Cobalt Stike Beacon Detected – 3[.]235[.]183[.]165:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Month: January 2023
Cobalt Stike Beacon Detected – 212[.]113[.]106[.]118:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 47[.]242[.]63[.]91:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Malware Analysis – – 27768c1bd67420c2bda7cd2b3c6b6133
Score: 3 MALWARE FAMILY: TAGS:MD5: 27768c1bd67420c2bda7cd2b3c6b6133SHA1: 8a3b0445fdc854c742985ee65976c1b9b4790a1eANALYSIS DATE: 2023-01-20T10:30:07ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...
Malware Analysis – – 4e68cfad3f3cbef5406c90fd9e9d7931
Score: 1 MALWARE FAMILY: TAGS:MD5: 4e68cfad3f3cbef5406c90fd9e9d7931SHA1: 504d53957bbed8e1a612c791eec7abdd17bd15bcANALYSIS DATE: 2023-01-20T10:18:21ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...
Malware Analysis – wannacry – 7bf2b57f2a205768755c07f238fb32cc
Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, ransomware, wormMD5: 7bf2b57f2a205768755c07f238fb32ccSHA1: 45356a9dd616ed7161a3b9192e2f318d0ab5ad10ANALYSIS DATE: 2023-01-20T10:19:02ZTTPS: T1491, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...
Malware Analysis – discovery – 26027b442df7212f436733b85e1a4aa2
Score: 9 MALWARE FAMILY: discoveryTAGS:discovery, exploit, persistence, ransomware, upxMD5: 26027b442df7212f436733b85e1a4aa2SHA1: ada45868d8f9f70b7a80f6ea0fcb5b7f347499c9ANALYSIS DATE: 2023-01-20T09:47:08ZTTPS: T1222, T1060, T1082, T1012, T1112, T1491 ScoreMeaningExample10Known...
Malware Analysis – ransomware – e81b53daabfd90faad65bae4c895e710
Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: e81b53daabfd90faad65bae4c895e710SHA1: 192a05898ea6b099d88448650b24bf1d17a51456ANALYSIS DATE: 2023-01-20T10:42:08ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...
Malware Analysis – evasion – 0c432d48d6c48b4e7cde6819997c675e
Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 0c432d48d6c48b4e7cde6819997c675eSHA1: 61eef3e822ea71be38aa83f052fbfd3a13607273ANALYSIS DATE: 2023-01-20T11:30:10ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...
Malware Analysis – evasion – 831ae99e59ffcf50e5278171903694de
Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 831ae99e59ffcf50e5278171903694deSHA1: 96ab52cf5c0b40aa10357d644c8eb26b778a0739ANALYSIS DATE: 2023-01-20T11:36:06ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...
Malware Analysis – djvu – ed4fdb6a9120b4374f34ddb3585a8a7f
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: ed4fdb6a9120b4374f34ddb3585a8a7fSHA1: a6bb894ef720e4bb28def834cb03f503e7dd86abANALYSIS DATE: 2023-01-20T10:35:29ZTTPS: T1005, T1081, T1060, T1112,...
Oracle Fusion Middleware privilege escalation | CVE-2023-21846
NAME__________Oracle Fusion Middleware privilege escalationPlatforms Affected:Risk Level:8.8Exploitability:UnprovenConsequences:Gain Privilege DESCRIPTION__________An unspecified vulnerability in Oracle Fusion Middleware related to the Admin Security...
Oracle Hospitality Reporting and Analytics privilege escalation | CVE-2023-21828
NAME__________Oracle Hospitality Reporting and Analytics privilege escalationPlatforms Affected:Oracle Hospitality Reporting and Analytics 9.1.0Risk Level:8.1Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________An unspecified vulnerability in Oracle...
Huawei printer product privilege escalation | CVE-2022-48259
NAME__________Huawei printer product privilege escalationPlatforms Affected:Huawei BiSheng-WNM 3.0.0.325Risk Level:9.8Exploitability:UnprovenConsequences:Gain Privileges DESCRIPTION__________Huawei printer product could allow a remote attacker to gain...
Oracle Fusion Middleware privilege escalation | CVE-2023-21832
NAME__________Oracle Fusion Middleware privilege escalationPlatforms Affected:Risk Level:8.8Exploitability:UnprovenConsequences:Gain Privilege DESCRIPTION__________An unspecified vulnerability in Oracle Fusion Middleware related to the Admin Security...
Oracle Fusion Middleware security bypass | CVE-2023-21862
NAME__________Oracle Fusion Middleware security bypassPlatforms Affected:Risk Level:8.1Exploitability:UnprovenConsequences:Bypass Security DESCRIPTION__________An unspecified vulnerability in Oracle Fusion Middleware related to the XML Security...
Huawei printer product code execution | CVE-2022-48255
NAME__________Huawei printer product code executionPlatforms Affected:Huawei BiSheng-WNM 3.0.0.325Risk Level:9.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Huawei printer product could allow a remote attacker to execute...
Daily Vulnerability Trends: Fri Jan 20 2023
Daily Vulnerability Trends (sourced from VulnMon) CVE NAMECVE DescriptionCVE-2022-44877login/index.php in CWP (aka Control Web Panel or CentOS Web Panel) 7...
Malware Analysis – discovery – 12beb77b2c450a09e5de50f46b07a627
Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: 12beb77b2c450a09e5de50f46b07a627SHA1: 88d0b5c0036b913f981253ab97390af4afc5d70dANALYSIS DATE: 2023-01-20T03:01:17ZTTPS: T1060, T1012, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...
Malware Analysis – ransomware – f6bcf480cc1e928ab55ad9c3310919e6
Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: f6bcf480cc1e928ab55ad9c3310919e6SHA1: dc21c53fee3dd49773fd2bd145ef57760b564b6bANALYSIS DATE: 2023-01-20T04:52:36ZTTPS: T1005, T1081 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...
Malware Analysis – wannacry – 7339a0efc768310a86b6d4f61d88b910
Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, ransomware, wormMD5: 7339a0efc768310a86b6d4f61d88b910SHA1: 05cebfdb6729ed57ca111ae18b645335af7cf006ANALYSIS DATE: 2023-01-20T03:37:13ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...
Malware Analysis – eternity – dafc8e7ccd381af36f19267a2a9b3f9b
Score: 10 MALWARE FAMILY: eternityTAGS:family:eternity, evasion, ransomwareMD5: dafc8e7ccd381af36f19267a2a9b3f9bSHA1: 742c9021f4f0fb264c32a59a66e3ac514b8e166bANALYSIS DATE: 2023-01-20T04:15:13ZTTPS: T1053, T1018, T1107, T1490, T1082 ScoreMeaningExample10Known badA malware family...
Malware Analysis – djvu – ac76af59f88fe2a2ee090c7cd846a4df
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: ac76af59f88fe2a2ee090c7cd846a4dfSHA1: 8c8c4560e971d282291add3d902c5e3c69008c2eANALYSIS DATE: 2023-01-20T05:43:05ZTTPS: T1005, T1081, T1060, T1112,...
New ‘Hook’ Android malware lets hackers remotely control your phone
A new Android malware named 'Hook' is being sold by cybercriminals, boasting it can remotely take over mobile devices in...
