OSINT

Malware Analysis – ransomware – 1bd2517f25e7ba3a3b9568c2768b66d9

October 30, 2022

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 1bd2517f25e7ba3a3b9568c2768b66d9SHA1: a7cd993dd6b820b4c8f4fd9973a29e1f779c5ac1ANALYSIS DATE: 2022-10-30T16:16:56ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – smokeloader – c7b987a36262b72c27d1e3282186f235

October 30, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: c7b987a36262b72c27d1e3282186f235SHA1: f6722992a55c8d7ab60986725b0d07204b14c4a3ANALYSIS DATE: 2022-10-30T17:36:38ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

OSINT

Malware Analysis – ransomware – 1bd2517f25e7ba3a3b9568c2768b66d9

Malware Analysis – smokeloader – c7b987a36262b72c27d1e3282186f235

BlackByte ransomware group hit Japanese beverage giant Asahi

Air New Zealand warns of an ongoing credential stuffing attack

Security Affairs newsletter Round 391

Ermir – An Evil Java RMI Registry

Cobalt Stike Beacon Detected – 152[.]89[.]196[.]231:8080

Cobalt Stike Beacon Detected – 124[.]221[.]244[.]47:2222

Cobalt Stike Beacon Detected – 107[.]148[.]236[.]164:80

Cobalt Stike Beacon Detected – 119[.]45[.]123[.]7:443

Cobalt Stike Beacon Detected – 119[.]23[.]61[.]52:8099

Cobalt Stike Beacon Detected – 43[.]138[.]155[.]198:8090

Cobalt Stike Beacon Detected – 47[.]243[.]236[.]239:80

Cobalt Stike Beacon Detected – 82[.]157[.]144[.]204:81

Cobalt Stike Beacon Detected – 107[.]189[.]8[.]145:9099

Cobalt Stike Beacon Detected – 103[.]150[.]173[.]221:443

Cobalt Stike Beacon Detected – 43[.]138[.]164[.]147:11112

Cobalt Stike Beacon Detected – 38[.]6[.]155[.]188:80

Cobalt Stike Beacon Detected – 81[.]19[.]140[.]23:443

Cobalt Stike Beacon Detected – 47[.]104[.]139[.]149:80

Cobalt Stike Beacon Detected – 103[.]150[.]173[.]225:443

Cobalt Stike Beacon Detected – 47[.]98[.]114[.]169:443

Cobalt Stike Beacon Detected – 150[.]158[.]180[.]97:80

Cobalt Stike Beacon Detected – 194[.]165[.]16[.]92:80

[QILIN] – Ransomware Victim: apollomd[.]com

[APOS] – Ransomware Victim: infraestructures[.]cat

[APOS] – Ransomware Victim: Lawton Partners

[APOS] – Ransomware Victim: Ha******[.]us

[APOS] – Ransomware Victim: wow pictures

You may have missed