Sarah Chen — Malware Reverse Engineer Key TakeawaysRecent phishing campaigns have showcased the use of Cobalt Strike for lateral movement and persistenceIndicators of compromise (IOCs) include unique file hashes and specific registry modificationsEffective detection methods…
Sarah Chen — Malware Reverse Engineer Key TakeawaysThe malware employs sophisticated obfuscation techniques to evade detection.Command and Control (C2) infrastructure utilizes DNS tunneling to maintain persistence and communication.Lateral movement is primarily executed through legitimate tools…
Sarah Chen — Malware Reverse Engineer Key TakeawaysPhantasm employs a multi-stage infection process, leveraging malicious documents to deliver its payload.Command and control communication is obscured, utilizing non-standard ports to evade detection.Persistent mechanisms involve registry modifications…
Sarah Chen — Malware Reverse Engineer Key TakeawaysThe Shadary malware campaign employs sophisticated techniques for initial access via spear phishing.Persistence mechanisms leverage registry and scheduled task manipulations to maintain footholds.Command and Control (C2) infrastructure uses…
Sarah Chen — Malware Reverse Engineer Key TakeawaysMalicious Office documents used as a vector for initial accessCovert command and control using encrypted HTTP trafficLateral movement leveraging legitimate administrative toolsExecutive SummaryDuring our analysis of a recent…
Sarah Chen — Malware Reverse Engineer Key TakeawaysRaccoon Stealer employs sophisticated web injection techniques for credential harvesting.Initial access can be gained through phishing campaigns utilizing malicious attachments.Persistence is often achieved via Windows Task Scheduler and…
Sarah Chen — Malware Reverse Engineer Key TakeawaysA sophisticated phishing campaign leads to initial access through a malicious Excel document.The payload utilized a .NET-based backdoor for persistence and command execution.The attacker leveraged lateral movement techniques…
Sarah Chen — Malware Reverse Engineer Key TakeawaysThe XYZ malware employs a multi-staged approach to maintain persistence and execute commands stealthily on compromised systems.Our analysis revealed that the malware utilizes T1071.001 – Application Layer Protocol:…
Sarah Chen — Malware Reverse Engineer Key TakeawaysThe attack chain commenced with a targeted phishing email leveraging a malicious Word document.A combination of Office macro abuse and Credential Dumping techniques was observed during execution.The actor…
Sarah Chen — Malware Reverse Engineer Key TakeawaysThe APT34 actor leverages spear-phishing techniques to gain initial access, utilizing weaponized documents.Our analysis identified the use of PowerShell for executing payloads and ensuring persistence on compromised hosts.Command…