Vulnerabilitycritical
Threat Source newsletter (Jan. 14, 2021)
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2021-1647 | Remote Code Execution Vulnerability in Microsoft Defender Antimalware Engine | 7.8 | 40% | KEV | KEV |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| md5 | 0083bc511149ebc16109025b8b3714d7 | 75383b28f5e7833fde1bb7371192f54e381c8bdfa8e68269e3dc30 MD5: 0083bc511149ebc16109025b8b3714d7 Typical Filename: webnavigatorbrowser.exe Claimed Product: |
| md5 | 34560233e751b7e95f155b6f61e7419a | 0599b11241876ada8ae6f07b48f1abe6590c2440004ea4db5becc9 MD5: 34560233e751b7e95f155b6f61e7419a Typical Filename: santivirusservice.exe Claimed Product: A |
| md5 | 6902aa6dd0fbd0d1b647e8d529c7ad3f | 8d954767bdd8445017453475d53fe1e448c07da7a8a6a1194374c6 MD5: 6902aa6dd0fbd0d1b647e8d529c7ad3f Typical Filename: FlashHelperService.exe Claimed Product: F |
| md5 | 8c80dd97c37525927c1e549cb59bcbf3 | be5100c170b777e1647ce9f0f01e3ab9742dfc23f37cb0825b30b5 MD5: 8c80dd97c37525927c1e549cb59bcbf3 Typical Filename: svchost.exe Claimed Product: N/A Detectio |
| md5 | 9b7c2b0abf5478ef9a23d9a9e87c7835 | 2a5c947abaa2bff1b621835ff35f65f9d3272bf1fa5197df9f07d0 MD5: 9b7c2b0abf5478ef9a23d9a9e87c7835 Typical Filename: INV1458863388-20210111852384.xlsm Claimed |
| sha256 | 20f0ce6ae08d954767bdd8445017453475d53fe1e448c07da7a8a6a1194374c6 | 6577, 56578 Most prevalent malware files this week SHA 256: 20f0ce6ae08d954767bdd8445017453475d53fe1e448c07da7a8a6a1194374c6 MD5: 6902aa6dd0fbd0d1b647e8d529c7ad3f Typical Filename: Fla |
| sha256 | 6fdfcd051075383b28f5e7833fde1bb7371192f54e381c8bdfa8e68269e3dc30 | c e Detection Name: PUA.Win.Dropper.Segurazo::tpd SHA 256: 6fdfcd051075383b28f5e7833fde1bb7371192f54e381c8bdfa8e68269e3dc30 MD5: 0083bc511149ebc16109025b8b3714d7 Typical Filename: web |
| sha256 | 85b936960fbe5100c170b777e1647ce9f0f01e3ab9742dfc23f37cb0825b30b5 | duct: N/A Detection Name: W32.A463F9A884-90.SBX.TG SHA 256: 85b936960fbe5100c170b777e1647ce9f0f01e3ab9742dfc23f37cb0825b30b5 MD5: 8c80dd97c37525927c1e549cb59bcbf3 Typical Filename: svc |
| sha256 | 8b4216a7c50599b11241876ada8ae6f07b48f1abe6590c2440004ea4db5becc9 | e: Win.Exploit.Shadowbrokers::5A5226262.auto.talos SHA 256: 8b4216a7c50599b11241876ada8ae6f07b48f1abe6590c2440004ea4db5becc9 MD5: 34560233e751b7e95f155b6f61e7419a Typical Filename: san |
| sha256 | a463f9a8842a5c947abaa2bff1b621835ff35f65f9d3272bf1fa5197df9f07d0 | lper Service Detection Name: W32.Variant.23nh.1201 SHA 256: a463f9a8842a5c947abaa2bff1b621835ff35f65f9d3272bf1fa5197df9f07d0 MD5: 9b7c2b0abf5478ef9a23d9a9e87c7835 Typical Filename: INV |
From the original article
5 min read at blog.talosintelligence.com
Microsoft released its monthly security update this week, disclosing 83 vulnerabilities across its suite of products to kickoff 2021. Our blog post has the most important vulnerabilities you need to know about, along with our released Snort rules to keep your network protected. TalosIntelligence.
blog.talosintelligence.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.