Daniel Osei — SOC Lead & Malware Analyst Key TakeawaysXYZ malware uses a custom dropper to achieve initial access through phishing campaigns.The implant employs multiple persistence mechanisms, including registry modifications and scheduled tasks to maintain…
Daniel Osei — SOC Lead & Malware Analyst Key TakeawaysThe campaign utilizes a phishing vector to deliver an initial payload.Malware samples contained multiple persistence mechanisms to establish long-term access.Command and control (C2) communication patterns indicated…
Daniel Osei — SOC Lead & Malware Analyst Key TakeawaysThe attack commenced with a sophisticated vishing scheme aiming to extract credentials.Malware payloads utilized include variants of Remcos RAT, illustrating the flexibility of remote access techniques.Post-exploitation…
Daniel Osei — SOC Lead & Malware Analyst Key TakeawaysRecent investigations unveiled that the ABC malware employs sophisticated evasion techniques.The actor utilized initial phishing vectors followed by deployment of a Powershell script for persistence.Our analysis…
Daniel Osei — SOC Lead & Malware Analyst Key TakeawaysThis analysis reveals the intricate steps taken by the XYZ malware in compromising targeted environments.Initial access was achieved via phishing, followed by multi-stage execution techniques to…
Daniel Osei — SOC Lead & Malware Analyst Key TakeawaysStrong routines for initial access, often leveraging social engineering techniques.Custom-built downloader used for payload execution and persistence via Windows services.Established C2 infrastructure utilizing HTTPS for encrypted…
Daniel Osei — SOC Lead & Malware Analyst Key TakeawaysThis campaign employs sophisticated custom keyloggers designed to evade detection.The exploitation of human behavior through phishing techniques was pivotal in gaining initial access.Observations indicate strong operational…
Daniel Osei — SOC Lead & Malware Analyst Key TakeawaysAn identified strain of XYZ malware showcases advanced evasion tactics, exploiting Windows Management Instrumentation (WMI).The malware employs a multi-stage payload delivery mechanism that includes a dropper…
Daniel Osei — SOC Lead & Malware Analyst Key TakeawaysRecent phishing campaigns exploit social engineering techniques to deploy a sophisticated Remote Access Trojan.The analyzed RAT employs a variety of persistence mechanisms and utilizes well-known C2…
Daniel Osei — SOC Lead & Malware Analyst Key TakeawaysAPT28 employs social engineering tactics in phishing emails to gain initial access to target systems.The malware observed included sophisticated custom dropper techniques, which obfuscate payloads to…