threatintel

Cobalt Stike Beacon Detected – 45[.]15[.]157[.]14:82

November 23, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 139[.]198[.]160[.]219:8899

November 23, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 171[.]22[.]30[.]82:2222

November 23, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 198[.]44[.]132[.]52:80

November 23, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 81[.]68[.]142[.]187:4443

November 23, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 43[.]138[.]107[.]32:6001

November 23, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – ransomware – 1bf5fa42b3a45b4f401938c26ee81666

November 23, 2022

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 1bf5fa42b3a45b4f401938c26ee81666SHA1: bf1613f6ecaa579715b03f440d97e4d88fbc67feANALYSIS DATE: 2022-11-22T23:12:23ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – 9a8c8b6a41d7f2d819e46aae993a27a4

November 23, 2022

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 9a8c8b6a41d7f2d819e46aae993a27a4SHA1: 92ca8283f87813b4b0894873776bc8d66320f180ANALYSIS DATE: 2022-11-22T23:10:02ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ramnit – 7d623ac9e2b9b62a6102ab7404ca1103

November 23, 2022

Score: 10 MALWARE FAMILY: ramnitTAGS:family:ramnit, banker, persistence, ransomware, spyware, stealer, trojan, upx, wormMD5: 7d623ac9e2b9b62a6102ab7404ca1103SHA1: a578804fef2a1e77ca9ce493f1f3a14a58608c3fANALYSIS DATE: 2022-11-22T21:41:13ZTTPS: T1060, T1112, T1082,...

Cobalt Stike Beacon Detected – 121[.]36[.]0[.]239:443

November 23, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 190[.]123[.]44[.]151:443

November 23, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 52[.]90[.]239[.]14:443

November 23, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 216[.]240[.]130[.]72:80

November 23, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – infostealer – c10fc0154426cabce557f0d33b90068a

November 23, 2022

Score: 8 MALWARE FAMILY: infostealerTAGS:infostealer, ransomwareMD5: c10fc0154426cabce557f0d33b90068aSHA1: 48a6507e50608c52df8033e79f44e4068a5f2ef5ANALYSIS DATE: 2022-11-22T23:32:33ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – infostealer – a07fbf2819d3e0803e8b980a7d1123db

November 23, 2022

Score: 8 MALWARE FAMILY: infostealerTAGS:infostealer, ransomwareMD5: a07fbf2819d3e0803e8b980a7d1123dbSHA1: 737fd5d3b6dd5bc0ece1fa77bfbea02fc5087e80ANALYSIS DATE: 2022-11-22T23:18:29ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – ransomware – 6dfd521922e106cc4b2d058eb617c3bf

November 23, 2022

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 6dfd521922e106cc4b2d058eb617c3bfSHA1: 6996184d3026cf8e791843fb572270bc176ba5adANALYSIS DATE: 2022-11-22T23:26:57ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – 0e3576ad845efb5c6a94115e4cf7fde5

November 23, 2022

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 0e3576ad845efb5c6a94115e4cf7fde5SHA1: e1536419d219ae85e6a4624f77219362e1dcf995ANALYSIS DATE: 2022-11-22T23:24:48ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

threatintel

Cobalt Stike Beacon Detected – 45[.]15[.]157[.]14:82

Cobalt Stike Beacon Detected – 139[.]198[.]160[.]219:8899

Cobalt Stike Beacon Detected – 171[.]22[.]30[.]82:2222

Cobalt Stike Beacon Detected – 198[.]44[.]132[.]52:80

Cobalt Stike Beacon Detected – 81[.]68[.]142[.]187:4443

Cobalt Stike Beacon Detected – 43[.]138[.]107[.]32:6001

Malware Analysis – ransomware – 1bf5fa42b3a45b4f401938c26ee81666

Malware Analysis – ransomware – 9a8c8b6a41d7f2d819e46aae993a27a4

Malware Analysis – ramnit – 7d623ac9e2b9b62a6102ab7404ca1103

Cobalt Stike Beacon Detected – 121[.]36[.]0[.]239:443

Cobalt Stike Beacon Detected – 190[.]123[.]44[.]151:443

Cobalt Stike Beacon Detected – 52[.]90[.]239[.]14:443

Cobalt Stike Beacon Detected – 216[.]240[.]130[.]72:80

Malware Analysis – infostealer – c10fc0154426cabce557f0d33b90068a

Malware Analysis – infostealer – a07fbf2819d3e0803e8b980a7d1123db

Malware Analysis – ransomware – 6dfd521922e106cc4b2d058eb617c3bf

Malware Analysis – ransomware – 0e3576ad845efb5c6a94115e4cf7fde5

US-CERT Bulletin (SB22-325):Vulnerability Summary for the Week of November 14, 2022

Researcher warns that Cisco Secure Email Gateways can easily be circumvented

Royal Ransomware Victim: Pressco Technology

Royal Ransomware Victim: Fishmans

Royal Ransomware Victim: Quantum Plastics

Royal Ransomware Victim: www[.]maynards[.]com

Royal Ransomware Victim: ALLIANCE AFRICAINE D’ASSURANCES

BugCrowd Bug Bounty Disclosure: P3 – Publicly Editable Google Docs Linked from NASA SnowEx PPT –

BugCrowd Bug Bounty Disclosure: P3 – Details of the collaboration between NASA and Inmarsat Government and the type of contract –

Apple Products Multiple Vulnerabilities

Miljödata – 870,108 breached accounts

Cobalt Strike Beacon Detected – 119[.]91[.]203[.]199:88

You may have missed