Sarah Chen — Malware Reverse Engineer Key TakeawaysTactics employed included URL phishing and use of an initial dropper.The malware leveraged persistence mechanisms with registry modifications.Command-and-control communication utilized a combination of HTTPS and DNS tunneling.Executive SummaryDuring…
Sarah Chen — Malware Reverse Engineer Key TakeawaysDiscovered malware employs advanced evasion techniques to bypass security measures.Command and Control (C2) infrastructure used is resilient, featuring domain generation algorithms.Indicators of Compromise (IOCs) include unique file hashes…
Sarah Chen — Malware Reverse Engineer Key TakeawaysAttackers leveraged a phishing campaign to gain initial access to corporate networks.The malware employed sophisticated evasion techniques to bypass security controls.Command and control communications were established via encrypted…
Sarah Chen — Malware Reverse Engineer Key TakeawaysThe latest RAT leverages phishing emails to gain initial access, primarily targeting corporate environments.Our analysis revealed extensive use of the T1059.001 – PowerShell to execute commands remotely, enhancing…
Sarah Chen — Malware Reverse Engineer Key TakeawaysThe malware employs advanced evasion techniques to bypass traditional detection mechanisms.Command and Control communications leverage a bespoke encryption protocol to obfuscate payload delivery.Initial access appears to be achieved…
Sarah Chen — Malware Reverse Engineer Key TakeawaysPhishing emails leveraging authentic-looking Microsoft Office documents were the initial vector.Malicious macros executed upon user interaction downloaded secondary payloads, exploiting T1059.003 – PowerShell.Communication back to the C2 was…
Sarah Chen — Malware Reverse Engineer Key TakeawaysInitial access was obtained through a targeted phishing campaign leveraging malicious Office documents.The malware employed multiple persistence techniques and established a robust C2 infrastructure for communication.Our investigation revealed…
Sarah Chen — Malware Reverse Engineer Key TakeawaysThe ransomware employs sophisticated lateral movement techniques leveraging T1075 – Pass the Hash.Command and control is established using dynamic DNS, indicating a well-planned evasion strategy.Initial access vectors include…
Alex Morgan — Threat Intelligence Analyst Key TakeawaysMalware was delivered via a phishing email and executed by exploiting a known vulnerability.Persistence was achieved through the creation of a scheduled task and modifications to registry keys.Command…
Alex Morgan — Threat Intelligence Analyst Key TakeawaysRansomware operators exploited a vulnerable web application for initial access.Persistence mechanisms leveraged Windows Task Scheduler to ensure continuity post-reboot.Effective Command and Control (C2) infrastructure was established to manage…