Cobalt Stike Beacon Detected – 107[.]172[.]206[.]242:9999
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 163[.]123[.]142[.]173:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 43[.]138[.]27[.]134:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 89[.]147[.]108[.]116:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 35[.]202[.]0[.]124:6000
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 103[.]114[.]161[.]16:80
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 39[.]106[.]45[.]206:9091
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 106[.]12[.]127[.]241:8099
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 103[.]135[.]101[.]185:8443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
cURL libcurl security bypass | CVE-2022-32221
NAME cURL libcurl security bypass Platforms Affected:cURL libcurl 7.7 cURL libcurl 7.85.0Risk Level:8.2Exploitability:UnprovenConsequences:Bypass Security DESCRIPTION cURL libcurl could allow a...
Google Chrome V8 code execution | CVE-2022-3723
NAME Google Chrome V8 code execution Platforms Affected:Google Chrome 107.0Risk Level:8.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION Google Chrome could allow a remote attacker...
Apache Linkis code execution | CVE-2022-39944
NAME Apache Linkis code execution Platforms Affected:Apache Linkis 1.0.0 Apache Linkis 1.1.0 Apache Linkis 1.2.0Risk Level:8.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION Apache Linkis...
GnuPG Libksba buffer overflow | CVE-2022-3515
NAME GnuPG Libksba buffer overflow Platforms Affected:GnuPG Libksba 1.6.1Risk Level:9.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION GnuPG Libksba could allow a remote attacker to...
Apache Flume code execution | CVE-2022-42468
NAME Apache Flume code execution Platforms Affected:Apache Flume 1.4.0 Apache Flume 1.5.0 Apache Flume 1.6.0 Apache Flume 1.7.0 Apache Flume...
Daily Vulnerability Trends: Sat Oct 29 2022
Daily Vulnerability Trends (sourced from VulnMon) CVE NAMECVE DescriptionCVE-2022-39144A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262),...
Malware Analysis – discovery – 0b069e6bee51dc6325e33d484a4b9a80
Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploitMD5: 0b069e6bee51dc6325e33d484a4b9a80SHA1: 1ceaf2a7ea247149bc1dc3cdac7d50bc38ce52f7ANALYSIS DATE: 2022-10-28T23:17:19ZTTPS: T1222, T1012 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...
Malware Analysis – – 0e8a8fa96a1418741c15af44cb690750
Score: 1 MALWARE FAMILY: TAGS:MD5: 0e8a8fa96a1418741c15af44cb690750SHA1: 717adca2fba6c964724c54841c6921e50d393138ANALYSIS DATE: 2022-10-28T23:17:13ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...
Malware Analysis – discovery – 0c1270c9281c8a540925b0c0853b9a50
Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploitMD5: 0c1270c9281c8a540925b0c0853b9a50SHA1: e62beb73aa010fba90d3ecd73d404871c63c2326ANALYSIS DATE: 2022-10-28T23:17:16ZTTPS: T1012, T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...
Malware Analysis – – 00fcdb991966bbd97c9b00ee31359b20
Score: 7 MALWARE FAMILY: TAGS:MD5: 00fcdb991966bbd97c9b00ee31359b20SHA1: 439d96c31a7f99d0fe558908650140001047cfbfANALYSIS DATE: 2022-10-28T23:17:21ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...
Malware Analysis – evasion – 06d72aedb5b6f026e15d62fef01bc670
Score: 9 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 06d72aedb5b6f026e15d62fef01bc670SHA1: 1ee3212e8e867fca9b2d8e279d125e2b020e9418ANALYSIS DATE: 2022-10-28T23:59:26ZTTPS: T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...
Malware Analysis – discovery – 00170a3b55eb74baea75ccecc1b26281
Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploit, persistenceMD5: 00170a3b55eb74baea75ccecc1b26281SHA1: a1283b97699a17a691637da24d6ea6ab32090fb4ANALYSIS DATE: 2022-10-28T23:54:06ZTTPS: T1060, T1112, T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...
Malware Analysis – adware – 0bc2b22e86a771b76f8c00af483cf750
Score: 8 MALWARE FAMILY: adwareTAGS:adware, discovery, exploit, persistence, stealerMD5: 0bc2b22e86a771b76f8c00af483cf750SHA1: b13e4c0a59d71eaf5ebc9ae04abfe79a501679a2ANALYSIS DATE: 2022-10-28T23:59:53ZTTPS: T1222, T1012, T1120, T1082, T1112, T1176, T1060...
Malware Analysis – discovery – 0b81691bc9068c23e02d66ce868ed031
Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploit, persistenceMD5: 0b81691bc9068c23e02d66ce868ed031SHA1: a7219761cb5bdfc8cd87627ec05bd83dce5d60cdANALYSIS DATE: 2022-10-28T23:59:56ZTTPS: T1060, T1112, T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...
Malware Analysis – persistence – 0ae4f79627ae6b2a18003bc8cb9ff0a6
Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 0ae4f79627ae6b2a18003bc8cb9ff0a6SHA1: 809e502b51579802c0973cc0340afdec0bbd521eANALYSIS DATE: 2022-10-29T00:03:21ZTTPS: T1107, T1490, T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...
