Cobalt Stike Beacon Detected – 3[.]65[.]42[.]215:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Security
Malware Analysis – evasion – 3a19d13b39f329aafd9cf7e0b51c563c
Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 3a19d13b39f329aafd9cf7e0b51c563cSHA1: b5a123254a544d4fb93a9cfb77b3cdf784491a68ANALYSIS DATE: 2022-11-28T16:36:08ZTTPS: T1082, T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware...
Malware Analysis – persistence – 8161f767ecddd356ecab740de272f0d7
Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 8161f767ecddd356ecab740de272f0d7SHA1: 7c2b6a4ba08e3ec1313a889455ba2a32f64797b6ANALYSIS DATE: 2022-11-28T16:30:30ZTTPS: T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...
Malware Analysis – persistence – e094ae1a0e6c03fc4038fdd484349be7
Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: e094ae1a0e6c03fc4038fdd484349be7SHA1: 917b776ce2429cee8ee4ad837d9952906cb82127ANALYSIS DATE: 2022-11-28T16:30:46ZTTPS: T1107, T1490, T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...
Malware Analysis – discovery – 9c3901f10998c40021f36d407a87c31a
Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploitMD5: 9c3901f10998c40021f36d407a87c31aSHA1: b4f433c15c722bd9485d609bf5d93790369ad853ANALYSIS DATE: 2022-11-28T16:32:38ZTTPS: T1082, T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...
Cobalt Stike Beacon Detected – 81[.]69[.]30[.]152:8012
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 8[.]142[.]171[.]59:25565
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 77[.]73[.]131[.]6:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 107[.]182[.]20[.]17:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Malware Analysis – evasion – e8f2e9dfe20066773c30ce6bcd6153bd
Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: e8f2e9dfe20066773c30ce6bcd6153bdSHA1: ea044ea4d8d5bdfe62389e338a8e6f89ac2b8775ANALYSIS DATE: 2022-11-28T16:36:12ZTTPS: T1060, T1112, T1107, T1490, T1082 ScoreMeaningExample10Known badA malware...
Malware Analysis – persistence – 13d8d4a482cfcb67c2281e84b4f756a3
Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 13d8d4a482cfcb67c2281e84b4f756a3SHA1: b3e07b303b598f42f8a79ba36ced4f1cf96504d6ANALYSIS DATE: 2022-11-28T16:41:45ZTTPS: T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...
Malware Analysis – persistence – 5210f168f2d7f59b5b9c3f66e58b205c
Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 5210f168f2d7f59b5b9c3f66e58b205cSHA1: 0d669740f1ec1a6e87ceb22239b70616dfce37c9ANALYSIS DATE: 2022-11-28T17:25:33ZTTPS: T1107, T1490, T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...
Malware Analysis – evasion – f11f9d800e0130517df79e019dbae757
Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: f11f9d800e0130517df79e019dbae757SHA1: b9055d16e6a24d9bf829d63b4a370b70cd1ce84aANALYSIS DATE: 2022-11-28T16:36:10ZTTPS: T1060, T1112, T1107, T1490, T1082 ScoreMeaningExample10Known badA malware...
Malware Analysis – evasion – 033d1c48ba9d6bdd28dd6c9395e25fd6
Score: 10 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 033d1c48ba9d6bdd28dd6c9395e25fd6SHA1: d07af7ceec86afba00750009df90a8604d5b1502ANALYSIS DATE: 2022-11-29T21:45:00ZTTPS: T1490, T1059, T1107, T1070, T1485, T1082, T1012, T1120 ScoreMeaningExample10Known badA...
Malware Analysis – ragnarlocker – 9bfb49abbfea8f5f8b89f2f377e973e1
Score: 10 MALWARE FAMILY: ragnarlockerTAGS:family:ragnarlocker, bootkit, evasion, persistence, ransomwareMD5: 9bfb49abbfea8f5f8b89f2f377e973e1SHA1: 9acb987a295ab88ded9b20ab8cdb97c0ecdc0734ANALYSIS DATE: 2022-11-29T21:56:53ZTTPS: T1490, T1107, T1067, T1012, T1120, T1082 ScoreMeaningExample10Known...
Malware Analysis – amadey – d7bc03281e761a7b3d729fb6ef803b6e
Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:dcrat, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, infostealer, persistence, ransomware, rat, spyware, stealer, trojanMD5:...
Malware Analysis – djvu – d9afdbf7050e0973224b267dbffa9457
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: d9afdbf7050e0973224b267dbffa9457SHA1: bf7d808baea954c2eac0e30c9cae4ef3e26673d2ANALYSIS DATE: 2022-11-29T21:55:31ZTTPS: T1222, T1082, T1012, T1005,...
Malware Analysis – djvu – 41001fdd7879ce9ede214e92c7e492be
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 41001fdd7879ce9ede214e92c7e492beSHA1: 215964b0399da37b41b7f420806a72feb72a7c28ANALYSIS DATE: 2022-11-29T23:21:03ZTTPS: T1222, T1012, T1082, T1060,...
Malware Analysis – smokeloader – d24cefe18c680c5901545ed9b1efaf81
Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: d24cefe18c680c5901545ed9b1efaf81SHA1: 40fd9989c083181970e872803fe3eb3fbb789ebdANALYSIS DATE: 2022-11-29T22:55:58ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...
Malware Analysis – amadey – 93366f27a626ccf9bc5404430f18608c
Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:dcrat, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, infostealer, persistence, ransomware, rat, spyware, stealer, trojanMD5:...
Malware Analysis – djvu – bab03c2ce9374981269596f8577cc553
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: bab03c2ce9374981269596f8577cc553SHA1: 30128f07491475d34ee8eead5dafbb73ef3fbb33ANALYSIS DATE: 2022-11-29T23:56:42ZTTPS: T1053, T1005, T1081, T1012,...
Threat actors are offering access to corporate networks via unauthorized Fortinet VPN access
Cyble observed Initial Access Brokers (IABs) offering access to enterprise networks compromised via a critical flaw in Fortinet products. Researchers at...
Data Exfiltration Prevention with SASE
Data exposure from SaaS and cloud applications is an increasing risk factor facing businesses today. Discover how SASE capabilities can...
Industry 4.0: CNC Machine Security Risks Part 1
This three-part blog series explores the risks associated with CNC machines If you like the site, please consider joining the...
