Sarah Chen — Malware Reverse Engineer Key TakeawaysThe attack leveraged a multi-stage deployment approach, revealing sophisticated planning by the adversary.Utilization of living-off-the-land techniques significantly reduced the detection footprint within the target environment.Indicators of Compromise (IOCs)…
Sarah Chen — Malware Reverse Engineer Key TakeawaysThe latest Emotet variant leverages a multi-stage infection chain to evade detection.Initial access is often gained through phishing emails containing malicious attachments.Actors utilize sophisticated C2 infrastructure that can…
Sarah Chen — Malware Reverse Engineer Key TakeawaysMalware utilizes multiple layers of obfuscation to evade detection.Command and Control (C2) infrastructure reveals extensive use of dynamic DNS.Lateral movement tactics leveraged include the use of legitimate administrative…
Sarah Chen — Malware Reverse Engineer Key TakeawaysRecent malware campaign employs sophisticated phishing techniques to gain initial access.Attackers utilize custom-built C2 infrastructure to maintain communication with compromised systems.Lateral movement techniques observed highlight the necessity for…
Sarah Chen — Malware Reverse Engineer Key TakeawaysQBot employs a multi-stage infection process leveraging phishing emails to gain initial access.Persistence is maintained using malicious scheduled tasks and registry modifications.Command and Control (C2) communications reveal infrastructure…
Sarah Chen — Malware Reverse Engineer Key TakeawaysThe actor leveraged phishing emails and exploit kits for initial access, indicating a sophisticated approach to social engineering.The ransomware employed advanced evasion techniques and lateral movement tactics, showcasing…
Sarah Chen — Malware Reverse Engineer Key TakeawaysThe Hades ransomware utilizes advanced evasion techniques to bypass detection mechanisms.Initial access may occur via phishing emails or vulnerable RDP servers, leveraging known exploits.Lateral movement is executed using…
Sarah Chen — Malware Reverse Engineer Key TakeawaysRansomware actors are increasingly utilizing sophisticated phishing tactics to gain initial access.Our analysis indicated that the malware employed common persistence techniques that evade standard detections.Command and Control communication…
Sarah Chen — Malware Reverse Engineer Key TakeawaysPhishing emails exploited to gain initial access through malicious Office documents.Malware employs PowerShell scripts for execution and maintaining persistence on infected systems.Command and Control (C2) communications utilize encrypted…
Sarah Chen — Malware Reverse Engineer Key TakeawaysThe threat actor utilized a sophisticated phishing technique to achieve initial access.Execution was managed through a malicious Office document that leverages macros to download additional payloads.Command and control…