Cobalt Stike Beacon Detected - 23[.]227[.]196[.]17:443 - RedPacket Security
Tags
| country: | United States Of America |
| attack-pattern: | Dns - T1071.004 Dns - T1590.002 Domains - T1583.001 Domains - T1584.001 Server - T1583.004 Server - T1584.004 Connection Proxy - T1090 |
Common Information
| Type | Value |
|---|---|
| UUID | a7771707-0b47-40a9-b632-65561614db2e |
| Fingerprint | 414b43601f89cac5 |
| Analysis status | DONE |
| Considered CTI value | 0 |
| Text language | |
| Published | March 8, 2023, 12:01 p.m. |
| Added to db | March 8, 2023, 1:24 p.m. |
| Last updated | Nov. 12, 2024, 4:50 p.m. |
| Headline | Cobalt Stike Beacon Detected – 23[.]227[.]196[.]17:443 |
| Title | Cobalt Stike Beacon Detected - 23[.]227[.]196[.]17:443 - RedPacket Security |
| Detected Hints/Tags/Attributes | 21/2/10 |
Source URLs
URL Provider
RSS Feed
| Details | Id | Enabled | Feed title | Url | Added to db |
|---|---|---|---|---|---|
| Details | 361 | ✔ | RedPacket Security | https://www.redpacketsecurity.com/feed/ | 2024-08-30 22:08 |
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | Domain | 3 | hvvc.us |
|
| Details | Domain | 2 | svchosexec.com |
|
| Details | Domain | 1 | 23-227-196-17.static.hvvc.us |
|
| Details | Domain | 1 | qw.svchosexec.com |
|
| Details | Domain | 1 | as.svchosexec.com |
|
| Details | Domain | 1 | zx.svchosexec.com |
|
| Details | File | 383 | security.txt |
|
| Details | File | 343 | process-inject.exe |
|
| Details | sha1 | 1 | ebe78cd340a798feb8d15c09a8666465a8237f1f |
|
| Details | IPv4 | 2 | 23.227.196.17 |