OSINT

Malware Analysis – amadey – 556620100652076e0efed4b48a0c7499

November 15, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:redline, family:smokeloader, family:vidar, botnet:517, botnet:mario23_10, botnet:rozena1114, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer,...

Malware Analysis – – b81672770e0610b00421c8822ed8b1d2

November 15, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: b81672770e0610b00421c8822ed8b1d2SHA1: 9d4c8a7a309957cd9bbf95a1e750cc60760402cbANALYSIS DATE: 2022-11-15T05:19:53ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Cobalt Stike Beacon Detected – 143[.]198[.]93[.]238:443

November 15, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 149[.]28[.]81[.]98:8080

November 15, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 13[.]212[.]115[.]80:443

November 15, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 185[.]217[.]1[.]26:5000

November 15, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 31[.]41[.]244[.]142:80

November 15, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Bug Bounty

BugCrowd Bug Bounty Disclosure: – Panel access at https://news-push-88.op-mobile.opera.com/. – By rahul0x01

November 15, 2022

The below information is fully automated and the information is captured from the BugCrowd Disclosure website. The information was correct...

Cobalt Stike Beacon Detected – 112[.]121[.]168[.]101:443

November 15, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 20[.]120[.]14[.]61:80

November 15, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 81[.]68[.]227[.]204:6666

November 15, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 139[.]159[.]142[.]2:443

November 15, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 39[.]108[.]248[.]6:9999

November 15, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 5[.]44[.]42[.]16:443

November 15, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 192[.]74[.]250[.]129:9999

November 15, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – amadey – 8a4cca57b1deb47df31fbb78ba0876a2

November 15, 2022

Cobalt Stike Beacon Detected – 37[.]1[.]215[.]242:443

November 15, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – smokeloader – 19faeca68a25c97e3d76497a3c5fb439

November 15, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 19faeca68a25c97e3d76497a3c5fb439SHA1: 7b15a524a7ff03c2376c2fbd081ae5d4d3c73819ANALYSIS DATE: 2022-11-14T21:34:54ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 4d26c402976d2d7329a24c64407ccaa0

November 15, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 4d26c402976d2d7329a24c64407ccaa0SHA1: a5fcdc372907966558ffcfd891b5f6d80f569340ANALYSIS DATE: 2022-11-14T22:50:12ZTTPS: T1222, T1012, T1082, T1060,...

Malware Analysis – unluckyware – d7924023e6cb8826e6db9c1bb917ee4e

November 15, 2022

Score: 10 MALWARE FAMILY: unluckywareTAGS:family:unluckyware, persistence, ransomwareMD5: d7924023e6cb8826e6db9c1bb917ee4eSHA1: d3727664988db585b9d632d2888963019b5e6e11ANALYSIS DATE: 2022-11-14T23:13:27ZTTPS: T1491, T1112, T1102, T1012, T1082, T1060, T1130 ScoreMeaningExample10Known badA...

Malware Analysis – amadey – 9b429218f2ed709675849d6fca5e6ff4

November 15, 2022

Malware Analysis – njrat – 338307656795cb8779872642e718aabd

November 14, 2022

Score: 10 MALWARE FAMILY: njratTAGS:family:njrat, family:quasar, agilenet, discovery, evasion, persistence, ransomware, spyware, stealer, themida, trojanMD5: 338307656795cb8779872642e718aabdSHA1: fe6f07fc7a8894397863015445a8029cc716d18eANALYSIS DATE: 2022-11-14T14:32:14ZTTPS: T1082,...

Bug Bounty

BugCrowd Bug Bounty Disclosure: – Panel access at https://news-push-88.op-mobile.opera.com/. – By rahul0x01

November 14, 2022

The below information is fully automated and the information is captured from the BugCrowd Disclosure website. The information was correct...

Malware Analysis – amadey – a2376addbda8d143eaa7a151533fb520

November 14, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:redline, family:smokeloader, family:vidar, botnet:517, botnet:mario23_10, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5:...

OSINT

Malware Analysis – amadey – 556620100652076e0efed4b48a0c7499

Malware Analysis – – b81672770e0610b00421c8822ed8b1d2

Cobalt Stike Beacon Detected – 143[.]198[.]93[.]238:443

Cobalt Stike Beacon Detected – 149[.]28[.]81[.]98:8080

Cobalt Stike Beacon Detected – 13[.]212[.]115[.]80:443

Cobalt Stike Beacon Detected – 185[.]217[.]1[.]26:5000

Cobalt Stike Beacon Detected – 31[.]41[.]244[.]142:80

BugCrowd Bug Bounty Disclosure: – Panel access at https://news-push-88.op-mobile.opera.com/. – By rahul0x01

Cobalt Stike Beacon Detected – 112[.]121[.]168[.]101:443

Cobalt Stike Beacon Detected – 20[.]120[.]14[.]61:80

Cobalt Stike Beacon Detected – 81[.]68[.]227[.]204:6666

Cobalt Stike Beacon Detected – 139[.]159[.]142[.]2:443

Cobalt Stike Beacon Detected – 39[.]108[.]248[.]6:9999

Cobalt Stike Beacon Detected – 5[.]44[.]42[.]16:443

Cobalt Stike Beacon Detected – 192[.]74[.]250[.]129:9999

Malware Analysis – amadey – 8a4cca57b1deb47df31fbb78ba0876a2

Cobalt Stike Beacon Detected – 37[.]1[.]215[.]242:443

Malware Analysis – smokeloader – 19faeca68a25c97e3d76497a3c5fb439

Malware Analysis – djvu – 4d26c402976d2d7329a24c64407ccaa0

Malware Analysis – unluckyware – d7924023e6cb8826e6db9c1bb917ee4e

Malware Analysis – amadey – 9b429218f2ed709675849d6fca5e6ff4

Malware Analysis – njrat – 338307656795cb8779872642e718aabd

BugCrowd Bug Bounty Disclosure: – Panel access at https://news-push-88.op-mobile.opera.com/. – By rahul0x01

Malware Analysis – amadey – a2376addbda8d143eaa7a151533fb520

Cobalt Strike Beacon Detected – 119[.]91[.]203[.]199:88

Cobalt Strike Beacon Detected – 106[.]54[.]239[.]134:80

Cobalt Strike Beacon Detected – 81[.]69[.]98[.]230:50010

Cobalt Strike Beacon Detected – 103[.]43[.]18[.]10:80

Cobalt Strike Beacon Detected – 38[.]190[.]198[.]55:80

You may have missed