Skip to content
NewA calmer, faster ZeroHour
Ransomwarecritical

Cherry pie, Douglas firs and the last trip of the summer

Cisco Talos ()5 min read1 · 1 read
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2018-0171
Unauthenticated RCE/DoS in Cisco IOS & IOS XE Smart Install
9.899%KEV
KEV

Indicators of compromise

auto-extracted · verify before use · export allAll
TypeIndicatorContext
md52915b3f8b703eb744fc54c81f4a9c67fd393e0a4109ae189bc64f1f3e312653dcf317a2bd406f18ffcc507 MD5: 2915b3f8b703eb744fc54c81f4a9c67f VirusTotal: https://www.virustotal.com/gui/file/9f1f11a708d
md571fea034b422e4a17ebb06022532fdde6b26fe18d9759a9392bce81ba379817c53a3a468fe9060a076f8ca MD5: 71fea034b422e4a17ebb06022532fdde VirusTotal: https://www.virustotal.com/gui/file/47ecaab5cd6
md57bdbd180c081fa63ca94f9c22c45737683227f5e7988d1ad9c0aecd66d58bb7b4d8518ae23e110308dbf91 MD5: 7bdbd180c081fa63ca94f9c22c457376 VirusTotal: https://www.virustotal.com/gui/file/a31f222fc28
md585bbddc502f7b10871621fd460243fbcaf8e949160ee2731802523e0c76fea87adf00ee7fe9567c3cec610 MD5: 85bbddc502f7b10871621fd460243fbc VirusTotal: https://www.virustotal.com/gui/file/41f14d86bca
md5df11b3105df8d7c70e7b501e210e3cc3de4839c65b6e6d39ac7a272e2611ec1ed1bf73a4f455e2ca20eeaa MD5: df11b3105df8d7c70e7b501e210e3cc3 VirusTotal: https://www.virustotal.com/gui/file/59f1e69b68d
sha25641f14d86bcaf8e949160ee2731802523e0c76fea87adf00ee7fe9567c3cec610duct: N/A Detection Name: Win.Worm.Coinminer::1201 SHA 256: 41f14d86bcaf8e949160ee2731802523e0c76fea87adf00ee7fe9567c3cec610 MD5: 85bbddc502f7b10871621fd460243fbc VirusTotal: https://w
sha25647ecaab5cd6b26fe18d9759a9392bce81ba379817c53a3a468fe9060a076f8calware files from Talos telemetry over the past week SHA256: 47ecaab5cd6b26fe18d9759a9392bce81ba379817c53a3a468fe9060a076f8ca MD5: 71fea034b422e4a17ebb06022532fdde VirusTotal: https://w
sha25659f1e69b68de4839c65b6e6d39ac7a272e2611ec1ed1bf73a4f455e2ca20eeaaIMG001.exe Detection Name: Simple_Custom_Detection SHA 256: 59f1e69b68de4839c65b6e6d39ac7a272e2611ec1ed1bf73a4f455e2ca20eeaa MD5: df11b3105df8d7c70e7b501e210e3cc3 VirusTotal: https://w
sha2569f1f11a708d393e0a4109ae189bc64f1f3e312653dcf317a2bd406f18ffcc507N/A Detection Name: Coinminer:MBT.26mw.in14.Talos SHA 256: 9f1f11a708d393e0a4109ae189bc64f1f3e312653dcf317a2bd406f18ffcc507 MD5: 2915b3f8b703eb744fc54c81f4a9c67f VirusTotal: https://w
sha256a31f222fc283227f5e7988d1ad9c0aecd66d58bb7b4d8518ae23e110308dbf91archive Detection Name: Win.Worm.Bitmin-9847045-0 SHA 256: a31f222fc283227f5e7988d1ad9c0aecd66d58bb7b4d8518ae23e110308dbf91 MD5: 7bdbd180c081fa63ca94f9c22c457376 VirusTotal: https://w

From the original article

5 min read at blog.talosintelligence.com

(Welcome to this week’s edition of the Threat Source newsletter.) 2:01 p. m.

Cisco Talos

blog.talosintelligence.com

Read the full article at Cisco Talos

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.