threatintel

Malware Analysis – amadey – bdcb6fd328b0c7e776bf5ed4dd3c0b6e

November 25, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:vidar, botnet:1859, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: bdcb6fd328b0c7e776bf5ed4dd3c0b6eSHA1: 89268d5cde88f06a9868fbbe19dd0521a748e9f9ANALYSIS...

Malware Analysis – djvu – 9655c0e3c128e217029d30ac3b302d72

November 25, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: 9655c0e3c128e217029d30ac3b302d72SHA1: 599cd1a303dd4b81c2f8b11066eb6b88e9d96490ANALYSIS DATE: 2022-11-25T05:29:46ZTTPS: T1060, T1112, T1222, T1082, T1012, T1053 ScoreMeaningExample10Known badA...

Malware Analysis – discovery – 74161da72b92f3dc29efa72b75dcf86c

November 25, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, evasion, exploit, persistence, spyware, stealer, upxMD5: 74161da72b92f3dc29efa72b75dcf86cSHA1: 8490c1331b1c40ce986306d5dda51670f93fd78cANALYSIS DATE: 2022-11-25T03:28:59ZTTPS: T1031, T1562, T1489, T1082, T1112,...

Malware Analysis – djvu – a221e8cd10096d0b1fcfd9b5fc14fc21

November 25, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: a221e8cd10096d0b1fcfd9b5fc14fc21SHA1: 12492f9257ebe410a009aa2ad5c365cd601a01acANALYSIS DATE: 2022-11-25T05:42:05ZTTPS: T1060, T1112, T1082, T1053,...

Cobalt Stike Beacon Detected – 18[.]184[.]132[.]151:443

November 25, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 45[.]130[.]146[.]13:80

November 25, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 77[.]73[.]134[.]27:443

November 25, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 18[.]195[.]169[.]91:443

November 25, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 109[.]248[.]18[.]177:443

November 25, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 198[.]44[.]132[.]52:443

November 25, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 93[.]115[.]29[.]65:443

November 25, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 51[.]140[.]141[.]107:82

November 25, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 154[.]82[.]84[.]195:4433

November 25, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 121[.]40[.]127[.]134:443

November 25, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 143[.]198[.]42[.]1:80

November 25, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 109[.]109[.]61[.]10:80

November 25, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – d12cb8326be8a6acbd51b68e369b0d8a

November 25, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: d12cb8326be8a6acbd51b68e369b0d8aSHA1: 16a440ad6438fc916b3691d8080b6ac553f67c50ANALYSIS DATE: 2022-11-24T21:00:03ZTTPS: T1222, T1005, T1081, T1012,...

Malware Analysis – ransomware – 23a6a98a446c0981e4021867b235bd25

November 25, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 23a6a98a446c0981e4021867b235bd25SHA1: c4f861191578ca4c4f8f0f53ea6a79c25be6b67aANALYSIS DATE: 2022-11-24T17:40:43ZTTPS: T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Cobalt Stike Beacon Detected – 107[.]175[.]142[.]55:443

November 25, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 45[.]145[.]231[.]31:80

November 25, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 190[.]14[.]37[.]194:80

November 25, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 124[.]223[.]197[.]4:9999

November 25, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – amadey – 3b73a7836ad74f3935bbf484f0e52ad6

November 25, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:vidar, botnet:1859, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 3b73a7836ad74f3935bbf484f0e52ad6SHA1: 50ca09f7540ffb4c965b377d3d819d7824a8c58bANALYSIS...

Malware Analysis – discovery – f755b434e5648f9f2c42102a04da6d3b

November 25, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: f755b434e5648f9f2c42102a04da6d3bSHA1: e4fd50ded0f6cbaa4f1f035c95ec6daea13b93b8ANALYSIS DATE: 2022-11-24T21:44:59ZTTPS: T1060, T1012, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

threatintel

Malware Analysis – amadey – bdcb6fd328b0c7e776bf5ed4dd3c0b6e

Malware Analysis – djvu – 9655c0e3c128e217029d30ac3b302d72

Malware Analysis – discovery – 74161da72b92f3dc29efa72b75dcf86c

Malware Analysis – djvu – a221e8cd10096d0b1fcfd9b5fc14fc21

Cobalt Stike Beacon Detected – 18[.]184[.]132[.]151:443

Cobalt Stike Beacon Detected – 45[.]130[.]146[.]13:80

Cobalt Stike Beacon Detected – 77[.]73[.]134[.]27:443

Cobalt Stike Beacon Detected – 18[.]195[.]169[.]91:443

Cobalt Stike Beacon Detected – 109[.]248[.]18[.]177:443

Cobalt Stike Beacon Detected – 198[.]44[.]132[.]52:443

Cobalt Stike Beacon Detected – 93[.]115[.]29[.]65:443

Cobalt Stike Beacon Detected – 51[.]140[.]141[.]107:82

Cobalt Stike Beacon Detected – 154[.]82[.]84[.]195:4433

Cobalt Stike Beacon Detected – 121[.]40[.]127[.]134:443

Cobalt Stike Beacon Detected – 143[.]198[.]42[.]1:80

Cobalt Stike Beacon Detected – 109[.]109[.]61[.]10:80

Malware Analysis – djvu – d12cb8326be8a6acbd51b68e369b0d8a

Malware Analysis – ransomware – 23a6a98a446c0981e4021867b235bd25

Cobalt Stike Beacon Detected – 107[.]175[.]142[.]55:443

Cobalt Stike Beacon Detected – 45[.]145[.]231[.]31:80

Cobalt Stike Beacon Detected – 190[.]14[.]37[.]194:80

Cobalt Stike Beacon Detected – 124[.]223[.]197[.]4:9999

Malware Analysis – amadey – 3b73a7836ad74f3935bbf484f0e52ad6

Malware Analysis – discovery – f755b434e5648f9f2c42102a04da6d3b

HackerOne Bug Bounty Disclosure: stack-buffer-overflow-in-curl-cookie-parsing-leads-to-rce-batuhanilgarr

BugCrowd Bug Bounty Disclosure: P3 – Publicly Editable Google Docs Linked from NASA SnowEx PPT –

BugCrowd Bug Bounty Disclosure: P3 – Details of the collaboration between NASA and Inmarsat Government and the type of contract –

Apple Products Multiple Vulnerabilities

Miljödata – 870,108 breached accounts

You may have missed