Cobalt Stike Beacon Detected – 107[.]189[.]13[.]130:80
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Security
Malware Analysis – discovery – 26027b442df7212f436733b85e1a4aa2
Score: 9 MALWARE FAMILY: discoveryTAGS:discovery, exploit, persistence, ransomware, upxMD5: 26027b442df7212f436733b85e1a4aa2SHA1: ada45868d8f9f70b7a80f6ea0fcb5b7f347499c9ANALYSIS DATE: 2023-01-20T09:47:08ZTTPS: T1222, T1060, T1082, T1012, T1112, T1491 ScoreMeaningExample10Known...
Malware Analysis – wannacry – 7bf2b57f2a205768755c07f238fb32cc
Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, ransomware, wormMD5: 7bf2b57f2a205768755c07f238fb32ccSHA1: 45356a9dd616ed7161a3b9192e2f318d0ab5ad10ANALYSIS DATE: 2023-01-20T10:19:02ZTTPS: T1491, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...
Malware Analysis – – 4e68cfad3f3cbef5406c90fd9e9d7931
Score: 1 MALWARE FAMILY: TAGS:MD5: 4e68cfad3f3cbef5406c90fd9e9d7931SHA1: 504d53957bbed8e1a612c791eec7abdd17bd15bcANALYSIS DATE: 2023-01-20T10:18:21ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...
Malware Analysis – – 27768c1bd67420c2bda7cd2b3c6b6133
Score: 3 MALWARE FAMILY: TAGS:MD5: 27768c1bd67420c2bda7cd2b3c6b6133SHA1: 8a3b0445fdc854c742985ee65976c1b9b4790a1eANALYSIS DATE: 2023-01-20T10:30:07ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...
Malware Analysis – djvu – ed4fdb6a9120b4374f34ddb3585a8a7f
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: ed4fdb6a9120b4374f34ddb3585a8a7fSHA1: a6bb894ef720e4bb28def834cb03f503e7dd86abANALYSIS DATE: 2023-01-20T10:35:29ZTTPS: T1005, T1081, T1060, T1112,...
Malware Analysis – evasion – 831ae99e59ffcf50e5278171903694de
Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 831ae99e59ffcf50e5278171903694deSHA1: 96ab52cf5c0b40aa10357d644c8eb26b778a0739ANALYSIS DATE: 2023-01-20T11:36:06ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...
Malware Analysis – evasion – 0c432d48d6c48b4e7cde6819997c675e
Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 0c432d48d6c48b4e7cde6819997c675eSHA1: 61eef3e822ea71be38aa83f052fbfd3a13607273ANALYSIS DATE: 2023-01-20T11:30:10ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...
Malware Analysis – ransomware – e81b53daabfd90faad65bae4c895e710
Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: e81b53daabfd90faad65bae4c895e710SHA1: 192a05898ea6b099d88448650b24bf1d17a51456ANALYSIS DATE: 2023-01-20T10:42:08ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...
Malware Analysis – discovery – 12beb77b2c450a09e5de50f46b07a627
Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: 12beb77b2c450a09e5de50f46b07a627SHA1: 88d0b5c0036b913f981253ab97390af4afc5d70dANALYSIS DATE: 2023-01-20T03:01:17ZTTPS: T1060, T1012, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...
Malware Analysis – ransomware – f6bcf480cc1e928ab55ad9c3310919e6
Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: f6bcf480cc1e928ab55ad9c3310919e6SHA1: dc21c53fee3dd49773fd2bd145ef57760b564b6bANALYSIS DATE: 2023-01-20T04:52:36ZTTPS: T1005, T1081 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...
Malware Analysis – djvu – ac76af59f88fe2a2ee090c7cd846a4df
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: ac76af59f88fe2a2ee090c7cd846a4dfSHA1: 8c8c4560e971d282291add3d902c5e3c69008c2eANALYSIS DATE: 2023-01-20T05:43:05ZTTPS: T1005, T1081, T1060, T1112,...
Malware Analysis – eternity – dafc8e7ccd381af36f19267a2a9b3f9b
Score: 10 MALWARE FAMILY: eternityTAGS:family:eternity, evasion, ransomwareMD5: dafc8e7ccd381af36f19267a2a9b3f9bSHA1: 742c9021f4f0fb264c32a59a66e3ac514b8e166bANALYSIS DATE: 2023-01-20T04:15:13ZTTPS: T1053, T1018, T1107, T1490, T1082 ScoreMeaningExample10Known badA malware family...
Malware Analysis – wannacry – 7339a0efc768310a86b6d4f61d88b910
Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, ransomware, wormMD5: 7339a0efc768310a86b6d4f61d88b910SHA1: 05cebfdb6729ed57ca111ae18b645335af7cf006ANALYSIS DATE: 2023-01-20T03:37:13ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...
Cobalt Stike Beacon Detected – 121[.]4[.]154[.]240:4000
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 194[.]165[.]16[.]62:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 182[.]160[.]0[.]248:80
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Posh C2 Detected – 146[.]190[.]86[.]212:4443
The Information provided at the time of posting was detected as "Posh C2". Depending on when you are viewing this...
DragonCastle – A PoC That Combines AutodialDLL Lateral Movement Technique And SSP To Scrape NTLM Hashes From LSASS Process
A PoC that combines AutodialDLL lateral movement technique and SSP to scrape NTLM hashes from LSASS process. Description Upload a...
Malware Analysis – djvu – c266d56f0bbea899b2cfa58f192a9f86
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: c266d56f0bbea899b2cfa58f192a9f86SHA1: 0f2191d9571e04ed4cf14188b9eab8f210f6c652ANALYSIS DATE: 2023-01-19T16:59:57ZTTPS: T1222, T1082, T1005, T1081,...
Malware Analysis – persistence – da8e21489a2c6c01ee676c304c8541c1
Score: 8 MALWARE FAMILY: persistenceTAGS:persistenceMD5: da8e21489a2c6c01ee676c304c8541c1SHA1: 40e6d3aa1f0fa21fae1a9563174b45b432aa3306ANALYSIS DATE: 2023-01-19T17:42:31ZTTPS: T1060, T1112, T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...
Malware Analysis – djvu – 50fee0fee96a3c681b9c47eada3fffdf
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 50fee0fee96a3c681b9c47eada3fffdfSHA1: db64c7d74705e4a3c08ca50c140fa84d3c4fce09ANALYSIS DATE: 2023-01-19T17:22:07ZTTPS: T1012, T1222, T1082, T1005,...
Malware Analysis – locky – fb6ca1cd232151d667f6cd2484fee8c8
Score: 10 MALWARE FAMILY: lockyTAGS:family:locky, ransomwareMD5: fb6ca1cd232151d667f6cd2484fee8c8SHA1: f7bb52767afd2cd32ede8b5f83012eb99ba1ce28ANALYSIS DATE: 2023-01-19T17:42:29ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...
Malware Analysis – discovery – 133af41cfec522b7f583fcf77be37b1a
Score: 8 MALWARE FAMILY: discoveryTAGS:discoveryMD5: 133af41cfec522b7f583fcf77be37b1aSHA1: 50fde70e193eeea8d15c13dfc62cdcb4cbc2bcd0ANALYSIS DATE: 2023-01-19T17:13:15ZTTPS: T1082, T1012 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...
