Squarephish – An advanced phishing tool that uses a technique combining the OAuth Device code authentication flow and QR codes
SquarePhish is an advanced The victim will then scan the QR code found in the email body with their mobile...
OSINT
Cobalt Stike Beacon Detected – 194[.]135[.]24[.]246:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 45[.]76[.]196[.]6:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 106[.]75[.]218[.]220:8443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 185[.]143[.]223[.]61:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 84[.]32[.]128[.]100:80
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 8[.]143[.]2[.]128:2095
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 66[.]42[.]38[.]47:8443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Malware Analysis – persistence – 7fc1d33734cbae90767ee85c6afee623
Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 7fc1d33734cbae90767ee85c6afee623SHA1: e00adfff94436788d5d77b55967b6ec0b79052b5ANALYSIS DATE: 2022-12-21T09:33:00ZTTPS: T1107, T1490, T1060, T1112, T1130, T1005, T1081, T1491...
Malware Analysis – evasion – fe3779bf7474628cfa2f81fffa20debc
Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: fe3779bf7474628cfa2f81fffa20debcSHA1: 0174c851e3519fcb0e615763447a7e34b34abbeaANALYSIS DATE: 2022-12-21T09:24:02ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...
Malware Analysis – neshta – a5be3dec76f0d6a6c94dae71f9280754
Score: 10 MALWARE FAMILY: neshtaTAGS:family:neshta, persistence, ransomware, spyware, stealer, upxMD5: a5be3dec76f0d6a6c94dae71f9280754SHA1: 0f69eba986bc00a49823a07343b845c1331afeabANALYSIS DATE: 2022-12-21T10:19:15ZTTPS: T1112, T1042, T1491, T1005, T1081, T1082...
Malware Analysis – discovery – 193cbda4598fe61c69b538416fb78aa1
Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, evasion, exploit, persistenceMD5: 193cbda4598fe61c69b538416fb78aa1SHA1: 7f8546a917732a4daf146b818fdb7c14b25df3baANALYSIS DATE: 2022-12-21T10:19:28ZTTPS: T1222, T1004, T1112, T1082 ScoreMeaningExample10Known badA malware family...
Malware Analysis – mafiaware666 – 2ef92f8ab2b6820d6eb559167676c1f4
Score: 10 MALWARE FAMILY: mafiaware666TAGS:family:mafiaware666, ransomwareMD5: 2ef92f8ab2b6820d6eb559167676c1f4SHA1: 628121779da83ae14822129da6c14b2bfbb2f7d1ANALYSIS DATE: 2022-12-21T10:20:12ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...
Malware Analysis – discovery – 54b7902f04e0f2f073352e5cd8f460f0
Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, evasion, exploitMD5: 54b7902f04e0f2f073352e5cd8f460f0SHA1: cd794b02eaa48fd22a79427bb663ad01a8463323ANALYSIS DATE: 2022-12-21T10:16:47ZTTPS: T1082, T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...
Malware Analysis – djvu – f3c08764e6566a1fbf375b339f7560f9
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: f3c08764e6566a1fbf375b339f7560f9SHA1: ed1f5cd00a2773a0666d79e538bf3e00d85ed4adANALYSIS DATE: 2022-12-21T11:19:32ZTTPS: T1005, T1081, T1060, T1112, T1012, T1082,...
Malware Analysis – djvu – ceb30f3c9d50ea45824f0359c91837c8
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: ceb30f3c9d50ea45824f0359c91837c8SHA1: 5666d338d62810c792333be7218e13ce6cd1771cANALYSIS DATE: 2022-12-21T10:22:39ZTTPS: T1053, T1005, T1081, T1060, T1112, T1082,...
Malware Analysis – djvu – 189322ec83e2260f2d52038bf33051a2
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 189322ec83e2260f2d52038bf33051a2SHA1: 14f3eef459c9ab8e36e3ebb8d2a29f24efa67d92ANALYSIS DATE: 2022-12-21T10:53:34ZTTPS: T1082, T1012, T1060, T1112, T1222, T1053,...
Malware Analysis – mespinoza – 4dc8cae2cfff6ac862aea48b014937bb
Score: 10 MALWARE FAMILY: mespinozaTAGS:family:mespinoza, ransomware, spyware, stealerMD5: 4dc8cae2cfff6ac862aea48b014937bbSHA1: 80486ca4caa5cb4ce42885dcd66d7a1b4a27d5ceANALYSIS DATE: 2022-12-21T10:49:31ZTTPS: T1112, T1012, T1486, T1082, T1005, T1081 ScoreMeaningExample10Known badA...
Daily Vulnerability Trends: Wed Dec 21 2022
Daily Vulnerability Trends (sourced from VulnMon) CVE NAMECVE DescriptionCVE-2021-33621The cgi gem before 0.1.0.2, 0.2.x before 0.2.2, and 0.3.x before 0.3.5...
HIVE Ransomware Victim: City Of Huntsville, Texas
HIVE Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of...
HIVE Ransomware Victim: Stolle Machinery
HIVE Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of...
HIVE Ransomware Victim: Innovative Education Management
HIVE Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of...
HIVE Ransomware Victim: North Idaho College
HIVE Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of...
HIVE Ransomware Victim: Interface
HIVE Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of...
