Daniel Osei — SOC Lead & Malware Analyst Key TakeawaysMalware utilized a multi-stage attack incorporating remote access and data exfiltration techniques.Initial access was achieved via a phishing campaign targeting financial institutions, leveraging crafted emails.Indicators of…
Daniel Osei — SOC Lead & Malware Analyst Key TakeawaysXYZ ransomware employs a sophisticated initial access method leveraging phishing emails.The malware uses T1059.001 – PowerShell for execution, allowing it to remain stealthy.Multiple persistence mechanisms are…
Daniel Osei — SOC Lead & Malware Analyst Key TakeawaysActors employed multi-faceted phishing techniques to gain initial access.The custom payload used for execution showed advanced evasion techniques to bypass security mechanisms.Effective lateral movement was observed…
Daniel Osei — SOC Lead & Malware Analyst Key TakeawaysIdentified exploitation of CVE-2023-XXXXX for initial access, indicating the need for immediate patching.Persistent threat actor leveraging PowerShell scripts for lateral movement and persistence.Malware C2 infrastructure demonstrated…
Daniel Osei — SOC Lead & Malware Analyst Key TakeawaysAstraLocker leverages phishing emails and RDP brute-forcing for initial access.Persistence mechanisms exploited include scheduled tasks and registry modifications.The malware employs a sophisticated C2 infrastructure for data…
Daniel Osei — SOC Lead & Malware Analyst Key TakeawaysThe attack chain leveraged phishing emails to gain initial access to target networks.Malicious use of Cobalt Strike facilitated post-exploitation activities, allowing for extensive lateral movement.The threat…
Daniel Osei — SOC Lead & Malware Analyst Key TakeawaysThis analysis provides insight into the tactics employed by the ransomware actor, particularly their use of social engineering and lateral movement techniques.We identified multiple MITRE ATT&CK…
Daniel Osei — SOC Lead & Malware Analyst Key TakeawaysEmotet continues to evolve, leveraging complex delivery mechanisms and modular payload architecture.The malware exhibits sophisticated Command and Control (C2) capabilities to maintain persistence and evade detection.Timely…
Daniel Osei — SOC Lead & Malware Analyst Key TakeawaysThe campaign employed spear-phishing emails as its primary vector for initial compromise.Persistence mechanisms included registry modifications and scheduled tasks to ensure the implant remained active.Command and…
Daniel Osei — SOC Lead & Malware Analyst Key TakeawaysThe observed ransomware attack utilized a phishing email as the initial access vector.Execution mechanisms involved PowerShell scripts alongside a sophisticated loader to deploy the malicious payload.Command…