Cobalt Stike Beacon Detected – 47[.]242[.]63[.]91:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
OSINT
Cobalt Stike Beacon Detected – 212[.]113[.]106[.]118:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 3[.]235[.]183[.]165:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 107[.]189[.]13[.]130:80
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Malware Analysis – wannacry – 7bf2b57f2a205768755c07f238fb32cc
Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, ransomware, wormMD5: 7bf2b57f2a205768755c07f238fb32ccSHA1: 45356a9dd616ed7161a3b9192e2f318d0ab5ad10ANALYSIS DATE: 2023-01-20T10:19:02ZTTPS: T1491, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...
Malware Analysis – – 4e68cfad3f3cbef5406c90fd9e9d7931
Score: 1 MALWARE FAMILY: TAGS:MD5: 4e68cfad3f3cbef5406c90fd9e9d7931SHA1: 504d53957bbed8e1a612c791eec7abdd17bd15bcANALYSIS DATE: 2023-01-20T10:18:21ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...
Malware Analysis – – 27768c1bd67420c2bda7cd2b3c6b6133
Score: 3 MALWARE FAMILY: TAGS:MD5: 27768c1bd67420c2bda7cd2b3c6b6133SHA1: 8a3b0445fdc854c742985ee65976c1b9b4790a1eANALYSIS DATE: 2023-01-20T10:30:07ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...
Malware Analysis – discovery – 26027b442df7212f436733b85e1a4aa2
Score: 9 MALWARE FAMILY: discoveryTAGS:discovery, exploit, persistence, ransomware, upxMD5: 26027b442df7212f436733b85e1a4aa2SHA1: ada45868d8f9f70b7a80f6ea0fcb5b7f347499c9ANALYSIS DATE: 2023-01-20T09:47:08ZTTPS: T1222, T1060, T1082, T1012, T1112, T1491 ScoreMeaningExample10Known...
Malware Analysis – djvu – ed4fdb6a9120b4374f34ddb3585a8a7f
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: ed4fdb6a9120b4374f34ddb3585a8a7fSHA1: a6bb894ef720e4bb28def834cb03f503e7dd86abANALYSIS DATE: 2023-01-20T10:35:29ZTTPS: T1005, T1081, T1060, T1112,...
Malware Analysis – evasion – 831ae99e59ffcf50e5278171903694de
Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 831ae99e59ffcf50e5278171903694deSHA1: 96ab52cf5c0b40aa10357d644c8eb26b778a0739ANALYSIS DATE: 2023-01-20T11:36:06ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...
Malware Analysis – evasion – 0c432d48d6c48b4e7cde6819997c675e
Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 0c432d48d6c48b4e7cde6819997c675eSHA1: 61eef3e822ea71be38aa83f052fbfd3a13607273ANALYSIS DATE: 2023-01-20T11:30:10ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...
Malware Analysis – ransomware – e81b53daabfd90faad65bae4c895e710
Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: e81b53daabfd90faad65bae4c895e710SHA1: 192a05898ea6b099d88448650b24bf1d17a51456ANALYSIS DATE: 2023-01-20T10:42:08ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...
Daily Vulnerability Trends: Fri Jan 20 2023
Daily Vulnerability Trends (sourced from VulnMon) CVE NAMECVE DescriptionCVE-2022-44877login/index.php in CWP (aka Control Web Panel or CentOS Web Panel) 7...
Malware Analysis – discovery – 12beb77b2c450a09e5de50f46b07a627
Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: 12beb77b2c450a09e5de50f46b07a627SHA1: 88d0b5c0036b913f981253ab97390af4afc5d70dANALYSIS DATE: 2023-01-20T03:01:17ZTTPS: T1060, T1012, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...
Malware Analysis – ransomware – f6bcf480cc1e928ab55ad9c3310919e6
Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: f6bcf480cc1e928ab55ad9c3310919e6SHA1: dc21c53fee3dd49773fd2bd145ef57760b564b6bANALYSIS DATE: 2023-01-20T04:52:36ZTTPS: T1005, T1081 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...
Malware Analysis – djvu – ac76af59f88fe2a2ee090c7cd846a4df
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: ac76af59f88fe2a2ee090c7cd846a4dfSHA1: 8c8c4560e971d282291add3d902c5e3c69008c2eANALYSIS DATE: 2023-01-20T05:43:05ZTTPS: T1005, T1081, T1060, T1112,...
Malware Analysis – eternity – dafc8e7ccd381af36f19267a2a9b3f9b
Score: 10 MALWARE FAMILY: eternityTAGS:family:eternity, evasion, ransomwareMD5: dafc8e7ccd381af36f19267a2a9b3f9bSHA1: 742c9021f4f0fb264c32a59a66e3ac514b8e166bANALYSIS DATE: 2023-01-20T04:15:13ZTTPS: T1053, T1018, T1107, T1490, T1082 ScoreMeaningExample10Known badA malware family...
Malware Analysis – wannacry – 7339a0efc768310a86b6d4f61d88b910
Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, ransomware, wormMD5: 7339a0efc768310a86b6d4f61d88b910SHA1: 05cebfdb6729ed57ca111ae18b645335af7cf006ANALYSIS DATE: 2023-01-20T03:37:13ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...
New ‘Blank Image’ attack hides phishing scripts in SVG files
An unusual phishing technique has been observed in the wild, hiding empty SVG files inside HTML attachments pretending to be...
Ransomware gang steals data from KFC, Taco Bell, and Pizza Hut brand owner
Yum! Brands, the fast food brand operator of KFC, Pizza Hut, Taco Bell, and The Habit Burger Grill fast-food restaurant...
T-Mobile hacked to steal data of 37 million accounts in API data breach
T-Mobile disclosed a new data breach after a threat actor stole the personal information of 37 million current postpaid and prepaid customer...
Exploit released for critical ManageEngine RCE bug, patch now
Proof-of-concept exploit code is now available for a remote code execution (RCE) vulnerability in multiple Zoho ManageEngine products. This pre-authentication...
New ‘Hook’ Android malware lets hackers remotely control your phone
A new Android malware named 'Hook' is being sold by cybercriminals, boasting it can remotely take over mobile devices in...
Roaming Mantis’ Android malware adds DNS changer to hack WiFi routers
Image: AI-generated through Midjourney The Roaming Mantis malware distribution campaign has updated its Android malware to include a DNS changer...
