threatintel

Malware Analysis – ransomware – a4dd607fdd3faeaf41f98d46f2ed643d

October 12, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: a4dd607fdd3faeaf41f98d46f2ed643dSHA1: 25001d944680a673f669623ee2b508eb4b10198eANALYSIS DATE: 2022-10-12T09:41:06ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Cobalt Stike Beacon Detected – 185[.]236[.]202[.]202:443

October 12, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 120[.]24[.]204[.]74:80

October 12, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 77[.]73[.]134[.]35:80

October 12, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – neshta – 54c2b90fd9364cd39cecff8ab112b825

October 12, 2022

Score: 10 MALWARE FAMILY: neshtaTAGS:family:neshta, family:phobos, evasion, persistence, ransomware, spyware, stealerMD5: 54c2b90fd9364cd39cecff8ab112b825SHA1: 96c0c98dcce84e3bbec643083ce675664173bfd2ANALYSIS DATE: 2022-10-12T09:58:04ZTTPS: T1005, T1081, T1112, T1042, T1082,...

Cobalt Stike Beacon Detected – 159[.]223[.]16[.]152:80

October 12, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – netwalker – 80372de850597bd9e7e021a94f13f0a1

October 12, 2022

Score: 10 MALWARE FAMILY: netwalkerTAGS:family:netwalker, ransomware, spyware, stealerMD5: 80372de850597bd9e7e021a94f13f0a1SHA1: 037db820c8dee94ae25a439b758a2b89f527cbb4ANALYSIS DATE: 2022-10-12T09:57:03ZTTPS: T1107, T1490, T1005, T1081 ScoreMeaningExample10Known badA malware family...

Malware Analysis – djvu – 3fd2bbeeef907e2943ff4e2f6fb24e9a

October 12, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 3fd2bbeeef907e2943ff4e2f6fb24e9aSHA1: e403f202f605fdf9f928c135e55d32ee8757a4fbANALYSIS DATE: 2022-10-12T09:56:22ZTTPS: T1082, T1053, T1005, T1081,...

Malware Analysis – – cfd31737ccacf6e9a0e2ac18cf3445ac

October 12, 2022

Score: 4 MALWARE FAMILY: TAGS:MD5: cfd31737ccacf6e9a0e2ac18cf3445acSHA1: 74c615ca54aaff3c5e6734efef04259290c357baANALYSIS DATE: 2022-10-12T09:58:05ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Cobalt Stike Beacon Detected – 43[.]138[.]66[.]190:8848

October 12, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 51[.]178[.]11[.]176:80

October 12, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 138[.]68[.]188[.]101:443

October 12, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 139[.]155[.]90[.]81:8443

October 12, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – xorist – e98a127ed90e67cd30344bdb691384a1

October 12, 2022

Score: 10 MALWARE FAMILY: xoristTAGS:family:xorist, persistence, ransomware, upxMD5: e98a127ed90e67cd30344bdb691384a1SHA1: a79fe32686a67aa3011d397460d748b3d149d0beANALYSIS DATE: 2022-10-12T09:58:05ZTTPS: T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – persistence – 6c42c7957278c7ac09b111490fc93cc1

October 12, 2022

Score: 8 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 6c42c7957278c7ac09b111490fc93cc1SHA1: 29f9b35533f1a6dbf47ed5dfb4144c33d33ce91bANALYSIS DATE: 2022-10-12T09:58:05ZTTPS: T1060, T1112, T1005, T1081 ScoreMeaningExample10Known badA malware family...

Malware Analysis – ransomware – 8119c78b7cfb7d9ce37286ec9fc263e2

October 12, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 8119c78b7cfb7d9ce37286ec9fc263e2SHA1: 986ba7a5714ad5b0de0d040d1c066389bcb81a67ANALYSIS DATE: 2022-10-12T10:21:03ZTTPS: T1059, T1107, T1490, T1005, T1081 ScoreMeaningExample10Known badA malware family...

Malware Analysis – persistence – 5569ef5cc1b99eee164438d95d601baf

October 12, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 5569ef5cc1b99eee164438d95d601bafSHA1: 27a889e1542b6ebe68130db3618c0de4f40fadb5ANALYSIS DATE: 2022-10-12T10:01:04ZTTPS: T1107, T1490, T1060, T1112, T1005, T1081, T1082, T1012,...

threatintel

Malware Analysis – ransomware – a4dd607fdd3faeaf41f98d46f2ed643d

Cobalt Stike Beacon Detected – 185[.]236[.]202[.]202:443

Cobalt Stike Beacon Detected – 120[.]24[.]204[.]74:80

Cobalt Stike Beacon Detected – 77[.]73[.]134[.]35:80

Malware Analysis – neshta – 54c2b90fd9364cd39cecff8ab112b825

Cobalt Stike Beacon Detected – 159[.]223[.]16[.]152:80

Malware Analysis – netwalker – 80372de850597bd9e7e021a94f13f0a1

Malware Analysis – djvu – 3fd2bbeeef907e2943ff4e2f6fb24e9a

Malware Analysis – – cfd31737ccacf6e9a0e2ac18cf3445ac

Cobalt Stike Beacon Detected – 43[.]138[.]66[.]190:8848

Cobalt Stike Beacon Detected – 51[.]178[.]11[.]176:80

Cobalt Stike Beacon Detected – 138[.]68[.]188[.]101:443

Cobalt Stike Beacon Detected – 139[.]155[.]90[.]81:8443

Malware Analysis – xorist – e98a127ed90e67cd30344bdb691384a1

Malware Analysis – persistence – 6c42c7957278c7ac09b111490fc93cc1

Malware Analysis – ransomware – 8119c78b7cfb7d9ce37286ec9fc263e2

Malware Analysis – persistence – 5569ef5cc1b99eee164438d95d601baf

Black Basta Ransomware Victim: Quality Telecom Consultants Inc

Black Basta Ransomware Victim: SMART Mechanical Solutions

Black Basta Ransomware Victim: AMPORTS

Black Basta Ransomware Victim: ALFATECH

Black Basta Ransomware Victim: CSW GmbH

Black Basta Ransomware Victim: Michael Sullivan & Associates

Cobalt Stike Beacon Detected – 31[.]41[.]244[.]192:443

[RANSOMHUB] – Ransomware Victim: www[.]eurocert[.]pl

Mastering Identity and Access Management for Cybersecurity

Nominet Breach: UK Registry Impacted by Ivanti Zero-Day Vulnerability

Critical Infrastructure Must Assess Product Security in Procurement Processes

Manchester Law Firm Files Lawsuit Against Google and Microsoft Over AI Data Misuse

You may have missed