Daniel Osei — SOC Lead & Malware Analyst Key TakeawaysThe attacker employed a multi-stage phishing strategy to deliver a custom payload.Persistence was achieved using a scheduled task and registry modifications.Network traffic analysis revealed beaconing patterns…
Daniel Osei — SOC Lead & Malware Analyst Key TakeawaysThe XYZ malware employs a sophisticated multi-stage infection vector leveraging spear phishing emails.We observed the use of T1610 – Binary Planting technique to execute its payloads.Command…
Daniel Osei — SOC Lead & Malware Analyst Key TakeawaysThe XYZ ransomware employs multiple evasion techniques, leveraging PowerShell and scheduled tasks to ensure persistence.Indicators of Compromise (IOCs) include unique file hashes and registry changes associated…
Daniel Osei — SOC Lead & Malware Analyst Key TakeawaysActive exploitation of RDP and phishing tactics observed as the initial access vectors.Malware deployment involved sophisticated evasion techniques to maintain persistence.Multiple C2 communications established, indicating a…
Daniel Osei — SOC Lead & Malware Analyst Key TakeawaysXYZ malware employs sophisticated techniques for initial access and lateral movement, targeting enterprise networks.The implant demonstrates resilience through various persistence mechanisms, allowing it to maintain a…
Daniel Osei — SOC Lead & Malware Analyst Key TakeawaysAPT actors likely used spear-phishing to gain initial access to the network.Custom backdoor deployed allows for extensive data exfiltration and lateral movement across the environment.Indicators of…
Daniel Osei — SOC Lead & Malware Analyst Key TakeawaysXYZ malware uses a custom dropper to achieve initial access through phishing campaigns.The implant employs multiple persistence mechanisms, including registry modifications and scheduled tasks to maintain…
Daniel Osei — SOC Lead & Malware Analyst Key TakeawaysThe campaign utilizes a phishing vector to deliver an initial payload.Malware samples contained multiple persistence mechanisms to establish long-term access.Command and control (C2) communication patterns indicated…
Daniel Osei — SOC Lead & Malware Analyst Key TakeawaysThe attack commenced with a sophisticated vishing scheme aiming to extract credentials.Malware payloads utilized include variants of Remcos RAT, illustrating the flexibility of remote access techniques.Post-exploitation…
Daniel Osei — SOC Lead & Malware Analyst Key TakeawaysRecent investigations unveiled that the ABC malware employs sophisticated evasion techniques.The actor utilized initial phishing vectors followed by deployment of a Powershell script for persistence.Our analysis…