threatintel

Malware Analysis – wannacry – b68ef4cdc50d0628782a0fffd6996a0d

October 21, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: b68ef4cdc50d0628782a0fffd6996a0dSHA1: 9e96ad3dea809b9bbe0b49668120be039c7fc4f9ANALYSIS DATE: 2022-10-20T22:40:34ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Cobalt Stike Beacon Detected – 20[.]101[.]35[.]71:80

October 21, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 206[.]119[.]205[.]230:443

October 21, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 206[.]119[.]205[.]123:443

October 21, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 206[.]119[.]205[.]135:443

October 21, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Solve the Cloud-Native App Security Puzzle with CNAPP

October 20, 2022

Explore the value of integrating cloud-native application protection into security and development. If you like the site, please consider joining...

Ransomware Insurance Security Strategies

October 20, 2022

Ransomware accounts for 75% of all cyber insurance claims yet 40% of business currently lack the coverage needed. Discover how...

Attack Surface Management 2022 Midyear Review Part 1

October 20, 2022

In our 2022 midyear roundup, we examine the most significant trends and incidents that influenced the cybersecurity landscape in the...

Experts spotted a new undetectable PowerShell Backdoor posing as a Windows update

October 20, 2022

Cybersecurity researchers warn of a new PowerShell backdoor that disguises itself as part of the Windows update process to avoid...

Malware Analysis – evasion – a75ac296c79e8bcbc858bd63e1b366ff

October 20, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: a75ac296c79e8bcbc858bd63e1b366ffSHA1: 61ca3a0bf77c3dd114530a7b3c5970930628fbe5ANALYSIS DATE: 2022-10-20T14:29:00ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – persistence – 879c457a1652bb23ed26dacf248f616c

October 20, 2022

Score: 8 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealer, upxMD5: 879c457a1652bb23ed26dacf248f616cSHA1: 8d6a3b1f492d7dbed77d079749685dd5ac37f628ANALYSIS DATE: 2022-10-20T14:58:37ZTTPS: T1005, T1081, T1082, T1060, T1112 ScoreMeaningExample10Known badA...

Malware Analysis – conti – 290c7dfb01e50cea9e19da81a781af2c

October 20, 2022

Score: 10 MALWARE FAMILY: contiTAGS:family:conti, ransomwareMD5: 290c7dfb01e50cea9e19da81a781af2cSHA1: 8a52c7645ec8fd6c217dfe5491461372acc4e849ANALYSIS DATE: 2022-10-20T14:58:36ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – evasion – a04ae26b12ca623a60efc3a8591087f4

October 20, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: a04ae26b12ca623a60efc3a8591087f4SHA1: 9455e95c390f589af7e80f95801deb2aa9db347eANALYSIS DATE: 2022-10-20T14:59:36ZTTPS: T1490, T1012, T1120, T1082, T1060, T1112, T1004, T1158,...

Malware Analysis – teslacrypt – bb42ac7cdc834ba9abb5b4b90025f022

October 20, 2022

Score: 10 MALWARE FAMILY: teslacryptTAGS:family:teslacrypt, persistence, ransomwareMD5: bb42ac7cdc834ba9abb5b4b90025f022SHA1: 3c75d402cca4de4898ac07888900ee7560b9536eANALYSIS DATE: 2022-10-20T14:58:49ZTTPS: T1082, T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware family...

Malware Analysis – evasion – 96670058d1b53755214428e67ef461bb

October 20, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 96670058d1b53755214428e67ef461bbSHA1: 73f051c7362dcc40ef6eef9b1b64d4c247c07795ANALYSIS DATE: 2022-10-20T14:59:38ZTTPS: T1012, T1120, T1082, T1060, T1112, T1088, T1089, T1004,...

Malware Analysis – persistence – 96e4fd7e9a5995525b54a249eda2d1d0

October 20, 2022

Score: 8 MALWARE FAMILY: persistenceTAGS:persistence, spyware, stealer, upxMD5: 96e4fd7e9a5995525b54a249eda2d1d0SHA1: a89487e40377e09c1f9dc97793f042b3f6352f5cANALYSIS DATE: 2022-10-20T14:59:32ZTTPS: T1060, T1112, T1082, T1005, T1081 ScoreMeaningExample10Known badA malware...

BlueBleed: Microsoft confirmed data leak exposing customers’ info

October 20, 2022

Microsoft disclosed a data leak, sensitive data of some of its customers were exposed by a misconfigured Microsoft server accessible...

Malware Analysis – persistence – 548c1fff6217572e344bfb4a2a529867

October 20, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 548c1fff6217572e344bfb4a2a529867SHA1: fd5dd09fd0b305d3405094c4e1216ca57f956efdANALYSIS DATE: 2022-10-20T15:00:43ZTTPS: T1107, T1490, T1091, T1060, T1112, T1005, T1081, T1082...

