Priya Nair — Digital Forensics Analyst Key TakeawaysThe threat actor utilized social engineering to gain initial access through a phishing email with a malicious attachment.Our analysis revealed that the implant leverages the Persistence technique via…
Priya Nair — Digital Forensics Analyst Key TakeawaysThe Maze ransomware employs advanced evasion techniques through double encryption and a unique attack vector.Initial access is often achieved via socially engineered phishing campaigns targeting enterprises.Common persistence mechanisms…
Priya Nair — Digital Forensics Analyst Key TakeawaysThe actor utilized phishing emails with weaponized attachments to gain initial access.Persistence was achieved through the use of scheduled tasks and registry modifications.Command and Control operations were sophisticated,…
Priya Nair — Digital Forensics Analyst Key TakeawaysThe attacker employed a multi-stage approach utilizing a combination of phishing and malicious payloads.The implant used exhibits strong command and control capabilities, leveraging both direct and indirect communication…
Priya Nair — Digital Forensics Analyst Key TakeawaysRansomware deployers are increasingly utilizing phishing emails as the vector for initial access.We observed the use of custom command and control (C2) infrastructure to maintain persistence and evade…
Priya Nair — Digital Forensics Analyst Key TakeawaysEmotet continues to evolve with enhanced evasive tactics and modular architectures.The payload delivery mechanism leverages malicious documents to facilitate initial access.Post-infection, Emotet establishes persistent command-and-control (C2) communications through…
Priya Nair — Digital Forensics Analyst Key TakeawaysMalware leveraged multiple techniques to establish persistence and lateral movement.Command and Control (C2) communications were obfuscated using custom encryption methods.Indicators of Compromise (IOCs) include specific file paths and…
Priya Nair — Digital Forensics Analyst Key TakeawaysThe REvil ransomware employs advanced obfuscation techniques to evade detection and exfiltrate sensitive data.Initial access is often achieved through Phishing and exploiting known vulnerabilities, primarily targeting SMB services.Command…
Priya Nair — Digital Forensics Analyst Key TakeawaysRansomware actors exploited a phishing vector to gain initial access.The malware utilized T1189 – Drive-by Compromise for delivery and execution.Command and control communications were meticulously crafted to blend…
Priya Nair — Digital Forensics Analyst Key TakeawaysThe XYZ malware utilizes email phishing as an initial access vector, employing macros to execute its payload.We identified multiple persistence mechanisms, including registry modifications and scheduled tasks.The command…