Using JA3 Hashes for Threat Hunting

~Anyrun~
JA3 hashes, often considered obsolete, can be a powerful pivot for threat hunting when enriched with network and host context.
-
IOCs: gofile. io, discord. com, ip-api. com
-
#JA3 #Malware #ThreatHunting #ThreatIntel

www.netresec.com/

#NetworkMiner #QUIC #CIP #EtherNet/IP #UMAS #REMCOS #MSS #UPnP #JA3 #JA4 #njRAT

Event Attributes

TBFreak - Twitch I.D.I.O.T.S. managing their PMC..badly!

www.twitch.tv/tbfreak witness as our merry band of morons makes its way towards the enemy stronghold in Jagged Alliance 3!
#ENVtuber #vtuber #smallstreamer #JaggedAlliance3 #JA3

TBFreak - Twitch Getting closer to the end of the game, one sector at a time!

www.twitch.tv/tbfreak welcome back to Jagged Alliance 3, where our merry band of idiots is surprisingly effective!
#ENVtuber #Vtuber #Smallstreamer #JaggedAlliance3 #JA3

TBFreak - Twitch Variety streamer since late 2015, incompetent and unfunny just as always.

www.twitch.tv/tbfreak time to travel back to a fictional nation in africa and capture it back, for the people, in jagged alliance 3!
#envtuber #vtuber #smallstreamer #JA3