MediumPublished
Mapping and Pivoting from Cobalt Strike C2 Infrastructure Attributed to CVE-2021-40444
By Michael Koczwara
Excerpt
Member-only story
Michael Koczwara
11 min read
Sep 12, 2021
Press enter or click to view image in full size
Threat Actors Infrastructure (VT Analysis).
Pivoting from 45.147.229[.]242
Pivoting from 104.194.10[.]21
Pivoting from 45.153.240[.]220
Short summary and IOC’s.
Press enter or click to view image in full size
Threat Actors C…
The opening of the report, shown for reference. The full report, with its figures and indicators, is published by Medium on michaelkoczwara.medium.com.
Mentioned in the excerpt
CVE-2021-40444Cobalt
More from Medium19
- Taiwan High-Tech Ecosystem Targeted by Foreign APT Group:Medium · Published 10 Jun 2022
- Lx(Base) RAT: A Technical Deep DiveMedium · Published 3 Aug
- Reverse Engineering the Auto-Color Linux BackdoorMedium · Published 30 Aug
- 1337_GTWK Linux Malware AnalysisMedium · Published 30 Jul
On the same topics
- Stray Cat, Open Doors: How k0t Wanders Through the Network EdgeGroup-IB · Published 21 Oct
- Resources - SecurityScorecardSecurityScorecard · Added 25 Oct
- ARMORY CASTLE Exploits BeyondTrustMandiant (Google) · Published 15 Oct
- skanthak.homepage.t-online.de/sentinel.htmlskanthak.homepage.t-online.de · Added 18 Oct
