Cobalt Stike Beacon Detected – 121[.]127[.]249[.]167:80
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
threatintel
Malware Analysis – ransomware – 1990481f19bcd2e1f4d4421741fb2f0c
Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 1990481f19bcd2e1f4d4421741fb2f0cSHA1: 975c185318c462a74a77847ad29819cc96a44ad1ANALYSIS DATE: 2022-10-13T22:48:41ZTTPS: T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...
Cobalt Stike Beacon Detected – 39[.]107[.]179[.]147:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 61[.]160[.]251[.]5:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Malware Analysis – ransomware – 0dfba86be0820f37615c7df9a9c100d4
Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 0dfba86be0820f37615c7df9a9c100d4SHA1: 6e732625f4573b5973acaf1023baaa72166c9e41ANALYSIS DATE: 2022-10-13T22:45:40ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...
Cobalt Stike Beacon Detected – 185[.]8[.]105[.]64:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Malware Analysis – ransomware – 0acce440ab2341ee473ad5b54ef1cdec
Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 0acce440ab2341ee473ad5b54ef1cdecSHA1: 4b392e55bff5225fbc5fa26d58a763289eceb696ANALYSIS DATE: 2022-10-13T22:36:37ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...
Prevent Ransomware Attacks on Critical Infrastructure
Cyberattacks against critical infrastructure can cause massive societal disruption and take an enormous financial toll. Discover how to protect six...
Oil and Gas Cybersecurity: Trends & Response to Survey
Based on our survey of over 900 ICS security leaders in the United States, Germany, and Japan, we dig deeper...
CISA: CISA Releases Twenty-Five Industrial Control Systems Advisories
CISA Releases Twenty-Five Industrial Control Systems Advisories CISA has released twenty-five (25) Industrial Control Systems (ICS) advisories on October 13,...
Malware Analysis – discovery – 6e3e35fff42f015d89124fb551a20c10
Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploitMD5: 6e3e35fff42f015d89124fb551a20c10SHA1: ebac50b7936985cd1aff1d88115dce51e0af2ca3ANALYSIS DATE: 2022-10-13T13:32:51ZTTPS: T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...
Malware Analysis – discovery – 791b1ffd2928745ab4210e0ab5ba6930
Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploitMD5: 791b1ffd2928745ab4210e0ab5ba6930SHA1: c4b506fd4fd8d4a310887fef7a01857d9a896e8bANALYSIS DATE: 2022-10-13T13:32:25ZTTPS: T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...
Malware Analysis – danabot – 5f106f26eed8a0eaf4df1afca00e7985
Score: 10 MALWARE FAMILY: danabotTAGS:family:danabot, family:dcrat, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, banker, collection, discovery, evasion, infostealer, persistence, ransomware, rat, spyware,...
Malware Analysis – discovery – 67afa9afdf9f97902c310bcc7236e9b0
Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploitMD5: 67afa9afdf9f97902c310bcc7236e9b0SHA1: 184db2eab50767513ead595e740c42258edbad91ANALYSIS DATE: 2022-10-13T13:32:27ZTTPS: T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...
Malware Analysis – djvu – 8c79a9ea48c5b41c076d1af3481c0c8f
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 8c79a9ea48c5b41c076d1af3481c0c8fSHA1: 1181c0bab44a00211f2e06b25e77fe72c64bacefANALYSIS DATE: 2022-10-13T14:36:09ZTTPS: T1012, T1060, T1112, T1222,...
Malware Analysis – evasion – 41dedc6471b514ac137413e363716385
Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 41dedc6471b514ac137413e363716385SHA1: 4c9ae0e4920c95476de71b85bd175b7d1e7185d4ANALYSIS DATE: 2022-10-13T14:20:55ZTTPS: T1082, T1012, T1120, T1491, T1112, T1060, T1004, T1490,...
Malware Analysis – wannacry – bfec29f4e741d6972e7f6d9e1cbbe68b
Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: bfec29f4e741d6972e7f6d9e1cbbe68bSHA1: f8bcfc50369d6daeabbeb4ab5747eb8eb5fbb893ANALYSIS DATE: 2022-10-13T14:40:15ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...
Malware Analysis – wannacry – 2e655c3eaf6b7ab9dfb62633f84588e9
Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: 2e655c3eaf6b7ab9dfb62633f84588e9SHA1: e5ee7be216bcca72cab130da7192e2368ef140c5ANALYSIS DATE: 2022-10-13T14:20:26ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...
Malware Analysis – danabot – 0fc85229bfeb9ad05e098e8d0ec33f77
Score: 10 MALWARE FAMILY: danabotTAGS:family:danabot, family:djvu, family:redline, family:smokeloader, family:vidar, botnet:517, backdoor, banker, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojan,...
Malware Analysis – evasion – 5110fa03dda5015e9358e54892b11cb0
Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 5110fa03dda5015e9358e54892b11cb0SHA1: 59bad4536d77543395cdfa4b046e6fd019f291e3ANALYSIS DATE: 2022-10-13T15:10:04ZTTPS: T1060, T1112, T1107, T1490, T1082 ScoreMeaningExample10Known badA malware...
Malware Analysis – djvu – 614e9ab5124ca650e2daf78edf427f3b
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 614e9ab5124ca650e2daf78edf427f3bSHA1: a68522ee682f2be3a0205e576d740ba497630f9fANALYSIS DATE: 2022-10-13T15:02:27ZTTPS: T1053, T1005, T1081, T1082,...
Malware Analysis – xorist – 060e10b04227a593886c4cd0928a3bf2
Score: 10 MALWARE FAMILY: xoristTAGS:family:xorist, persistence, ransomware, spyware, stealer, upxMD5: 060e10b04227a593886c4cd0928a3bf2SHA1: 054f9db834e37459f10b83f56691a5d6e7f28334ANALYSIS DATE: 2022-10-13T15:10:00ZTTPS: T1005, T1081, T1060, T1112 ScoreMeaningExample10Known badA...
Malware Analysis – persistence – 419a3f9ee0714eccacfc95088ceeaa10
Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 419a3f9ee0714eccacfc95088ceeaa10SHA1: e0bc60f09a59582e7fc0f2922204453898210fdaANALYSIS DATE: 2022-10-13T15:11:40ZTTPS: T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...
Malware Analysis – djvu – d8401fb3b6684302bf3d864cbc1f4873
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: d8401fb3b6684302bf3d864cbc1f4873SHA1: 2bbce123c8cdf589b8c8f180bd09b2081e7f9649ANALYSIS DATE:...
