Cobalt Stike Beacon Detected – 13[.]214[.]128[.]88:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 125[.]176[.]39[.]23:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 185[.]216[.]71[.]178:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Malware Analysis – ransomware – 6b9efcae830a5ffcc656118f5f0d6297
Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 6b9efcae830a5ffcc656118f5f0d6297SHA1: 5a8601f3406b4a68b7e995628e3b8f6b802c15aaANALYSIS DATE: 2022-10-24T21:40:19ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...
Malware Analysis – smokeloader – 94301ae8afdd2d4ade377521f2066ee9
Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 94301ae8afdd2d4ade377521f2066ee9SHA1: e6c6fdcd68ffa04f6631d1869de6f8c0a0217bf3ANALYSIS DATE: 2022-10-24T21:11:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...
Malware Analysis – redline – 03bf9239a1c35ef0f6f162180499167f
Score: 10 MALWARE FAMILY: redlineTAGS:family:redline, discovery, evasion, infostealer, persistence, spyware, stealer, trojanMD5: 03bf9239a1c35ef0f6f162180499167fSHA1: b1921d4747ed0ca08ecb31dda5b57079dcd6085dANALYSIS DATE: 2022-10-24T20:50:15ZTTPS: T1082, T1112, T1031, T1089,...
Malware Analysis – ransomware – fe78aa640bbfe61d0363ce43521f7fad
Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: fe78aa640bbfe61d0363ce43521f7fadSHA1: ccb85ef6f5f18eda9c90214c063dad81f3750285ANALYSIS DATE: 2022-10-24T21:20:20ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...
Malware Analysis – ransomware – 36171704cde087f839b10c2465d864e1
Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 36171704cde087f839b10c2465d864e1SHA1: e3baa1c3ee9aa1d5ae61187be2e20ea9cb57d538ANALYSIS DATE: 2022-10-24T21:44:47ZTTPS: T1012, T1120, T1082, T1005, T1081 ScoreMeaningExample10Known badA malware family...
Malware Analysis – ransomware – e49d70b619a1220ebb880dc4f19f730c
Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: e49d70b619a1220ebb880dc4f19f730cSHA1: ef68f39b5908b8405ce55a51d6e3c599839c3cbbANALYSIS DATE: 2022-10-24T22:39:53ZTTPS: T1491, T1112, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...
Malware Analysis – ransomware – f80050268e39f91fa34ce75ec8b6cfe3
Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: f80050268e39f91fa34ce75ec8b6cfe3SHA1: 96c63bdc35010230b259748d6efd62abefc85e63ANALYSIS DATE: 2022-10-24T21:40:22ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...
Malware Analysis – djvu – e7a56ac2f0f6f3cae173a93ac2e1d858
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, family:vidar, botnet:517, botnet:google2, botnet:mario23_10, botnet:nam7, botnet:slovarik15btc, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware,...
Malware Analysis – ransomware – 3e6df41f4e8aa4d85f0d6ca7cf9f3069
Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomware, upxMD5: 3e6df41f4e8aa4d85f0d6ca7cf9f3069SHA1: 279f1cd5a405a217fc2d99f8ddcdfa3fb0198008ANALYSIS DATE: 2022-10-24T22:40:26ZTTPS: T1082, T1491, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...
Malware Analysis – ransomware – 984db2d337c7a1f8c7eee662382d5354
Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 984db2d337c7a1f8c7eee662382d5354SHA1: 235415861f9b9be9e2413fc5c2ce8d34122a2f76ANALYSIS DATE: 2022-10-24T22:40:17ZTTPS: T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...
Malware Analysis – ransomware – ffa9d1cdccb22d5a686d1273992fe504
Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: ffa9d1cdccb22d5a686d1273992fe504SHA1: 825392c22a939c44fc3923dea1f7c6d603b17964ANALYSIS DATE: 2022-10-24T22:40:22ZTTPS: T1005, T1081, T1082, T1491, T1112 ScoreMeaningExample10Known badA malware family...
Malware Analysis – wannacry – eb3501049b53a503d67cbdf07a7cbdd7
Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: eb3501049b53a503d67cbdf07a7cbdd7SHA1: f7419b49f425a0c4a3c2d2f5e7f82eee0754e247ANALYSIS DATE: 2022-10-24T22:40:27ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...
Apple fixed the ninth actively exploited zero-day this year
Apple released security updates that addressed the ninth zero-day vulnerability actively exploited in the wild since the start of the...
Uncovering Security Blind Spots in CNC Machines
Industry 4.0 has given rise to smart factories that have markedly improved machining processes, but it has also opened the...
US-CERT Bulletin (SB22-297):Vulnerability Summary for the Week of October 17, 2022
The CISA Vulnerability Bulletin provides a summary of new vulnerabilities that have been recorded by the National Institute of Standards...
Cuba ransomware affiliate targets Ukraine, CERT-UA warns
The Ukraine Computer Emergency Response Team (CERT-UA) warns of Cuba Ransomware attacks against critical networks in the country. The Ukraine...
LockBit 3.0 Ransomware Victim: pendragonplc[.]com
LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...
Norway PM warns of Russia cyber threat to oil and gas industry
Norway ’s prime minister warned last week that Russia poses “a real and serious threat” to the country’s oil and...
Doomworld – 34,478 breached accounts
In October 2022, the Doomworld fourm suffered a data breach that exposed 34k member records. The data included email and...
E-Pal – 108,887 breached accounts
In October 2022, the service dedicated to finding friends on Discord known as E-Pal disclosed a data breach. The compromised...
Bomber – Scans Software Bill Of Materials (SBOMs) For Security Vulnerabilities
bomber is an application that scans SBOMs for security vulnerabilities. Overview So you've asked a vendor for an Software Bill...
