Daniel Osei — SOC Lead & Malware Analyst Key TakeawaysZloader employs sophisticated techniques for initial access, leveraging phishing and malicious attachments to execute its payload.Once executed, Zloader establishes persistence through various methods, including registry manipulations…
Daniel Osei — SOC Lead & Malware Analyst Key TakeawaysXYZ ransomware demonstrated advanced evasion techniques, utilizing legitimate system tools for execution.The actor leveraged phishing emails to achieve initial access, followed by a rapid deployment of…
Daniel Osei — SOC Lead & Malware Analyst Key TakeawaysSupply chain compromises are leveraging social engineering techniques for initial access.This attack utilizes a custom implant capable of evading typical detection mechanisms.Indicators of Compromise (IOCs) include…
Daniel Osei — SOC Lead & Malware Analyst Key TakeawaysThe actor behind the recent APT39 campaign utilized sophisticated obfuscation techniques to bypass traditional security measures.Initial access was achieved through spear-phishing emails that leveraged social engineering…
Daniel Osei — SOC Lead & Malware Analyst Key TakeawaysInitial access achieved via spear phishing with malicious document attachments.The implant utilized sophisticated evasion techniques to blend in with normal process activity.Extensive lateral movement tactics and…
Daniel Osei — SOC Lead & Malware Analyst Key TakeawaysRansomware deployed via phishing email led to significant network compromise.Utilization of T1059.001 - PowerShell for initial execution and payload delivery.Command and Control (C2) infrastructure employed a…
Daniel Osei — SOC Lead & Malware Analyst Key TakeawaysThis campaign utilized social engineering to gain initial access through phishing emails.We observed the use of a sophisticated PowerShell script for lateral movement within the network.Indicators…
Daniel Osei — SOC Lead & Malware Analyst Key TakeawaysRansomware attacks are evolving with increasingly sophisticated tactics for lateral movement and persistence.Indicators of compromise (IOCs) highlight the hiding strategies used by the malware within legitimate…
Daniel Osei — SOC Lead & Malware Analyst Key TakeawaysThe attack exploited a carefully crafted phishing email to deliver a ransomware payload.Indicators of Compromise (IOCs) include specific file hashes and C2 IP addresses associated with…
Daniel Osei — SOC Lead & Malware Analyst Key TakeawaysDetailed examination of the ransomware's initial access vector and propagation techniques.Identification of C2 communication patterns and network behaviors indicative of compromise.Insights into the persistence mechanisms employed…