Ransomwarehigh
A mining multitool
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2017-0144 | Remote Code Execution in Microsoft SMBv1 (EternalBlue) affecting Windows and Siemens devices | 8.8 | 99% | KEVRansomwarePoC ×6 | KEV |
| CVE-2018-8120 | Local Privilege Escalation in Microsoft Win32k (Windows 7 / Server 2008) | 7.0 | 73% | KEVRansomwarePoC | KEV |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| domain | 7h4uk.com | K5MD93z6tV9H Indicators of compromise C&C hostnames: update.7h4uk[.]com 185.128.43.62 info.7h4uk[.]com MD5: AEEB46A88C9A37FA54CA2 |
| ipv4 | 185.128.43.62 | Indicators of compromise C&C hostnames: update.7h4uk[.]com 185.128.43.62 info.7h4uk[.]com MD5: AEEB46A88C9A37FA54CA2B64AE17F248 4FE2 |
| md5 | 4fe2de6fbb278e56c23e90432f21f6c8 | 3.62 info.7h4uk[.]com MD5: AEEB46A88C9A37FA54CA2B64AE17F248 4FE2DE6FBB278E56C23E90432F21F6C8 71404815F6A0171A29DE46846E78A079 81E214A4120A4017809F5E7713 |
| md5 | 71404815f6a0171a29de46846e78a079 | A88C9A37FA54CA2B64AE17F248 4FE2DE6FBB278E56C23E90432F21F6C8 71404815F6A0171A29DE46846E78A079 81E214A4120A4017809F5E7713B7EAC8 Latest Webinars Reports Ka |
| md5 | 81e214a4120a4017809f5e7713b7eac8 | 6FBB278E56C23E90432F21F6C8 71404815F6A0171A29DE46846E78A079 81E214A4120A4017809F5E7713B7EAC8 Latest Webinars Reports Kaspersky researchers have discover |
| md5 | aeeb46a88c9a37fa54ca2b64ae17f248 | mes: update.7h4uk[.]com 185.128.43.62 info.7h4uk[.]com MD5: AEEB46A88C9A37FA54CA2B64AE17F248 4FE2DE6FBB278E56C23E90432F21F6C8 71404815F6A0171A29DE46846E |
From the original article
4 min read at securelist.com
Symbiosis of PowerShell and EternalBlue for cryptocurrency mining Recently, an interesting miner implementation appeared on Kaspersky Lab’s radar. The malware, which we dubbed PowerGhost, is capable of stealthily establishing itself in a system and spreading across large corporate networks infecting both workstations and servers.
By @Securelist · securelist.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.