Malware Analysis – persistence – c014ffc9b9f05e9cc28441ab135a22a7

October 20, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: c014ffc9b9f05e9cc28441ab135a22a7SHA1: be05a0aa28ec361540adaba63424544d43609273ANALYSIS DATE: 2022-10-20T15:00:23ZTTPS: T1107, T1490, T1091, T1060, T1112, T1005, T1081, T1082...

Malware Analysis – persistence – fb830824292fb0bf97f8a691bddd377f

October 20, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: fb830824292fb0bf97f8a691bddd377fSHA1: efa617db6da4fc0694b74b8591619b14f2ac752eANALYSIS DATE: 2022-10-20T15:00:33ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091, T1060, T1112...

Malware Analysis – evasion – 5f594a891ee0a26be4f22295485b033e

October 20, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 5f594a891ee0a26be4f22295485b033eSHA1: c00016c8189aa454aa334fb3e812a5b817a8d9e1ANALYSIS DATE: 2022-10-20T14:59:40ZTTPS: T1004, T1112, T1082, T1088, T1089, T1060, T1491, T1012,...

Malware Analysis – persistence – 38faa63bb0de5674847b6049e9a9f780

October 20, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 38faa63bb0de5674847b6049e9a9f780SHA1: 71d5b298b2f0655ea892a3d3660f92015393e83eANALYSIS DATE: 2022-10-20T15:00:59ZTTPS: T1107, T1490, T1091, T1060, T1112, T1005, T1081, T1082...

Malware Analysis – persistence – bf0ceb4b5062a087d32a6ae14bb46895

October 20, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: bf0ceb4b5062a087d32a6ae14bb46895SHA1: c6b83a14fc3790d484e237d95293e92004104768ANALYSIS DATE: 2022-10-20T15:00:49ZTTPS: T1107, T1490, T1091, T1060, T1112, T1005, T1081, T1082...

Malware Analysis – smokeloader – 92469931cb44beb2b06bb19fc1f2a327

October 20, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 92469931cb44beb2b06bb19fc1f2a327SHA1: 85e96b0294d384522f948f43ea6030800cb19c05ANALYSIS DATE: 2022-10-20T15:01:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

threatintel

Malware Analysis – wannacry – b68ef4cdc50d0628782a0fffd6996a0d

Cobalt Stike Beacon Detected – 20[.]101[.]35[.]71:80

Cobalt Stike Beacon Detected – 206[.]119[.]205[.]230:443

Cobalt Stike Beacon Detected – 206[.]119[.]205[.]123:443

Cobalt Stike Beacon Detected – 206[.]119[.]205[.]135:443

Solve the Cloud-Native App Security Puzzle with CNAPP

Ransomware Insurance Security Strategies

Attack Surface Management 2022 Midyear Review Part 1

Experts spotted a new undetectable PowerShell Backdoor posing as a Windows update

Malware Analysis – evasion – a75ac296c79e8bcbc858bd63e1b366ff

Malware Analysis – persistence – 879c457a1652bb23ed26dacf248f616c

Malware Analysis – conti – 290c7dfb01e50cea9e19da81a781af2c

Malware Analysis – evasion – a04ae26b12ca623a60efc3a8591087f4

Malware Analysis – teslacrypt – bb42ac7cdc834ba9abb5b4b90025f022

Malware Analysis – evasion – 96670058d1b53755214428e67ef461bb

Malware Analysis – persistence – 96e4fd7e9a5995525b54a249eda2d1d0

BlueBleed: Microsoft confirmed data leak exposing customers’ info

Malware Analysis – persistence – 548c1fff6217572e344bfb4a2a529867

Malware Analysis – persistence – c014ffc9b9f05e9cc28441ab135a22a7

Malware Analysis – persistence – fb830824292fb0bf97f8a691bddd377f

Malware Analysis – evasion – 5f594a891ee0a26be4f22295485b033e

Malware Analysis – persistence – 38faa63bb0de5674847b6049e9a9f780

Malware Analysis – persistence – bf0ceb4b5062a087d32a6ae14bb46895

Malware Analysis – smokeloader – 92469931cb44beb2b06bb19fc1f2a327

HackerOne Bug Bounty Disclosure: socks-heap-buffer-overflow-via-malicious-http-redirect-with-oversized-hostname-abdullah

HackerOne Bug Bounty Disclosure: buffer-over-read-missing-nul-termination-in-addvariable-causes-undefined-behavior-sagorhawlader

HackerOne Bug Bounty Disclosure: blockstack-org-is-vulnerable-to-cve-cve–x-aulia

HackerOne Bug Bounty Disclosure: blockstack-browser-for-mac-leaks-core-api-password-to-rd-parties-frozensolid

HackerOne Bug Bounty Disclosure: logout-bypass-vulnerability-in-hiro-so-anonymous

You may have missed