Security

Malware Analysis – smokeloader – b2b0d1eb9dc82a0bb8e2249074877456

October 14, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: b2b0d1eb9dc82a0bb8e2249074877456SHA1: 9bf42aba78d6a4d09e5dc164b5011a1b28a8c0b5ANALYSIS DATE: 2022-10-13T21:33:48ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ransomware – 62f6a62754f16eee9a5952bd4ffe5b19

October 14, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 62f6a62754f16eee9a5952bd4ffe5b19SHA1: 2b7874c83f4e2fe18d15d4434325148d4bbeb111ANALYSIS DATE: 2022-10-13T21:21:04ZTTPS: T1107, T1490, T1091, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Cobalt Stike Beacon Detected – 54[.]242[.]33[.]176:80

October 14, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 84[.]32[.]128[.]93:443

October 14, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 5[.]44[.]42[.]17:80

October 14, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 69[.]49[.]244[.]222:443

October 14, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – ransomware – a3b67d51f988d341870ce38e5884279a

October 14, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: a3b67d51f988d341870ce38e5884279aSHA1: 1b4f0ce3fca65dc04d5e26d43d008e6e134ef357ANALYSIS DATE: 2022-10-13T21:41:03ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – smokeloader – a519cde6048463499c7f22e735222332

October 14, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: a519cde6048463499c7f22e735222332SHA1: e79185c542d4e47e1e6f33a526feeed1213f5bd0ANALYSIS DATE: 2022-10-13T22:02:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ransomware – 1afacd7c285205e52611e446026c9167

October 14, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 1afacd7c285205e52611e446026c9167SHA1: 1a5c2d025dbfc630c5f8072afb9795b4b754c9bcANALYSIS DATE: 2022-10-13T21:41:04ZTTPS: T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – ransomware – d5f89c443fa6f8abf3ce737daff7af77

October 14, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: d5f89c443fa6f8abf3ce737daff7af77SHA1: 7f047270f53e1c6df43dac2742944a96ecf8d9c6ANALYSIS DATE: 2022-10-13T21:41:04ZTTPS: T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Cobalt Stike Beacon Detected – 61[.]160[.]251[.]5:443

October 14, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – ransomware – 0c64140375a393a5ba5471338d72ed86

October 14, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 0c64140375a393a5ba5471338d72ed86SHA1: 4df64bbce9c5a56d5461b9f30b5e5d777c4bd7e7ANALYSIS DATE: 2022-10-13T22:39:39ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Cobalt Stike Beacon Detected – 121[.]127[.]249[.]167:80

October 14, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – ransomware – 1990481f19bcd2e1f4d4421741fb2f0c

October 14, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 1990481f19bcd2e1f4d4421741fb2f0cSHA1: 975c185318c462a74a77847ad29819cc96a44ad1ANALYSIS DATE: 2022-10-13T22:48:41ZTTPS: T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Cobalt Stike Beacon Detected – 39[.]107[.]179[.]147:443

October 14, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – ransomware – 0dfba86be0820f37615c7df9a9c100d4

October 14, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 0dfba86be0820f37615c7df9a9c100d4SHA1: 6e732625f4573b5973acaf1023baaa72166c9e41ANALYSIS DATE: 2022-10-13T22:45:40ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Cobalt Stike Beacon Detected – 185[.]8[.]105[.]64:443

October 14, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – ransomware – 0acce440ab2341ee473ad5b54ef1cdec

October 14, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 0acce440ab2341ee473ad5b54ef1cdecSHA1: 4b392e55bff5225fbc5fa26d58a763289eceb696ANALYSIS DATE: 2022-10-13T22:36:37ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Prevent Ransomware Attacks on Critical Infrastructure

October 13, 2022

Cyberattacks against critical infrastructure can cause massive societal disruption and take an enormous financial toll. Discover how to protect six...

Oil and Gas Cybersecurity: Trends & Response to Survey

October 13, 2022

Based on our survey of over 900 ICS security leaders in the United States, Germany, and Japan, we dig deeper...

