Threat Source newsletter for Aug. 13, 2020
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2020-1492+4 related CVEs | A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory | 7.8 group max | 3% |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| md5 | 34560233e751b7e95f155b6f61e7419a | 0599b11241876ada8ae6f07b48f1abe6590c2440004ea4db5becc9 MD5: 34560233e751b7e95f155b6f61e7419a Typical Filename: SAService.exe Claimed Product: SAService |
| md5 | 47b97de62ae8b2b927542aa5d7f3c858 | da950451668c8333a4958330e96245be1d592fcaa485f4ee4eadb3 MD5: 47b97de62ae8b2b927542aa5d7f3c858 Typical Filename: qmreportupload.exe Claimed Product: qmrep |
| md5 | 799b30f47060ca05d80ece53866e01cc | 56637a3be3d6c5ac91266142266a9910f6f3f85cfd193ec1d6ed8b MD5: 799b30f47060ca05d80ece53866e01cc Typical Filename: mf2016341595.exe Claimed Product: N/A Det |
| md5 | 8c80dd97c37525927c1e549cb59bcbf3 | be5100c170b777e1647ce9f0f01e3ab9742dfc23f37cb0825b30b5 MD5: 8c80dd97c37525927c1e549cb59bcbf3 Typical Filename: Eter.exe Claimed Product: N/A Detection N |
| sha256 | 15716598f456637a3be3d6c5ac91266142266a9910f6f3f85cfd193ec1d6ed8b | vice Detection Name: PUA.Win.Dropper.Segurazo::tpd SHA 256: 15716598f456637a3be3d6c5ac91266142266a9910f6f3f85cfd193ec1d6ed8b MD5: 799b30f47060ca05d80ece53866e01cc Typical Filename: mf2 |
| sha256 | 3f6e3d8741da950451668c8333a4958330e96245be1d592fcaa485f4ee4eadb3 | e: Win.Exploit.Shadowbrokers::5A5226262.auto.talos SHA 256: 3f6e3d8741da950451668c8333a4958330e96245be1d592fcaa485f4ee4eadb3 MD5: 47b97de62ae8b2b927542aa5d7f3c858 Typical Filename: qmr |
| sha256 | 85b936960fbe5100c170b777e1647ce9f0f01e3ab9742dfc23f37cb0825b30b5 | 698 - 59702 Most prevalent malware files this week SHA 256: 85b936960fbe5100c170b777e1647ce9f0f01e3ab9742dfc23f37cb0825b30b5 MD5: 8c80dd97c37525927c1e549cb59bcbf3 Typical Filename: Ete |
| sha256 | 8b4216a7c50599b11241876ada8ae6f07b48f1abe6590c2440004ea4db5becc9 | oad Detection Name: Win.Trojan.Generic::in10.talos SHA 256: 8b4216a7c50599b11241876ada8ae6f07b48f1abe6590c2440004ea4db5becc9 MD5: 34560233e751b7e95f155b6f61e7419a Typical Filename: SAS |
From the original article
3 min read at blog.talosintelligence.com
It’s really tough to attribute cyber attacks. We know it. You know it.
blog.talosintelligence.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.