Year: 2022

Malware Analysis – evasion – 640960039dc458b222603a8a0b8d01ee

November 27, 2022

Score: 8 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 640960039dc458b222603a8a0b8d01eeSHA1: ca4a4f3e16e0886f84e30d1037dd8a666bd52fd5ANALYSIS DATE: 2022-11-26T19:00:46ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Cobalt Stike Beacon Detected – 45[.]135[.]134[.]95:80

November 27, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 5[.]199[.]168[.]233:443

November 27, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 185[.]217[.]1[.]30:80

November 27, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – ransomware – 0ff10287b4c50e0d11ab998a28529415

November 27, 2022

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealer, upxMD5: 0ff10287b4c50e0d11ab998a28529415SHA1: d44462becb1770b6477e1f15d12f78d17f7f11b8ANALYSIS DATE: 2022-11-26T19:31:29ZTTPS: T1082, T1005, T1081, T1130, T1112 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 6748ee6231c58aaa46ca75fdd67e7977

November 27, 2022

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 6748ee6231c58aaa46ca75fdd67e7977SHA1: 4a69b1027b33f3c37a0346c0290281e4e876cbf2ANALYSIS DATE: 2022-11-26T19:32:44ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – d8058de44575f19e972ef72750cfbb18

November 27, 2022

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: d8058de44575f19e972ef72750cfbb18SHA1: e8983d548f55314ec6e79fff59451f61afa09e2eANALYSIS DATE: 2022-11-26T19:40:00ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – b8f9ddd71128dff0dbdc09b0e3eeeb96

November 27, 2022

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: b8f9ddd71128dff0dbdc09b0e3eeeb96SHA1: ffba5a304d0ea417f7faf8be3094b5f6f0e143c9ANALYSIS DATE: 2022-11-26T19:42:27ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Cobalt Stike Beacon Detected – 185[.]48[.]86[.]75:9301

November 27, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 123[.]57[.]232[.]6:443

November 27, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 173[.]199[.]70[.]153:443

November 27, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 142[.]93[.]213[.]188:80

November 27, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – evasion – c6f7172a85250e72cae1d1f91797b41b

November 27, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: c6f7172a85250e72cae1d1f91797b41bSHA1: eba651c68987069448561df00c61afa3c81b8fd5ANALYSIS DATE: 2022-11-26T19:42:48ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – ransomware – 431232b494d07b315f9b579590ebe0e8

November 27, 2022

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 431232b494d07b315f9b579590ebe0e8SHA1: e2634482c775d92034f2caec7bb40c86c5a2f92cANALYSIS DATE: 2022-11-26T19:51:11ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – evasion – 88926eab16184bf1d072494ac6fe1147

November 27, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 88926eab16184bf1d072494ac6fe1147SHA1: 724b53a3d7bf9e0feeafe8c379ff0f839e847e81ANALYSIS DATE: 2022-11-26T19:43:38ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – djvu – eaa90d0307dc1ae0ecd3f56abd24b92b

November 27, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: eaa90d0307dc1ae0ecd3f56abd24b92bSHA1: 306ca9ce1a33f02e010f3db990f3bc75db330dbcANALYSIS DATE: 2022-11-27T09:31:48ZTTPS: T1082, T1005, T1081, T1060,...

Cobalt Stike Beacon Detected – 43[.]143[.]18[.]98:8082

November 27, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 101[.]42[.]89[.]186:2083

November 27, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 174[.]139[.]150[.]171:4443

November 27, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 101[.]34[.]36[.]50:1111

November 27, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Bug Bounty

BugCrowd Bug Bounty Disclosure: – Panel access at https://news-push-88.op-mobile.opera.com/. – By rahul0x01

November 27, 2022

The below information is fully automated and the information is captured from the BugCrowd Disclosure website. The information was correct...

Bug Bounty

BugCrowd Bug Bounty Disclosure: – Impersonation via Broken Link Hijacking on https://sv.hellosign.com – By CoffeeAddict_exe

November 27, 2022

The below information is fully automated and the information is captured from the BugCrowd Disclosure website. The information was correct...

Malware Analysis – amadey – b4e7936ca7f8a1513ac3c449757a30a2

November 27, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: b4e7936ca7f8a1513ac3c449757a30a2SHA1: ae341e99e81a07971d0abdb955c3a3e7463bb4f9ANALYSIS DATE:...

Malware Analysis – amadey – d6db545e136e684388761f4e16eef9af

November 27, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, backdoor, collection, discovery, persistence, ransomware, trojanMD5: d6db545e136e684388761f4e16eef9afSHA1: 54bd1905bf73ad54efc7d020a8dabe4068b278b4ANALYSIS DATE: 2022-11-27T09:44:19ZTTPS: T1114, T1082, T1053,...

Year: 2022

Malware Analysis – evasion – 640960039dc458b222603a8a0b8d01ee

Cobalt Stike Beacon Detected – 45[.]135[.]134[.]95:80

Cobalt Stike Beacon Detected – 5[.]199[.]168[.]233:443

Cobalt Stike Beacon Detected – 185[.]217[.]1[.]30:80

Malware Analysis – ransomware – 0ff10287b4c50e0d11ab998a28529415

Malware Analysis – ransomware – 6748ee6231c58aaa46ca75fdd67e7977

Malware Analysis – ransomware – d8058de44575f19e972ef72750cfbb18

Malware Analysis – ransomware – b8f9ddd71128dff0dbdc09b0e3eeeb96

Cobalt Stike Beacon Detected – 185[.]48[.]86[.]75:9301

Cobalt Stike Beacon Detected – 123[.]57[.]232[.]6:443

Cobalt Stike Beacon Detected – 173[.]199[.]70[.]153:443

Cobalt Stike Beacon Detected – 142[.]93[.]213[.]188:80

Malware Analysis – evasion – c6f7172a85250e72cae1d1f91797b41b

Malware Analysis – ransomware – 431232b494d07b315f9b579590ebe0e8

Malware Analysis – evasion – 88926eab16184bf1d072494ac6fe1147

Malware Analysis – djvu – eaa90d0307dc1ae0ecd3f56abd24b92b

Cobalt Stike Beacon Detected – 43[.]143[.]18[.]98:8082

Cobalt Stike Beacon Detected – 101[.]42[.]89[.]186:2083

Cobalt Stike Beacon Detected – 174[.]139[.]150[.]171:4443

Cobalt Stike Beacon Detected – 101[.]34[.]36[.]50:1111

BugCrowd Bug Bounty Disclosure: – Panel access at https://news-push-88.op-mobile.opera.com/. – By rahul0x01

BugCrowd Bug Bounty Disclosure: – Impersonation via Broken Link Hijacking on https://sv.hellosign.com – By CoffeeAddict_exe

Malware Analysis – amadey – b4e7936ca7f8a1513ac3c449757a30a2

Malware Analysis – amadey – d6db545e136e684388761f4e16eef9af

[KAIROS] – Ransomware Victim: combinedpoolandspa[.]com

[RANSOMHUB] – Ransomware Victim: AKConstructors[.]com

CISA: CISA Releases Microsoft Expanded Cloud Logs Implementation Playbook

CVE Alert: CVE-2024-48854

CVE Alert: CVE-2024-48856

You may have missed