CISA: CISA Releases Twenty-Five Industrial Control Systems Advisories

October 13, 2022

CISA Releases Twenty-Five Industrial Control Systems Advisories CISA has released twenty-five (25) Industrial Control Systems (ICS) advisories on October 13,...

Malware Analysis – discovery – 6e3e35fff42f015d89124fb551a20c10

October 13, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploitMD5: 6e3e35fff42f015d89124fb551a20c10SHA1: ebac50b7936985cd1aff1d88115dce51e0af2ca3ANALYSIS DATE: 2022-10-13T13:32:51ZTTPS: T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – discovery – 791b1ffd2928745ab4210e0ab5ba6930

October 13, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploitMD5: 791b1ffd2928745ab4210e0ab5ba6930SHA1: c4b506fd4fd8d4a310887fef7a01857d9a896e8bANALYSIS DATE: 2022-10-13T13:32:25ZTTPS: T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – danabot – 5f106f26eed8a0eaf4df1afca00e7985

October 13, 2022

Score: 10 MALWARE FAMILY: danabotTAGS:family:danabot, family:dcrat, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, banker, collection, discovery, evasion, infostealer, persistence, ransomware, rat, spyware,...

Security

Malware Analysis – smokeloader – b2b0d1eb9dc82a0bb8e2249074877456

Malware Analysis – ransomware – 62f6a62754f16eee9a5952bd4ffe5b19

Cobalt Stike Beacon Detected – 54[.]242[.]33[.]176:80

Cobalt Stike Beacon Detected – 84[.]32[.]128[.]93:443

Cobalt Stike Beacon Detected – 5[.]44[.]42[.]17:80

Cobalt Stike Beacon Detected – 69[.]49[.]244[.]222:443

Malware Analysis – ransomware – a3b67d51f988d341870ce38e5884279a

Malware Analysis – smokeloader – a519cde6048463499c7f22e735222332

Malware Analysis – ransomware – 1afacd7c285205e52611e446026c9167

Malware Analysis – ransomware – d5f89c443fa6f8abf3ce737daff7af77

Cobalt Stike Beacon Detected – 61[.]160[.]251[.]5:443

Malware Analysis – ransomware – 0c64140375a393a5ba5471338d72ed86

Cobalt Stike Beacon Detected – 121[.]127[.]249[.]167:80

Malware Analysis – ransomware – 1990481f19bcd2e1f4d4421741fb2f0c

Cobalt Stike Beacon Detected – 39[.]107[.]179[.]147:443

Malware Analysis – ransomware – 0dfba86be0820f37615c7df9a9c100d4

Cobalt Stike Beacon Detected – 185[.]8[.]105[.]64:443

Malware Analysis – ransomware – 0acce440ab2341ee473ad5b54ef1cdec

Prevent Ransomware Attacks on Critical Infrastructure

Oil and Gas Cybersecurity: Trends & Response to Survey

CISA: CISA Releases Twenty-Five Industrial Control Systems Advisories

Malware Analysis – discovery – 6e3e35fff42f015d89124fb551a20c10

Malware Analysis – discovery – 791b1ffd2928745ab4210e0ab5ba6930

Malware Analysis – danabot – 5f106f26eed8a0eaf4df1afca00e7985

HackerOne Bug Bounty Disclosure: socks-heap-buffer-overflow-via-malicious-http-redirect-with-oversized-hostname-abdullah

HackerOne Bug Bounty Disclosure: buffer-over-read-missing-nul-termination-in-addvariable-causes-undefined-behavior-sagorhawlader

HackerOne Bug Bounty Disclosure: blockstack-org-is-vulnerable-to-cve-cve–x-aulia

HackerOne Bug Bounty Disclosure: blockstack-browser-for-mac-leaks-core-api-password-to-rd-parties-frozensolid

HackerOne Bug Bounty Disclosure: logout-bypass-vulnerability-in-hiro-so-anonymous

You may have missed