Month: November 2022

Malware Analysis – amadey – 098c12bb6bcfb37b533aebd016657000

November 28, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 098c12bb6bcfb37b533aebd016657000SHA1: 0f00d6e0b9cae806a2934888077b2bcff67fb74bANALYSIS DATE:...

Cobalt Stike Beacon Detected – 152[.]136[.]153[.]12:8008

November 28, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 103[.]45[.]143[.]166:443

November 28, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 62[.]138[.]7[.]234:80

November 28, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 175[.]178[.]243[.]43:8443

November 28, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 51[.]140[.]141[.]107:81

November 28, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 45[.]145[.]231[.]31:9999

November 28, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 5[.]8[.]18[.]245:443

November 28, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Bug Bounty

BugCrowd Bug Bounty Disclosure: – Panel access at https://news-push-88.op-mobile.opera.com/. – By rahul0x01

November 28, 2022

The below information is fully automated and the information is captured from the BugCrowd Disclosure website. The information was correct...

Bug Bounty

BugCrowd Bug Bounty Disclosure: – Impersonation via Broken Link Hijacking on https://sv.hellosign.com – By CoffeeAddict_exe

November 28, 2022

The below information is fully automated and the information is captured from the BugCrowd Disclosure website. The information was correct...

Cobalt Stike Beacon Detected – 178[.]128[.]233[.]97:80

November 28, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 134[.]19[.]178[.]213:80

November 28, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 82[.]156[.]166[.]154:7777

November 28, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 1[.]13[.]165[.]208:8443

November 28, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – banker – 207ad2fb72531266a63f759e55cd34c7

November 27, 2022

Score: 8 MALWARE FAMILY: bankerTAGS:banker, evasion, ransomwareMD5: 207ad2fb72531266a63f759e55cd34c7SHA1: 47137b320cb41feaa5cd589ffc196eeff3270f2aANALYSIS DATE: 2022-11-26T22:11:53ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – ransomware – 3ff83f280fa873828bba90f087f57ec3

November 27, 2022

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 3ff83f280fa873828bba90f087f57ec3SHA1: ba3abca3c8e0686c39437fcf09920ce66980c5d6ANALYSIS DATE: 2022-11-26T22:23:26ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – 4ac0298724ff0212e934651e24251f57

November 27, 2022

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 4ac0298724ff0212e934651e24251f57SHA1: ad28f3d1a5966f8211e60efc3aadd487cc8ac9f4ANALYSIS DATE: 2022-11-26T22:27:52ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – c9aa58280208f4d3affe226f175acb81

November 27, 2022

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: c9aa58280208f4d3affe226f175acb81SHA1: 0c81513b4325057000f8ed892a3935d7f994dd5cANALYSIS DATE: 2022-11-26T22:25:56ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – banker – 9f7ecb68cc42f1429828ac7f5ed284a0

November 27, 2022

Score: 8 MALWARE FAMILY: bankerTAGS:banker, evasion, ransomwareMD5: 9f7ecb68cc42f1429828ac7f5ed284a0SHA1: d7043598fa06d022b9846697ffb7ac9d84378653ANALYSIS DATE: 2022-11-26T22:17:01ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – ransomware – 3a333e5e2161304a66b889dd1a25117b

November 27, 2022

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 3a333e5e2161304a66b889dd1a25117bSHA1: 8b09813fe7c6aef5b36bd6969058db94faecd9d1ANALYSIS DATE: 2022-11-26T22:37:30ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – 293e9984b1b0b63fd00ae5400540a6cb

November 27, 2022

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 293e9984b1b0b63fd00ae5400540a6cbSHA1: 1de21617e0fda5587305136c29adecb6aeea7b52ANALYSIS DATE: 2022-11-26T22:49:47ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – f457f101d9dd51bde55ece94cd9fba73

November 27, 2022

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: f457f101d9dd51bde55ece94cd9fba73SHA1: 61c81ec193a4fd167bd4a88f43afdfdaf84ac311ANALYSIS DATE: 2022-11-26T22:39:04ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – persistence – 077e9d48158be1e6b3fc92d1b590bf02

November 27, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 077e9d48158be1e6b3fc92d1b590bf02SHA1: b5bdc018f682597fedab40996a475a343a499581ANALYSIS DATE: 2022-11-26T22:38:44ZTTPS: T1107, T1490, T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ransomware – 5243037dae17a319b80952b1ec3a66e7

November 27, 2022

Score: 5 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 5243037dae17a319b80952b1ec3a66e7SHA1: 778461791cb48dcceec3254da06c1960ee678edeANALYSIS DATE: 2022-11-26T22:51:15ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Month: November 2022

Malware Analysis – amadey – 098c12bb6bcfb37b533aebd016657000

Cobalt Stike Beacon Detected – 152[.]136[.]153[.]12:8008

Cobalt Stike Beacon Detected – 103[.]45[.]143[.]166:443

Cobalt Stike Beacon Detected – 62[.]138[.]7[.]234:80

Cobalt Stike Beacon Detected – 175[.]178[.]243[.]43:8443

Cobalt Stike Beacon Detected – 51[.]140[.]141[.]107:81

Cobalt Stike Beacon Detected – 45[.]145[.]231[.]31:9999

Cobalt Stike Beacon Detected – 5[.]8[.]18[.]245:443

BugCrowd Bug Bounty Disclosure: – Panel access at https://news-push-88.op-mobile.opera.com/. – By rahul0x01

BugCrowd Bug Bounty Disclosure: – Impersonation via Broken Link Hijacking on https://sv.hellosign.com – By CoffeeAddict_exe

Cobalt Stike Beacon Detected – 178[.]128[.]233[.]97:80

Cobalt Stike Beacon Detected – 134[.]19[.]178[.]213:80

Cobalt Stike Beacon Detected – 82[.]156[.]166[.]154:7777

Cobalt Stike Beacon Detected – 1[.]13[.]165[.]208:8443

Malware Analysis – banker – 207ad2fb72531266a63f759e55cd34c7

Malware Analysis – ransomware – 3ff83f280fa873828bba90f087f57ec3

Malware Analysis – ransomware – 4ac0298724ff0212e934651e24251f57

Malware Analysis – ransomware – c9aa58280208f4d3affe226f175acb81

Malware Analysis – banker – 9f7ecb68cc42f1429828ac7f5ed284a0

Malware Analysis – ransomware – 3a333e5e2161304a66b889dd1a25117b

Malware Analysis – ransomware – 293e9984b1b0b63fd00ae5400540a6cb

Malware Analysis – ransomware – f457f101d9dd51bde55ece94cd9fba73

Malware Analysis – persistence – 077e9d48158be1e6b3fc92d1b590bf02

Malware Analysis – ransomware – 5243037dae17a319b80952b1ec3a66e7

[RHYSIDA] – Ransomware Victim: Hope Valley Recovery

[CACTUS] – Ransomware Victim: lsst[.]ac

Cobalt Strike Beacon Detected – 121[.]40[.]69[.]150:8888

Massive Git Config Breach Exposes 15,000 Credentials; 10,000 Private Repos Cloned

Microsoft Warns of Chinese Botnet Exploiting Router Flaws for Credential Theft

You may have missed