threatintel

Malware Analysis – – b81672770e0610b00421c8822ed8b1d2

November 15, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: b81672770e0610b00421c8822ed8b1d2SHA1: 9d4c8a7a309957cd9bbf95a1e750cc60760402cbANALYSIS DATE: 2022-11-15T05:19:53ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Cobalt Stike Beacon Detected – 143[.]198[.]93[.]238:443

November 15, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 149[.]28[.]81[.]98:8080

November 15, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 13[.]212[.]115[.]80:443

November 15, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 185[.]217[.]1[.]26:5000

November 15, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 31[.]41[.]244[.]142:80

November 15, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 112[.]121[.]168[.]101:443

November 15, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 20[.]120[.]14[.]61:80

November 15, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 81[.]68[.]227[.]204:6666

November 15, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 139[.]159[.]142[.]2:443

November 15, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Black Basta Ransomware Victim: Kessing Rechtsanwälte und Fachanwälte in PartGmbB

November 15, 2022

Black Basta Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Cobalt Stike Beacon Detected – 39[.]108[.]248[.]6:9999

November 15, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 5[.]44[.]42[.]16:443

November 15, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 192[.]74[.]250[.]129:9999

November 15, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 37[.]1[.]215[.]242:443

November 15, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – amadey – 8a4cca57b1deb47df31fbb78ba0876a2

November 15, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:redline, family:smokeloader, family:vidar, botnet:517, botnet:mario23_10, botnet:rozena1114, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer,...

Malware Analysis – smokeloader – 19faeca68a25c97e3d76497a3c5fb439

November 15, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 19faeca68a25c97e3d76497a3c5fb439SHA1: 7b15a524a7ff03c2376c2fbd081ae5d4d3c73819ANALYSIS DATE: 2022-11-14T21:34:54ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 4d26c402976d2d7329a24c64407ccaa0

November 15, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 4d26c402976d2d7329a24c64407ccaa0SHA1: a5fcdc372907966558ffcfd891b5f6d80f569340ANALYSIS DATE: 2022-11-14T22:50:12ZTTPS: T1222, T1012, T1082, T1060,...

Malware Analysis – unluckyware – d7924023e6cb8826e6db9c1bb917ee4e

November 15, 2022

Score: 10 MALWARE FAMILY: unluckywareTAGS:family:unluckyware, persistence, ransomwareMD5: d7924023e6cb8826e6db9c1bb917ee4eSHA1: d3727664988db585b9d632d2888963019b5e6e11ANALYSIS DATE: 2022-11-14T23:13:27ZTTPS: T1491, T1112, T1102, T1012, T1082, T1060, T1130 ScoreMeaningExample10Known badA...

Malware Analysis – amadey – 9b429218f2ed709675849d6fca5e6ff4

November 15, 2022

Malware Analysis – njrat – 338307656795cb8779872642e718aabd

November 14, 2022

Score: 10 MALWARE FAMILY: njratTAGS:family:njrat, family:quasar, agilenet, discovery, evasion, persistence, ransomware, spyware, stealer, themida, trojanMD5: 338307656795cb8779872642e718aabdSHA1: fe6f07fc7a8894397863015445a8029cc716d18eANALYSIS DATE: 2022-11-14T14:32:14ZTTPS: T1082,...

Black Basta Ransomware Victim: Kessing Rechtsanwälte und Fachanwälte in PartGmbB

November 14, 2022

Black Basta Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Malware Analysis – amadey – a2376addbda8d143eaa7a151533fb520

November 14, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:redline, family:smokeloader, family:vidar, botnet:517, botnet:mario23_10, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5:...

Malware Analysis – djvu – d1973cdcf0c4bece9b084bfe132ac646

November 14, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: d1973cdcf0c4bece9b084bfe132ac646SHA1: e81906a8c90bc7621e6db284f7baf809c49d1687ANALYSIS DATE: 2022-11-14T15:21:14ZTTPS: T1012, T1082, T1060, T1112,...

threatintel

Malware Analysis – – b81672770e0610b00421c8822ed8b1d2

Cobalt Stike Beacon Detected – 143[.]198[.]93[.]238:443

Cobalt Stike Beacon Detected – 149[.]28[.]81[.]98:8080

Cobalt Stike Beacon Detected – 13[.]212[.]115[.]80:443

Cobalt Stike Beacon Detected – 185[.]217[.]1[.]26:5000

Cobalt Stike Beacon Detected – 31[.]41[.]244[.]142:80

Cobalt Stike Beacon Detected – 112[.]121[.]168[.]101:443

Cobalt Stike Beacon Detected – 20[.]120[.]14[.]61:80

Cobalt Stike Beacon Detected – 81[.]68[.]227[.]204:6666

Cobalt Stike Beacon Detected – 139[.]159[.]142[.]2:443

Black Basta Ransomware Victim: Kessing Rechtsanwälte und Fachanwälte in PartGmbB

Cobalt Stike Beacon Detected – 39[.]108[.]248[.]6:9999

Cobalt Stike Beacon Detected – 5[.]44[.]42[.]16:443

Cobalt Stike Beacon Detected – 192[.]74[.]250[.]129:9999

Cobalt Stike Beacon Detected – 37[.]1[.]215[.]242:443

Malware Analysis – amadey – 8a4cca57b1deb47df31fbb78ba0876a2

Malware Analysis – smokeloader – 19faeca68a25c97e3d76497a3c5fb439

Malware Analysis – djvu – 4d26c402976d2d7329a24c64407ccaa0

Malware Analysis – unluckyware – d7924023e6cb8826e6db9c1bb917ee4e

Malware Analysis – amadey – 9b429218f2ed709675849d6fca5e6ff4

Malware Analysis – njrat – 338307656795cb8779872642e718aabd

Black Basta Ransomware Victim: Kessing Rechtsanwälte und Fachanwälte in PartGmbB

Malware Analysis – amadey – a2376addbda8d143eaa7a151533fb520

Malware Analysis – djvu – d1973cdcf0c4bece9b084bfe132ac646

HackerOne Bug Bounty Disclosure: microsoft-x-apikey-exposed-in-mozilla-ci-public-logs-xhacking-z

HackerOne Bug Bounty Disclosure: hackerone-hackerpllim

HackerOne Bug Bounty Disclosure: hi-hacker-hackerpllim

[AKIRA] – Ransomware Victim: Mecanex USA

[RANSOMHOUSE] – Ransomware Victim: UnitedLayer

You may have missed