threatintel

Malware Analysis – – 8ba287e4d5b62c8b3bd9e5d3e04afcee

October 22, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: 8ba287e4d5b62c8b3bd9e5d3e04afceeSHA1: 02781f4b15680c21c59a26959fe858044b0f6135ANALYSIS DATE: 2022-10-22T04:46:36ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Cobalt Stike Beacon Detected – 44[.]197[.]246[.]120:53

October 22, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 185[.]225[.]17[.]60:443

October 22, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 43[.]142[.]138[.]251:8046

October 22, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 101[.]42[.]178[.]86:8443

October 22, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 216[.]240[.]130[.]72:443

October 22, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 143[.]198[.]116[.]67:80

October 22, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 128[.]199[.]60[.]130:80

October 22, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 199[.]127[.]60[.]67:80

October 22, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 101[.]99[.]94[.]218:80

October 22, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 206[.]2[.]200[.]132:80

October 22, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 137[.]184[.]18[.]113:443

October 22, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

EnergyAustralia Electricity company discloses security breach

October 22, 2022

Electricity company EnergyAustralia suffered a security breach, threat actors had access to information on 323 customers. Another Australian organization was...

Cobalt Stike Beacon Detected – 38[.]6[.]155[.]103:443

October 22, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 190[.]123[.]44[.]225:443

October 22, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 159[.]65[.]199[.]152:80

October 22, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 43[.]139[.]72[.]172:6666

October 22, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 84[.]32[.]128[.]99:80

October 22, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 137[.]184[.]7[.]253:81

October 22, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 39[.]106[.]45[.]206:8090

October 22, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 121[.]4[.]236[.]17:10001

October 22, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – persistence – 7b449fc14ac4ed33d828d70367dd9361

October 22, 2022

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealer, upxMD5: 7b449fc14ac4ed33d828d70367dd9361SHA1: 44064f97b839e6c421c1b52c9cf2e8395dd2f890ANALYSIS DATE: 2022-10-20T08:28:28ZTTPS: T1060, T1112, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – evasion – 80164d0ec36a23a99f475bcd6b7d22e0

October 22, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomwareMD5: 80164d0ec36a23a99f475bcd6b7d22e0SHA1: d49a64aa7b25b3789d06174b8bb82c284d1ddd8bANALYSIS DATE: 2022-10-20T08:29:42ZTTPS: T1490, T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – e9364fd6cff3a0fee9d8636f526a506e

October 22, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: e9364fd6cff3a0fee9d8636f526a506eSHA1: e51f1e530d958bf41386b39416413977c4143c6aANALYSIS DATE: 2022-10-21T20:13:21ZTTPS: T1005, T1081, T1012, T1222,...

threatintel

Malware Analysis – – 8ba287e4d5b62c8b3bd9e5d3e04afcee

Cobalt Stike Beacon Detected – 44[.]197[.]246[.]120:53

Cobalt Stike Beacon Detected – 185[.]225[.]17[.]60:443

Cobalt Stike Beacon Detected – 43[.]142[.]138[.]251:8046

Cobalt Stike Beacon Detected – 101[.]42[.]178[.]86:8443

Cobalt Stike Beacon Detected – 216[.]240[.]130[.]72:443

Cobalt Stike Beacon Detected – 143[.]198[.]116[.]67:80

Cobalt Stike Beacon Detected – 128[.]199[.]60[.]130:80

Cobalt Stike Beacon Detected – 199[.]127[.]60[.]67:80

Cobalt Stike Beacon Detected – 101[.]99[.]94[.]218:80

Cobalt Stike Beacon Detected – 206[.]2[.]200[.]132:80

Cobalt Stike Beacon Detected – 137[.]184[.]18[.]113:443

EnergyAustralia Electricity company discloses security breach

Cobalt Stike Beacon Detected – 38[.]6[.]155[.]103:443

Cobalt Stike Beacon Detected – 190[.]123[.]44[.]225:443

Cobalt Stike Beacon Detected – 159[.]65[.]199[.]152:80

Cobalt Stike Beacon Detected – 43[.]139[.]72[.]172:6666

Cobalt Stike Beacon Detected – 84[.]32[.]128[.]99:80

Cobalt Stike Beacon Detected – 137[.]184[.]7[.]253:81

Cobalt Stike Beacon Detected – 39[.]106[.]45[.]206:8090

Cobalt Stike Beacon Detected – 121[.]4[.]236[.]17:10001

Malware Analysis – persistence – 7b449fc14ac4ed33d828d70367dd9361

Malware Analysis – evasion – 80164d0ec36a23a99f475bcd6b7d22e0

Malware Analysis – djvu – e9364fd6cff3a0fee9d8636f526a506e

[QILIN] – Ransomware Victim: bagnoles[.]nl

[BLACKSHRANTAC] – Ransomware Victim: ApleNet Co[.], Ltd

[QILIN] – Ransomware Victim: Disseny Dental

Cobalt Strike Beacon Detected – 196[.]251[.]69[.]253:4433

Cobalt Strike Beacon Detected – 124[.]223[.]114[.]203:4433

You may have missed