Sarah Chen — Malware Reverse Engineer Key TakeawaysDiscovery of a sophisticated malware sample linked to an APT group exhibiting advanced evasion tactics.Identification of command and control (C2) infrastructure using multiple signaling mechanisms to obfuscate traffic.Insights…
Sarah Chen — Malware Reverse Engineer Key TakeawaysThe phishing campaign utilizes malicious Excel files as the initial payload to deploy the formbook malware.Our investigation revealed the use of PowerShell scripts for the execution of the…
Sarah Chen — Malware Reverse Engineer Key TakeawaysSupply chain compromise through updated software distributionUtilization of Credential Dumping techniques for lateral movementDiscovery of C2 infrastructure indicating long-term engagementExecutive SummaryIn our recent investigation into the SolarWinds supply…
Sarah Chen — Malware Reverse Engineer Key TakeawaysThe attack leveraged malicious NuGet packages as the initial point of entry, targeting .NET developers' environments.Custom PowerShell scripts were employed for initial execution and lateral movement, evading standard…
Sarah Chen — Malware Reverse Engineer Key TakeawaysThe observed ransomware leveraged email phishing as an initial access vector.Persistence was achieved through the use of a scheduled task that executed a malicious binary.Command and control communication…
Sarah Chen — Malware Reverse Engineer Key TakeawaysThe attack commenced with a spear-phishing email that delivered a malicious Excel file.Subsequent stages included a PowerShell-based dropper, establishing persistence through scheduled tasks.Command and Control (C2) communication utilized…
Sarah Chen — Malware Reverse Engineer Key TakeawaysThis campaign exploits phishing emails to deliver ransomware payloads.We identified the use of obfuscated PowerShell scripts for initial execution.The actor utilized C2 infrastructure that leverages encrypted communications for…
Sarah Chen — Malware Reverse Engineer Key TakeawaysCredential theft is a primary objective, achieved through targeted phishing campaigns combined with stealthy PowerShell exploitation.The use of legitimate tools and living-off-the-land techniques complicates detection and increases the…
Sarah Chen — Malware Reverse Engineer Key TakeawaysPhishing campaign predominantly targets corporate users through malicious macros in Office documents.The campaign employs obfuscation techniques to evade detection, utilizing PowerShell for execution.Indicators of compromise (IOCs) include specific…
Sarah Chen — Malware Reverse Engineer Key TakeawaysWe identified a sophisticated phishing campaign that utilized a bespoke malware payload to establish persistence.The attack leveraged several MITRE ATT&CK techniques, including credential dumping and lateral movement via…