Threat Source newsletter (June 10, 2021)
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2021-21985 | Remote Code Execution in VMware vCenter Server vSAN Health Check plug-in | 9.8 | 100% | KEVRansomwarePoC | KEV |
| CVE-2021-31985 | Microsoft Defender Remote Code Execution Vulnerability | 7.8 | 8% |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| md5 | 34560233e751b7e95f155b6f61e7419a | 0599b11241876ada8ae6f07b48f1abe6590c2440004ea4db5becc9 MD5: 34560233e751b7e95f155b6f61e7419a Typical Filename: SAntivirusService.exe Claimed Product: A |
| md5 | 52ed8d8b8f1d37b7db0319a3351f6a16 | c156be56ae65b932ca1d8e431e8f845806d0fc814f40562241fbc4 MD5: 52ed8d8b8f1d37b7db0319a3351f6a16 Typical Filename: smbscanlocal2705.exe Claimed Product: N/A |
| md5 | 8193b63313019b614d5be721c538486b | 4b549eae4447fa20cfe205e8d56beecf43cf14a11bf3e86ae6e8bd MD5: 8193b63313019b614d5be721c538486b Typical Filename: SAService.exe Claimed Product: SAService |
| md5 | 9a4b7b0849a274f6f7ac13c7577daad8 | e188423d31df3ea806272f3daa5eb989e18e9ecf3d94b97b965f8e MD5: 9a4b7b0849a274f6f7ac13c7577daad8 Typical Filename: ww31.exe Claimed Product: N/A Detection N |
| md5 | d04b460018cf958816d35fc122a955df | 875d9bbbde99de2338b76aab46a87b777e3f010f205028d7bf9156 MD5: d04b460018cf958816d35fc122a955df Typical Filename: hd8vct.exe Claimed Product: N/A Detection |
| sha256 | 583418f8f4c156be56ae65b932ca1d8e431e8f845806d0fc814f40562241fbc4 | Detection Name: W32.GenericKD:Attribute.24ch.1201 SHA 256: 583418f8f4c156be56ae65b932ca1d8e431e8f845806d0fc814f40562241fbc4 MD5: 52ed8d8b8f1d37b7db0319a3351f6a16 Typical Filename: smb |
| sha256 | 8b4216a7c50599b11241876ada8ae6f07b48f1abe6590c2440004ea4db5becc9 | N/A Detection Name: W32.Auto:583418f8f4.in03.Talos SHA 256: 8b4216a7c50599b11241876ada8ae6f07b48f1abe6590c2440004ea4db5becc9 MD5: 34560233e751b7e95f155b6f61e7419a Typical Filename: SAn |
| sha256 | c1d5a585fce188423d31df3ea806272f3daa5eb989e18e9ecf3d94b97b965f8e | 5 and 57736 Most prevalent malware files this week SHA 256: c1d5a585fce188423d31df3ea806272f3daa5eb989e18e9ecf3d94b97b965f8e MD5: 9a4b7b0849a274f6f7ac13c7577daad8 Typical Filename: ww3 |
| sha256 | d8ccc7b34c875d9bbbde99de2338b76aab46a87b777e3f010f205028d7bf9156 | c e Detection Name: PUA.Win.Dropper.Segurazo::tpd SHA 256: d8ccc7b34c875d9bbbde99de2338b76aab46a87b777e3f010f205028d7bf9156 MD5: d04b460018cf958816d35fc122a955df Typical Filename: hd8 |
| sha256 | e3eeaee0af4b549eae4447fa20cfe205e8d56beecf43cf14a11bf3e86ae6e8bd | N/A Detection Name: W32.Auto:d8ccc7b34c.in03.Talos SHA 256: e3eeaee0af4b549eae4447fa20cfe205e8d56beecf43cf14a11bf3e86ae6e8bd MD5: 8193b63313019b614d5be721c538486b Typical Filename: SAS |
From the original article
4 min read at blog.talosintelligence.com
We seriously can't escape from ransomware. It's in the headlines constantly and has now drawn the full attention of the federal government. But we at Talos recognize that is going to take far more than just words to address this global threat.
blog.talosintelligence.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.