Daniel Osei — SOC Lead & Malware Analyst Key TakeawaysThe attack commenced with a sophisticated vishing scheme aiming to extract credentials.Malware payloads utilized include variants of Remcos RAT, illustrating the flexibility of remote access techniques.Post-exploitation…
Daniel Osei — SOC Lead & Malware Analyst Key TakeawaysRecent investigations unveiled that the ABC malware employs sophisticated evasion techniques.The actor utilized initial phishing vectors followed by deployment of a Powershell script for persistence.Our analysis…
Daniel Osei — SOC Lead & Malware Analyst Key TakeawaysThis analysis reveals the intricate steps taken by the XYZ malware in compromising targeted environments.Initial access was achieved via phishing, followed by multi-stage execution techniques to…
Daniel Osei — SOC Lead & Malware Analyst Key TakeawaysStrong routines for initial access, often leveraging social engineering techniques.Custom-built downloader used for payload execution and persistence via Windows services.Established C2 infrastructure utilizing HTTPS for encrypted…
Daniel Osei — SOC Lead & Malware Analyst Key TakeawaysThis campaign employs sophisticated custom keyloggers designed to evade detection.The exploitation of human behavior through phishing techniques was pivotal in gaining initial access.Observations indicate strong operational…
Daniel Osei — SOC Lead & Malware Analyst Key TakeawaysAn identified strain of XYZ malware showcases advanced evasion tactics, exploiting Windows Management Instrumentation (WMI).The malware employs a multi-stage payload delivery mechanism that includes a dropper…
Daniel Osei — SOC Lead & Malware Analyst Key TakeawaysRecent phishing campaigns exploit social engineering techniques to deploy a sophisticated Remote Access Trojan.The analyzed RAT employs a variety of persistence mechanisms and utilizes well-known C2…
Daniel Osei — SOC Lead & Malware Analyst Key TakeawaysAPT28 employs social engineering tactics in phishing emails to gain initial access to target systems.The malware observed included sophisticated custom dropper techniques, which obfuscate payloads to…
Daniel Osei — SOC Lead & Malware Analyst Key TakeawaysMalware utilized a multi-stage attack incorporating remote access and data exfiltration techniques.Initial access was achieved via a phishing campaign targeting financial institutions, leveraging crafted emails.Indicators of…
Daniel Osei — SOC Lead & Malware Analyst Key TakeawaysXYZ ransomware employs a sophisticated initial access method leveraging phishing emails.The malware uses T1059.001 – PowerShell for execution, allowing it to remain stealthy.Multiple persistence mechanisms are…