threatintel

Malware Analysis – evasion – 457bbbee8fb7b64a5824d80ff19b7092

October 30, 2022

Score: 8 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 457bbbee8fb7b64a5824d80ff19b7092SHA1: d976cec45ae1605dde841e9b47dac57f78e7b725ANALYSIS DATE: 2022-10-29T21:31:04ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – smokeloader – 8ff45c762ee4259f7bc2fc2e2372283a

October 30, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 8ff45c762ee4259f7bc2fc2e2372283aSHA1: 6fc6037833b71e67e8c229514b9cea589ca2cc8bANALYSIS DATE: 2022-10-29T20:56:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Cobalt Stike Beacon Detected – 18[.]191[.]177[.]87:443

October 30, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 119[.]29[.]82[.]40:443

October 30, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 106[.]55[.]2[.]194:4545

October 30, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 185[.]130[.]45[.]159:443

October 30, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – wannacry – c811454bbc5b86a0621a7cafb34db16f

October 30, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: c811454bbc5b86a0621a7cafb34db16fSHA1: 981715e9b580cecc57006b326886acc08c52c18fANALYSIS DATE: 2022-10-29T22:40:23ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – djvu – 7fdba86bba0508054fd1f058a6a2d134

October 30, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, family:vidar, botnet:1752, botnet:google2, botnet:mario23_10, botnet:slovarik15btc, botnet:slovarik1btc, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware,...

Malware Analysis – djvu – 3ec20eda511b082c02840cf7cbafd6e1

October 30, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, family:vidar, botnet:1752, botnet:517, botnet:google2, botnet:mario23_10, botnet:slovarik15btc, botnet:slovarik1btc, backdoor, collection, discovery, infostealer, persistence, ransomware,...

Malware Analysis – avaddon – ad3bc99ab03f6fcef0215c0eb185bf6f

October 30, 2022

Score: 10 MALWARE FAMILY: avaddonTAGS:family:avaddon, evasion, ransomware, trojanMD5: ad3bc99ab03f6fcef0215c0eb185bf6fSHA1: 135d0497aa12587d1970ff2e6d2eb9bc401c898fANALYSIS DATE: 2022-10-29T22:44:52ZTTPS: T1082, T1088, T1089, T1112, T1012, T1120, T1107, T1490...

Posh C2 Detected – 116[.]203[.]51[.]117:443

October 30, 2022

The Information provided at the time of posting was detected as "Posh C2". Depending on when you are viewing this...

Twilio discloses another security incident that took place in June

October 29, 2022

Twilio suffered another brief security incident in June 2022, the attack was conducted by the same threat actor of the August hack....

A massive cyberattack hit Slovak and Polish Parliaments

October 29, 2022

The Slovak and Polish parliaments were hit by a massive cyber attack, and the voting system in Slovakia’s legislature was...

LockBit 3.0 Ransomware Victim: fvsra[.]org

October 29, 2022

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

How will Twitter change under Elon Musk?

October 29, 2022

Cybhorus CEO Pierluigi Paganini talks to TRT World about Elon Musk completing his $44 billion deal to buy Twitter and...

Threatest – Threatest Is A Go Framework For End-To-End Testing Threat Detection Rules

October 29, 2022

Threatest is a Go framework for testing threat detection end-to-end. Threatest allows you to detonate an attack technique, and verify...

LockBit 3.0 Ransomware Victim: greenstamp[.]co[.]jp

October 29, 2022

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Cobalt Stike Beacon Detected – 107[.]172[.]206[.]242:9999

October 29, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 124[.]222[.]151[.]30:8080

October 29, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 41[.]216[.]183[.]180:80

October 29, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 8[.]129[.]79[.]245:80

October 29, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 163[.]123[.]142[.]173:443

October 29, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 35[.]202[.]0[.]124:6000

October 29, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 89[.]147[.]108[.]116:443

October 29, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

threatintel

Malware Analysis – evasion – 457bbbee8fb7b64a5824d80ff19b7092

Malware Analysis – smokeloader – 8ff45c762ee4259f7bc2fc2e2372283a

Cobalt Stike Beacon Detected – 18[.]191[.]177[.]87:443

Cobalt Stike Beacon Detected – 119[.]29[.]82[.]40:443

Cobalt Stike Beacon Detected – 106[.]55[.]2[.]194:4545

Cobalt Stike Beacon Detected – 185[.]130[.]45[.]159:443

Malware Analysis – wannacry – c811454bbc5b86a0621a7cafb34db16f

Malware Analysis – djvu – 7fdba86bba0508054fd1f058a6a2d134

Malware Analysis – djvu – 3ec20eda511b082c02840cf7cbafd6e1

Malware Analysis – avaddon – ad3bc99ab03f6fcef0215c0eb185bf6f

Posh C2 Detected – 116[.]203[.]51[.]117:443

Twilio discloses another security incident that took place in June

A massive cyberattack hit Slovak and Polish Parliaments

LockBit 3.0 Ransomware Victim: fvsra[.]org

How will Twitter change under Elon Musk?

Threatest – Threatest Is A Go Framework For End-To-End Testing Threat Detection Rules

LockBit 3.0 Ransomware Victim: greenstamp[.]co[.]jp

Cobalt Stike Beacon Detected – 107[.]172[.]206[.]242:9999

Cobalt Stike Beacon Detected – 124[.]222[.]151[.]30:8080

Cobalt Stike Beacon Detected – 41[.]216[.]183[.]180:80

Cobalt Stike Beacon Detected – 8[.]129[.]79[.]245:80

Cobalt Stike Beacon Detected – 163[.]123[.]142[.]173:443

Cobalt Stike Beacon Detected – 35[.]202[.]0[.]124:6000

Cobalt Stike Beacon Detected – 89[.]147[.]108[.]116:443

Vodafonethree To Offshore Uk Network Jobs To India

[DEVMAN] – Ransomware Victim: mceicl[.]com

Cobalt Strike Beacon Detected – 165[.]154[.]125[.]212:8080

Cobalt Strike Beacon Detected – 154[.]201[.]74[.]112:8080

Cobalt Strike Beacon Detected – 81[.]70[.]255[.]195:8080

You may have missed