Skip to content
NewA calmer, faster ZeroHour
RansomwarecriticalExploited in the wild

Threat Source newsletter (Aug. 11, 2022) — All of the things-as-a

Cisco Talos ()5 min read2 · 1 read
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2022-34713
Remote Code Execution in Microsoft Windows Support Diagnostic Tool (MSDT) (DogWalk)
7.868%KEV
KEV
CVE-2022-35743
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
7.81%

Indicators of compromise

auto-extracted · verify before use · export allAll
TypeIndicatorContext
md52c8ea737a232fd03ab80db672d50a17a5689bb2a5dcad6fa2644847156dec8b533ee8a3653b432f8fd5645 MD5: 2c8ea737a232fd03ab80db672d50a17a Typical Filename: LwssPlayer.scr Claimed Product: 梦想之巅幻灯播放器
md5311d64e4892f75019ee257b8377c723eb51720f5ce1922aec6ad316b3aaca838bd864ee2bcdbd9b66171d0 MD5: 311d64e4892f75019ee257b8377c723e Typical Filename: ultrasurf-21-32.exe Claimed Product: N/A
md58c69830a50fb85d8a794fa46643493b21eaefffd2f2c79b5c26a2648b8d3c19a22cadf35453455ff08ead0 MD5: 8c69830a50fb85d8a794fa46643493b2 Typical Filename: AAct.exe Claimed Product: N/A Detection N
md593fefc3e88ffb78abb36365fa5cf857c81591e9bff5117946defbef6041397e56164f485cf8ec57b1d8934 MD5: 93fefc3e88ffb78abb36365fa5cf857c Typical Filename: Wextract Claimed Product: Internet Explor
md5a087b2e6ec57b08c0d0750c60f96a74ce7e4da97a0ff8e1a0d4840c882569d47b8fab8fb187ac2b475636c MD5: a087b2e6ec57b08c0d0750c60f96a74c Typical Filename: AAct.exe Claimed Product: N/A Detection N
sha256125e12c8045689bb2a5dcad6fa2644847156dec8b533ee8a3653b432f8fd5645ion Name: PUA.Win.Trojan.Generic::85.lp.ret.sbx.tg SHA 256: 125e12c8045689bb2a5dcad6fa2644847156dec8b533ee8a3653b432f8fd5645 MD5: 2c8ea737a232fd03ab80db672d50a17a Typical Filename: Lws
sha256168e625c7eb51720f5ce1922aec6ad316b3aaca838bd864ee2bcdbd9b66171d0N/A Detection Name: PUA.Win.Dropper.Generic::1201 SHA 256: 168e625c7eb51720f5ce1922aec6ad316b3aaca838bd864ee2bcdbd9b66171d0 MD5: 311d64e4892f75019ee257b8377c723e Typical Filename: ult
sha256c67b03c0a91eaefffd2f2c79b5c26a2648b8d3c19a22cadf35453455ff08ead0ct: N/A Detection Name: PUA.Win.Tool.Kmsauto::1201 SHA 256: c67b03c0a91eaefffd2f2c79b5c26a2648b8d3c19a22cadf35453455ff08ead0 MD5: 8c69830a50fb85d8a794fa46643493b2 Typical Filename: AAc
sha256e12b6641d7e7e4da97a0ff8e1a0d4840c882569d47b8fab8fb187ac2b475636c梦想之巅幻灯播放器 Detection Name: Auto.125E12.241442.in02 SHA 256: e12b6641d7e7e4da97a0ff8e1a0d4840c882569d47b8fab8fb187ac2b475636c MD5: a087b2e6ec57b08c0d0750c60f96a74c Typical Filename: AAc
sha256e4973db44081591e9bff5117946defbef6041397e56164f485cf8ec57b1d8934ware files from Talos telemetry over the past week SHA 256: e4973db44081591e9bff5117946defbef6041397e56164f485cf8ec57b1d8934 MD5: 93fefc3e88ffb78abb36365fa5cf857c Typical Filename: Wex

From the original article

5 min read at blog.talosintelligence.com

Welcome to this week’s edition of the Threat Source newsletter. Everyone seems to want to create the next “Netflix” of something. Xbox’s Game Pass is the “Netflix of video games.”

Cisco Talos

blog.talosintelligence.com

Read the full article at Cisco Talos

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.