Security

Malware Analysis – evasion – 4957e3c721c4d3adab709d2744cb5ad9

May 13, 2023

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomwareMD5: 4957e3c721c4d3adab709d2744cb5ad9SHA1: ae86662f6a970db0b76d65a4efbe820d6b225457ANALYSIS DATE: 2023-05-13T16:21:13ZTTPS: T1012, T1082, T1491, T1112, T1120, T1158, T1060 ScoreMeaningExample10Known badA...

Cobalt Stike Beacon Detected – 43[.]138[.]10[.]232:443

May 13, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 34[.]125[.]210[.]221:4433

May 13, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 42[.]194[.]199[.]231:80

May 13, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 13[.]86[.]95[.]198:443

May 13, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 42[.]193[.]20[.]173:443

May 13, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 152[.]136[.]104[.]49:8080

May 13, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 34[.]125[.]210[.]221:443

May 13, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 106[.]52[.]130[.]164:7777

May 13, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 44[.]206[.]29[.]231:8080

May 13, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

CISA: Mozilla Releases Security Advisories for Multiple Products

May 13, 2023

Mozilla Releases Security Advisories for Multiple Products Mozilla has released security advisories to address vulnerabilities in Thunderbird, Firefox and Firefox...

CISA: Microsoft Releases May 2023 Security Updates

May 13, 2023

Microsoft Releases May 2023 Security Updates Microsoft has released updates to address multiple vulnerabilities in Microsoft software. An attacker can...

CISA: CISA Releases One Industrial Control Systems Advisory

May 13, 2023

CISA Releases One Industrial Control Systems Advisory CISA released one Industrial Control Systems (ICS) advisory on May 2, 2023. These...

CISA: CISA Releases Two Industrial Control Systems Advisories

May 13, 2023

CISA Releases Two Industrial Control Systems Advisories CISA released two Industrial Control Systems (ICS) advisories on May 9, 2023. These...

CISA: CISA Releases One Industrial Control Systems Advisory

May 13, 2023

CISA Releases One Industrial Control Systems Advisory CISA released one Industrial Control Systems (ICS) advisory on May 4, 2023.This advisory...

CISA: CISA and FBI Release Joint Advisory in Response to Active Exploitation of PaperCut Vulnerability

May 13, 2023

CISA and FBI Release Joint Advisory in Response to Active Exploitation of PaperCut Vulnerability CISA and FBI have released a...

CISA: CISA Adds One Known Exploited Vulnerability to Catalog

May 13, 2023

CISA Adds One Known Exploited Vulnerability to Catalog CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based...

CISA: CISA Releases Fifteen Industrial Control Systems Advisories

May 13, 2023

CISA Releases Fifteen Industrial Control Systems Advisories CISA released fifteen Industrial Control Systems (ICS) advisories on May 11, 2023. These...

CISA: CISA and Partners Disclose Snake Malware Threat From Russian Cyber Actors

May 13, 2023

CISA and Partners Disclose Snake Malware Threat From Russian Cyber Actors Today, CISA and partners released a joint advisory for...

CISA: CISA Adds Seven Known Exploited Vulnerabilities to Catalog

May 13, 2023

CISA Adds Seven Known Exploited Vulnerabilities to Catalog CISA has added seven new vulnerabilities to its Known Exploited Vulnerabilities Catalog,...

Cobalt Stike Beacon Detected – 223[.]247[.]221[.]123:8888

May 13, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 101[.]201[.]65[.]35:8080

May 13, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 150[.]158[.]11[.]76:443

May 13, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 43[.]136[.]60[.]27:443

May 13, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Security

Malware Analysis – evasion – 4957e3c721c4d3adab709d2744cb5ad9

Cobalt Stike Beacon Detected – 43[.]138[.]10[.]232:443

Cobalt Stike Beacon Detected – 34[.]125[.]210[.]221:4433

Cobalt Stike Beacon Detected – 42[.]194[.]199[.]231:80

Cobalt Stike Beacon Detected – 13[.]86[.]95[.]198:443

Cobalt Stike Beacon Detected – 42[.]193[.]20[.]173:443

Cobalt Stike Beacon Detected – 152[.]136[.]104[.]49:8080

Cobalt Stike Beacon Detected – 34[.]125[.]210[.]221:443

Cobalt Stike Beacon Detected – 106[.]52[.]130[.]164:7777

Cobalt Stike Beacon Detected – 44[.]206[.]29[.]231:8080

CISA: Mozilla Releases Security Advisories for Multiple Products

CISA: Microsoft Releases May 2023 Security Updates

CISA: CISA Releases One Industrial Control Systems Advisory

CISA: CISA Releases Two Industrial Control Systems Advisories

CISA: CISA Releases One Industrial Control Systems Advisory

CISA: CISA and FBI Release Joint Advisory in Response to Active Exploitation of PaperCut Vulnerability

CISA: CISA Adds One Known Exploited Vulnerability to Catalog

CISA: CISA Releases Fifteen Industrial Control Systems Advisories

CISA: CISA and Partners Disclose Snake Malware Threat From Russian Cyber Actors

CISA: CISA Adds Seven Known Exploited Vulnerabilities to Catalog

Cobalt Stike Beacon Detected – 223[.]247[.]221[.]123:8888

Cobalt Stike Beacon Detected – 101[.]201[.]65[.]35:8080

Cobalt Stike Beacon Detected – 150[.]158[.]11[.]76:443

Cobalt Stike Beacon Detected – 43[.]136[.]60[.]27:443

[AKIRA] – Ransomware Victim: Elliott Tax Service

[RHYSIDA] – Ransomware Victim: Automated Logistics Systems

[AKIRA] – Ransomware Victim: Benda Grace Stulz

[AKIRA] – Ransomware Victim: Palacios Marine & Industrial

[AKIRA] – Ransomware Victim: General Micro Systems

You may have missed