Cobalt Strike Beacon Detected - 124[.]221[.]146[.]118:80 - RedPacket Security
Tags
country: China
attack-pattern: Dns - T1071.004 Dns - T1590.002 Domains - T1583.001 Domains - T1584.001 Rundll32 - T1218.011 Server - T1583.004 Server - T1584.004 Connection Proxy - T1090 Rundll32 - T1085
Show in Graph
Common Information
Type Value
UUID 9ed95172-b281-43c8-8b01-646eadbf808f
Fingerprint 414b53625f8cca85
Analysis status DONE
Considered CTI value 0
Text language
Published Sept. 4, 2024, 12:28 a.m.
Added to db Sept. 4, 2024, 1:40 a.m.
Last updated Dec. 21, 2024, 3:58 p.m.
Headline Cobalt Strike Beacon Detected – 124[.]221[.]146[.]118:80
Title Cobalt Strike Beacon Detected - 124[.]221[.]146[.]118:80 - RedPacket Security
Detected Hints/Tags/Attributes 21/2/3
Source URLs
Redirection Url
Details Source https://www.redpacketsecurity.com/cobalt-stike-beacon-detected-1-117-79-251-port-1234/
Details Source https://www.redpacketsecurity.com/cobalt-stike-beacon-detected-124-221-112-96-port-80/
Details Source https://www.redpacketsecurity.com/cobalt-stike-beacon-detected-110-42-250-90-port-80/
Details Source https://www.redpacketsecurity.com/cobalt-stike-beacon-detected-124-221-146-118-port-80/
Details Source https://www.redpacketsecurity.com/cobalt-stike-beacon-detected-124-220-59-220-port-10001/
Details Source https://www.redpacketsecurity.com/cobalt-stike-beacon-detected-124-221-174-136-port-8787/
Details Source https://www.redpacketsecurity.com/cobalt-stike-beacon-detected-124-222-57-94-port-80/
Details Source https://www.redpacketsecurity.com/cobalt-stike-beacon-detected-1-117-62-81-port-8081/
Details Source https://www.redpacketsecurity.com/cobalt-stike-beacon-detected-110-42-212-130-port-80/
Details Source https://www.redpacketsecurity.com/cobalt-stike-beacon-detected-1-15-247-249-port-7001/
Details Source https://www.redpacketsecurity.com/cobalt-stike-beacon-detected-111-231-140-197-port-8080/
Details Source https://www.redpacketsecurity.com/cobalt-stike-beacon-detected-124-223-47-49-port-80/
Details Source https://www.redpacketsecurity.com/cobalt-stike-beacon-detected-175-178-124-71-port-888/
Details Source https://www.redpacketsecurity.com/cobalt-stike-beacon-detected-124-222-132-248-port-8001/
Details Source https://www.redpacketsecurity.com/cobalt-stike-beacon-detected-119-91-231-113-port-8880/
Details Source https://www.redpacketsecurity.com/cobalt-stike-beacon-detected-110-40-141-38-port-80/
Details Source https://www.redpacketsecurity.com/cobalt-stike-beacon-detected-124-222-164-43-port-7002/
Details Source https://www.redpacketsecurity.com/cobalt-stike-beacon-detected-124-222-122-160-port-8824/
Details Source https://www.redpacketsecurity.com/cobalt-stike-beacon-detected-124-222-164-43-port-6667/
URL Provider
Details Provider Source level domain
Details redpacketsecurity.com www.redpacketsecurity.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 361 ✔ RedPacket Security https://www.redpacketsecurity.com/feed/ 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details File 469 
security.txt
Details File 422 
process-inject.exe
Details IPv4 1 
124.221.146.118