OSINT

Malware Analysis – djvu – a127d8ca0f2bb68637986507345bbe63

December 7, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: a127d8ca0f2bb68637986507345bbe63SHA1: a17b963dc01d6779de584fa123dd49b7029de282ANALYSIS DATE: 2022-12-07T17:56:03ZTTPS: T1060, T1112, T1005, T1081,...

Malware Analysis – djvu – e2fb29c42395f4e9224965b0f94a66cb

December 7, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: e2fb29c42395f4e9224965b0f94a66cbSHA1: e52a22be1675a8fadfad05f293f4c226ea29b0e7ANALYSIS DATE: 2022-12-07T16:49:20ZTTPS: T1053, T1005, T1081, T1012,...

New Go-based botnet Zerobot exploits dozens of flaws

December 7, 2022

Researchers discovered a new Go-based botnet called Zerobot that exploits two dozen security vulnerabilities IoT devices. Fortinet FortiGuard Labs researchers have discovered...

Digital Binary Code on Dark Red Background. Data Breach

Abandonia (2022) – 919,790 breached accounts

December 7, 2022

In November 2022, the gaming website dedicated to classic DOS games Abandonia suffered a data breach resulting in the exposure...

Pwn2Own Toronto 2022 hacking competition. Samsung S22 hacked

December 7, 2022

The Pwn2Own Toronto 2022 hacking competition has begun, this is the 10th anniversary of the consumer-focused version of the contest....

Pylirt – Python Linux Incident Response Toolkit

December 7, 2022

With this application, it is aimed to accelerate the incident response processes by collecting information in linux operating systems. Contact...

Cobalt Stike Beacon Detected – 42[.]194[.]147[.]138:8888

December 7, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 51[.]222[.]200[.]10:443

December 7, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 139[.]177[.]146[.]61:80

December 7, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 47[.]103[.]42[.]161:8087

December 7, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 39[.]99[.]152[.]41:443

December 7, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 8[.]218[.]99[.]231:443

December 7, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 34[.]203[.]200[.]135:443

December 7, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 85[.]208[.]136[.]49:80

December 7, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 120[.]48[.]31[.]168:80

December 7, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 83[.]217[.]11[.]6:443

December 7, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 172[.]104[.]191[.]136:443

December 7, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – ransomware – 4a81737439ec7394c244ba47ae77f453

December 7, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 4a81737439ec7394c244ba47ae77f453SHA1: 7a7ee53efec9156b2bc971312e872b08c5779e93ANALYSIS DATE: 2022-12-04T00:53:35ZTTPS: T1082, T1107, T1490, T1005, T1081 ScoreMeaningExample10Known badA malware family...

Bug Bounty

BugCrowd Bug Bounty Disclosure: – Reflected Cross Site Scripting (XSS) on https://gamemaker.io/account/dashboard – By abitsec

December 7, 2022

The below information is fully automated and the information is captured from the BugCrowd Disclosure website. The information was correct...

Cobalt Stike Beacon Detected – 154[.]209[.]82[.]138:81

December 7, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 43[.]140[.]251[.]169:443

December 7, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 106[.]55[.]2[.]194:80

December 7, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – discovery – 1b09ce5084f72b67a78c10fe5c22fc58

December 7, 2022

Score: 9 MALWARE FAMILY: discoveryTAGS:discovery, ransomwareMD5: 1b09ce5084f72b67a78c10fe5c22fc58SHA1: c72043ba63b3bfcff990d26046ab4ff228ebbf0aANALYSIS DATE: 2022-12-04T01:31:46ZTTPS: T1046, T1491, T1112, T1107, T1490, T1082 ScoreMeaningExample10Known badA malware family...

Cobalt Stike Beacon Detected – 118[.]99[.]52[.]143:80

December 7, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

OSINT

Malware Analysis – djvu – a127d8ca0f2bb68637986507345bbe63

Malware Analysis – djvu – e2fb29c42395f4e9224965b0f94a66cb

New Go-based botnet Zerobot exploits dozens of flaws

Abandonia (2022) – 919,790 breached accounts

Pwn2Own Toronto 2022 hacking competition. Samsung S22 hacked

Pylirt – Python Linux Incident Response Toolkit

Cobalt Stike Beacon Detected – 42[.]194[.]147[.]138:8888

Cobalt Stike Beacon Detected – 51[.]222[.]200[.]10:443

Cobalt Stike Beacon Detected – 139[.]177[.]146[.]61:80

Cobalt Stike Beacon Detected – 47[.]103[.]42[.]161:8087

Cobalt Stike Beacon Detected – 39[.]99[.]152[.]41:443

Cobalt Stike Beacon Detected – 8[.]218[.]99[.]231:443

Cobalt Stike Beacon Detected – 34[.]203[.]200[.]135:443

Cobalt Stike Beacon Detected – 85[.]208[.]136[.]49:80

Cobalt Stike Beacon Detected – 120[.]48[.]31[.]168:80

Cobalt Stike Beacon Detected – 83[.]217[.]11[.]6:443

Cobalt Stike Beacon Detected – 172[.]104[.]191[.]136:443

Malware Analysis – ransomware – 4a81737439ec7394c244ba47ae77f453

BugCrowd Bug Bounty Disclosure: – Reflected Cross Site Scripting (XSS) on https://gamemaker.io/account/dashboard – By abitsec

Cobalt Stike Beacon Detected – 154[.]209[.]82[.]138:81

Cobalt Stike Beacon Detected – 43[.]140[.]251[.]169:443

Cobalt Stike Beacon Detected – 106[.]55[.]2[.]194:80

Malware Analysis – discovery – 1b09ce5084f72b67a78c10fe5c22fc58

Cobalt Stike Beacon Detected – 118[.]99[.]52[.]143:80

[WORLDLEAKS] – Ransomware Victim: Informatika A[.]D[.]

[WORLDLEAKS] – Ransomware Victim: T[.]O[.] Brasil

[AKIRA] – Ransomware Victim: Pennant Park

[INCRANSOM] – Ransomware Victim: Fund for Reformed Companies (FONPER)

[QILIN] – Ransomware Victim: CMI

You may have missed