Cobalt Stike Beacon Detected – 46[.]175[.]148[.]74:80
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
threatintel
Cobalt Stike Beacon Detected – 46[.]175[.]148[.]53:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 43[.]143[.]94[.]214:8000
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Malware Analysis – djvu – 9dead8d771b215649c86c1374a591799
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 9dead8d771b215649c86c1374a591799SHA1: 5298328fabb9c73665793e0b93051567408db8a7ANALYSIS DATE: 2022-10-12T10:22:17ZTTPS: T1005, T1081, T1012, T1060,...
Malware Analysis – ermac – 24b1ce69f7066a7bc9bc32e3c969d8d9
Score: 10 MALWARE FAMILY: ermacTAGS:family:ermac, banker, evasion, infostealer, ransomware, trojanMD5: 24b1ce69f7066a7bc9bc32e3c969d8d9SHA1: f36ff949217f3340a717a0e5a4d079b254b876beANALYSIS DATE: 2022-10-12T10:25:27ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely...
Malware Analysis – smokeloader – 5d93dd4f046d16989f0dc53f6bb3326f
Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 5d93dd4f046d16989f0dc53f6bb3326fSHA1: cc20ab38c977b233a38730174b58bb04a7d1e646ANALYSIS DATE: 2022-10-12T10:35:48ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...
Malware Analysis – djvu – 6801db35f78978c4b99f6d78a5753eff
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 6801db35f78978c4b99f6d78a5753effSHA1: afeb1ce64b59ea20876bc2fee8a70023e56d6797ANALYSIS DATE: 2022-10-12T10:23:03ZTTPS: T1053, T1005, T1081, T1222,...
VMware has yet to fix CVE-2021-22048 flaw in vCenter Server disclosed one year ago
VMware has yet to address the CVE-2021-22048 privilege escalation vulnerability in vCenter Server disclosed in November 2021. VMware warns customers...
LockBit affiliates compromise Microsoft Exchange servers to deploy ransomware
Lockbit ransomware affiliates are compromising Microsoft Exchange servers to deploy their ransomware, experts warn. South-Korean cybersecurity firm AhnLab reported that...
LockBit 3.0 Ransomware Victim: northwestpipe[.]com
LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...
LockBit 3.0 Ransomware Victim: bakkerheftrucks[.]com
LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...
LockBit 3.0 Ransomware Victim: hamiota[.]com
LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...
LockBit 3.0 Ransomware Victim: draperyconceptsny[.]com
LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...
LockBit 3.0 Ransomware Victim: mtrx[.]com
LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...
LockBit 3.0 Ransomware Victim: psi[.]com[.]tw
LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...
LockBit 3.0 Ransomware Victim: mtrx[.]com
LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...
LockBit 3.0 Ransomware Victim: mtrx[.]com
LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...
LockBit 3.0 Ransomware Victim: mtrx[.]com
LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...
LockBit 3.0 Ransomware Victim: mtrx[.]com
LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...
LockBit 3.0 Ransomware Victim: bigcenters[.]rs
LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...
Malware Analysis – evasion – 658d4950dbc04072e1ed1f2f1b5204b0
Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealer, trojanMD5: 658d4950dbc04072e1ed1f2f1b5204b0SHA1: aec694f67a173222721118651711b969fbbfe55dANALYSIS DATE: 2022-10-11T17:28:02ZTTPS: T1088, T1089, T1112, T1060, T1004, T1082,...
Malware Analysis – persistence – 6fcdf8e4e096f17b789d0722d42a80c0
Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 6fcdf8e4e096f17b789d0722d42a80c0SHA1: 26d8784b92e98af4709d29a8f58129405cae6133ANALYSIS DATE: 2022-10-11T18:43:42ZTTPS: T1107, T1490, T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...
Malware Analysis – persistence – 11dc4c02d1217da78f3242f4bfcd58e0
Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 11dc4c02d1217da78f3242f4bfcd58e0SHA1: c72ef51760802755b1c83d42b7365389a89b1ef1ANALYSIS DATE: 2022-10-11T17:55:42ZTTPS: T1491, T1112, T1082, T1060, T1107, T1490 ScoreMeaningExample10Known badA malware family...
Malware Analysis – persistence – 2cd3b2d532385451b2ce4e19983c88a0
Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 2cd3b2d532385451b2ce4e19983c88a0SHA1: 75d4fd48e64529129cff1654ba57417d0e8399e9ANALYSIS DATE: 2022-10-11T18:13:58ZTTPS: T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...
