JSFiddle - React, Tailwind, and code Playground

by bergb

JavaScript

console.log(unescape("title: Black Basta Internal IP Address Target List\r\n\t\t\t\tid: 529 b4c96 - 6 d32 - 4 bdd - 8338 - 92e7 feb3f4cc\r\n\t\t\t\tstatus: experimental\r\n\t\t\t\tdescription: Detects the file created on an infected endpoint by the Black Basta threat actor containing internal IP addresses used\r\n\t\t\t\tfor targeting when deploying ransomware.Typically found on domain controllers.\r\n\t\t\t\treferences:\r\n\t\t\t\t\t-https://research.nccgroup.com/2022/06/06/shining-the-light-on-black-basta/\r\n\t\t\t\t\t-https://unit42.paloaltonetworks.com/threat-assessment-black-basta-ransomware/\r\n\t\t\t\t\tauthor: Aaron Hoffmann\r\n\t\t\t\tdate: 2022 / 11 / 21\r\n\t\t\t\tmodified: 2022 / 11 / 21\r\n\t\t\t\ttags:\r\n\t\t\t\t\t-attack.discovery -\r\n\t\t\t\t\tattack.t1016\r\n\t\t\t\tlogsource: category: file_event\r\n\t\t\t\tproduct: windows\r\n\t\t\t\tdetection: selection: TargetFileName: 'pc_list.txt'\r\n\t\t\t\tFolderPath | startswith: 'C:\\Windows\\'\r\n\t\t\t\tcondition: selection\r\n\t\t\t\tfalsepositives:\r\n\t\t\t\t\t-Unlikely\r\n\t\t\t\tlevel: medium"))