Cobalt Strike Beacon Detected - 101[.]200[.]120[.]228:80 - RedPacket Security
Tags
country: China
attack-pattern: Dns - T1071.004 Dns - T1590.002 Domains - T1583.001 Domains - T1584.001 Server - T1583.004 Server - T1584.004 Connection Proxy - T1090
Show in Graph
Common Information
Type Value
UUID 426f458d-1c8e-4d2e-afc8-55cb6c8862ff
Fingerprint c3434b665f80ce4d
Analysis status DONE
Considered CTI value 0
Text language
Published Dec. 5, 2024, 12:59 p.m.
Added to db Dec. 5, 2024, 4:32 p.m.
Last updated Dec. 25, 2024, 4:20 p.m.
Headline Cobalt Strike Beacon Detected – 101[.]200[.]120[.]228:80
Title Cobalt Strike Beacon Detected - 101[.]200[.]120[.]228:80 - RedPacket Security
Detected Hints/Tags/Attributes 24/2/5
Source URLs
Redirection Url
Details Source https://www.redpacketsecurity.com/cobalt-stike-beacon-detected-101-200-120-228-port-80/
Details Source https://www.redpacketsecurity.com/cobalt-stike-beacon-detected-47-98-185-157-port-80/
Details Source https://www.redpacketsecurity.com/cobalt-stike-beacon-detected-112-124-60-149-port-8080/
Details Source https://www.redpacketsecurity.com/cobalt-stike-beacon-detected-47-99-93-43-port-80/
URL Provider
Details Provider Source level domain
Details redpacketsecurity.com www.redpacketsecurity.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 361 ✔ RedPacket Security https://www.redpacketsecurity.com/feed/ 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 89 
code.jquery.com
Details File 489 
security.txt
Details File 440 
process-inject.exe
Details IPv4 1 
101.200.120.228
Details Url 63 
http://code.jquery.com