Dark Web Profile: CosmicBeetle (NoName) Ransomware - SOCRadar® Cyber Intelligence Inc.
Tags
cmtmf-attack-pattern: Acquire Infrastructure Active Scanning Command And Scripting Interpreter Develop Capabilities Exploit Public-Facing Application Obtain Capabilities
country: Turkey Russia
attack-pattern: Acquire Infrastructure Data Direct Acquire Infrastructure - T1583 Active Scanning - T1595 Command And Scripting Interpreter - T1623 Credentials - T1589.001 Data Destruction - T1662 Data Destruction - T1485 Data Encrypted For Impact - T1471 Data Encrypted For Impact - T1486 Develop Capabilities - T1587 Domains - T1583.001 Domains - T1584.001 Exploit Public-Facing Application - T1377 Exploits - T1587.004 Exploits - T1588.005 Gather Victim Network Information - T1590 Impersonation - T1656 Ip Addresses - T1590.005 Local Account - T1087.001 Local Account - T1136.001 Malware - T1587.001 Malware - T1588.001 Multi-Factor Authentication - T1556.006 Obtain Capabilities - T1588 Password Guessing - T1110.001 Password Managers - T1555.005 Powershell - T1059.001 Software - T1592.002 Windows Command Shell - T1059.003 Tool - T1588.002 Vulnerabilities - T1588.006 Vulnerability Scanning - T1595.002 Brute Force - T1110 Command-Line Interface - T1059 Create Account - T1136 Deobfuscate/Decode Files Or Information - T1140 Exploit Public-Facing Application - T1190 Exploitation For Credential Access - T1212 Powershell - T1086 Valid Accounts - T1078 User Execution - T1204 Data Destruction Exploit Public-Facing Application Valid Accounts User Execution
Show in Graph
Common Information
Type Value
UUID 2b2c0f27-0ae5-4c59-b17e-36de2c61a26d
Fingerprint a65294d10e5186d9
Analysis status DONE
Considered CTI value 2
Text language
Published Nov. 8, 2024, 2:47 p.m.
Added to db Nov. 8, 2024, 1:26 p.m.
Last updated Nov. 17, 2024, 6:56 p.m.
Headline Dark Web Profile: CosmicBeetle (NoName) Ransomware
Title Dark Web Profile: CosmicBeetle (NoName) Ransomware - SOCRadar® Cyber Intelligence Inc.
Detected Hints/Tags/Attributes 153/3/25
Source URLs
Redirection Url
Details Source https://socradar.io/dark-web-profile-cosmicbeetle-noname-ransomware/
Details Source https://malware.news/t/dark-web-profile-cosmicbeetle-noname-ransomware/88233
Details Source https://nationalcybersecurity.com/dark-web-profile-cosmicbeetle-noname-ransomware-ransomware-cybercrime/?utm_source=rss&utm_medium=rss&utm_campaign=dark-web-profile-cosmicbeetle-noname-ransomware-ransomware-cybercrime
URL Provider
Details Provider Source level domain
Details malware.news malware.news
Details nationalcybersecurity.com nationalcybersecurity.com
Details socradar.io socradar.io
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 6 ✔ National Cyber Security Consulting http://nationalcybersecurity.com/feed/ 2024-08-30 22:08
Details 158 ✔ Malware Analysis, News and Indicators - Latest topics https://malware.news/latest.rss 2024-08-30 22:08
Details 238 ✔ SOCRadar® Cyber Intelligence Inc. https://socradar.io/feed/ 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details CVE 126 
cve-2017-0144
Details CVE 217 
cve-2020-1472
Details CVE 85 
cve-2023-27532
Details CVE 32 
cve-2021-42278
Details CVE 23 
cve-2021-42287
Details CVE 90 
cve-2022-42475
Details Domain 3 
lockbitblog.info
Details MITRE ATT&CK Techniques 56 
T1595.002
Details MITRE ATT&CK Techniques 14 
T1590.005
Details MITRE ATT&CK Techniques 82 
T1583.001
Details MITRE ATT&CK Techniques 96 
T1587.001
Details MITRE ATT&CK Techniques 59 
T1588.002
Details MITRE ATT&CK Techniques 60 
T1588.005
Details MITRE ATT&CK Techniques 42 
T1588.001
Details MITRE ATT&CK Techniques 542 
T1190
Details MITRE ATT&CK Techniques 420 
T1204
Details MITRE ATT&CK Techniques 333 
T1059.003
Details MITRE ATT&CK Techniques 460 
T1059.001
Details MITRE ATT&CK Techniques 51 
T1136.001
Details MITRE ATT&CK Techniques 306 
T1078
Details MITRE ATT&CK Techniques 504 
T1140
Details MITRE ATT&CK Techniques 44 
T1110.001
Details MITRE ATT&CK Techniques 44 
T1212
Details MITRE ATT&CK Techniques 93 
T1485
Details MITRE ATT&CK Techniques 472 
T1486