threatintel

Malware Analysis – smokeloader – ffcfc1526b2540403e83ffb80c1274a9

October 5, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: ffcfc1526b2540403e83ffb80c1274a9SHA1: edbec265adb2149eae9b433df946ee9e69e5deb8ANALYSIS DATE: 2022-10-05T14:02:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – lockbit – a9fb78ede24ebca4b2802637a0752c45

October 5, 2022

Score: 10 MALWARE FAMILY: lockbitTAGS:family:lockbit, ransomwareMD5: a9fb78ede24ebca4b2802637a0752c45SHA1: 994226d8a3ddaad76fade66c77958f00f3cf3d5aANALYSIS DATE: 2022-10-04T05:37:03ZTTPS: T1491, T1112, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

threatintel

Malware Analysis – smokeloader – ffcfc1526b2540403e83ffb80c1274a9

Malware Analysis – lockbit – a9fb78ede24ebca4b2802637a0752c45

Erlik 2 – Vulnerable-Flask-App

Cobalt Stike Beacon Detected – 157[.]230[.]50[.]134:443

Cobalt Stike Beacon Detected – 5[.]44[.]42[.]49:80

Cobalt Stike Beacon Detected – 43[.]143[.]175[.]188:2096

Cobalt Stike Beacon Detected – 59[.]173[.]17[.]104:82

Cobalt Stike Beacon Detected – 49[.]235[.]95[.]50:87

Cobalt Stike Beacon Detected – 47[.]109[.]43[.]215:443

Cobalt Stike Beacon Detected – 3[.]139[.]100[.]167:443

Cobalt Stike Beacon Detected – 42[.]192[.]151[.]207:80

Cobalt Stike Beacon Detected – 152[.]136[.]232[.]171:8870

Brute Ratel C4 Detected – 79[.]3[.]12[.]7:9002

OnionPoison: malicious Tor Browser installer served through a popular Chinese YouTube channel

OnionPoison: infected Tor Browser installer distributed through popular YouTube channel

Cobalt Stike Beacon Detected – 156[.]96[.]157[.]101:80

Cobalt Stike Beacon Detected – 152[.]32[.]145[.]118:80

Cobalt Stike Beacon Detected – 72[.]18[.]215[.]170:2083

Cobalt Stike Beacon Detected – 84[.]246[.]85[.]141:443

Cobalt Stike Beacon Detected – 43[.]143[.]96[.]253:5555

Cobalt Stike Beacon Detected – 23[.]94[.]212[.]118:80

Cobalt Stike Beacon Detected – 47[.]101[.]134[.]121:80

Cobalt Stike Beacon Detected – 101[.]200[.]190[.]119:9100

Cobalt Stike Beacon Detected – 43[.]142[.]138[.]251:9090

HackerOne Bug Bounty Disclosure: unauthenticated-path-traversal-and-command-injection-in-trellix-enterprise-security-manager-r-v

CVE Alert: CVE-2024-42168

CVE Alert: CVE-2024-12204

CVE Alert: CVE-2024-42169

CVE Alert: CVE-2024-12627

You may have missed