081,...
Malware Analysis – smokeloader – 30824c41f87523365ea97bb45124e05b
Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 30824c41f87523365ea97bb45124e05bSHA1: 84f3006abb751f0e3f2379f82fb21192dff007a1ANALYSIS DATE: 2023-02-17T11:04:58ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...
Malware Analysis – djvu – 6b093576c42c0eb186769a4e6ee81400
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: 6b093576c42c0eb186769a4e6ee81400SHA1: 14f30cac446218af606f9a03a3690f0ee17c79c0ANALYSIS DATE: 2023-02-17T10:51:22ZTTPS: T1060, T1112, T1222, T1082, T1012, T1053 ScoreMeaningExample10Known badA...
