threatintel

Malware Analysis – ransomware – c26f9d5978e4e716e8bbf2dae555f037

October 13, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: c26f9d5978e4e716e8bbf2dae555f037SHA1: 3b00b47b422b15b8a3e259ff8f5e49cd8bf430dcANALYSIS DATE: 2022-10-13T04:42:05ZTTPS: T1091, T1005, T1081, T1082, T1107, T1490 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 83b49ae5278e28fc5e27523553b59a31

October 13, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 83b49ae5278e28fc5e27523553b59a31SHA1: cd6e1d99797a0147e4d110d54586601156a12ff9ANALYSIS DATE: 2022-10-13T04:42:05ZTTPS: T1107, T1490, T1091, T1005, T1081, T1082 ScoreMeaningExample10Known badA malware...

threatintel

Malware Analysis – ransomware – c26f9d5978e4e716e8bbf2dae555f037

Malware Analysis – ransomware – 83b49ae5278e28fc5e27523553b59a31

Why Most Red Teams are Really Pentesters

Cobalt Stike Beacon Detected – 1[.]15[.]41[.]180:82

Cobalt Stike Beacon Detected – 124[.]220[.]148[.]236:80

Cobalt Stike Beacon Detected – 185[.]243[.]41[.]201:8080

Cobalt Stike Beacon Detected – 5[.]44[.]42[.]15:443

Cobalt Stike Beacon Detected – 109[.]166[.]233[.]139:443

Cobalt Stike Beacon Detected – 106[.]13[.]63[.]18:443

Cobalt Stike Beacon Detected – 104[.]225[.]234[.]34:443

Cobalt Stike Beacon Detected – 38[.]54[.]37[.]36:443

Cobalt Stike Beacon Detected – 101[.]43[.]51[.]104:80

Cobalt Stike Beacon Detected – 1[.]15[.]189[.]200:443

Cobalt Stike Beacon Detected – 5[.]8[.]18[.]242:80

Cobalt Stike Beacon Detected – 45[.]80[.]189[.]108:80

Cobalt Stike Beacon Detected – 188[.]241[.]240[.]136:443

Cobalt Stike Beacon Detected – 47[.]98[.]234[.]230:82

Cobalt Stike Beacon Detected – 101[.]43[.]188[.]175:6666

Posh C2 Detected – 58[.]96[.]75[.]176:443

Aruba fixes critical vulnerabilities in EdgeConnect Enterprise Orchestrator

Black Basta Ransomware Gang Infiltrates networks via QAKBOT, Brute Ratel, and Cobalt Strike

LockBit 3.0 Ransomware Victim: marktel[.]es

NCSC issues fresh guidance following recent rise in supply chain cyber attacks

Microsoft Patch Tuesday for October 2022 doesn’t fix Exchange Server flaws

CISA: CISA Releases Fact Sheet Detailing Embedded Backdoor Function of Contec CMS8000 Firmware

CISA: CISA Adds Four Known Exploited Vulnerabilities to Catalog

CISA: CISA Adds One Known Exploited Vulnerability to Catalog

CISA: CISA Releases Nine Industrial Control Systems Advisories

CISA: CISA Partners with ASD’s ACSC, CCCS, NCSC-UK, and Other International and US Organizations to Release Guidance on Edge Devices

You may have missed