Ransomwarecritical
It’s apparently hip to still be using Windows 7
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2023-27930 | A type confusion issue was addressed with improved checks | 7.8 | <1% | ||
CVE-2023-32373+2 related CVEs | WebKit Use-After-Free Zero-Day in Apple iOS, Safari, macOS Enables Code Execution | 8.8 group max | 12% | KEV | KEV |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| md5 | 3e10a74a7613d1cae4b9749d7ec93515 | 40b49096e2f8f78d646891b45c649473a5b67b8beddac46ad398e1 MD5: 3e10a74a7613d1cae4b9749d7ec93515 Typical Filename: IMG001.exe Claimed Product: N/A Detection |
| md5 | 93fefc3e88ffb78abb36365fa5cf857c | 81591e9bff5117946defbef6041397e56164f485cf8ec57b1d8934 MD5: 93fefc3e88ffb78abb36365fa5cf857c Typical Filename: Wextract Claimed Product: Internet Explor |
| md5 | a087b2e6ec57b08c0d0750c60f96a74c | e7e4da97a0ff8e1a0d4840c882569d47b8fab8fb187ac2b475636c MD5: a087b2e6ec57b08c0d0750c60f96a74c Typical Filename: AAct.exe Claimed Product: N/A Detection N |
| md5 | c720ac483a5752c2b69945a8ad673162 | 153722ebd3f389197d4b6482f8afb2e51345e1ab19760c486c3f78 MD5: c720ac483a5752c2b69945a8ad673162 Typical Filename: DOC001.exe Claimed Product: N/A Detection |
| md5 | d47fa115154927113b05bd3c8a308201 | cc1fc8e48e849ca9717c0700ef7ce2265511276f7015d7037d8725 MD5: d47fa115154927113b05bd3c8a308201 Typical Filename: mssqlsrv.exe Claimed Product: N/A Detecti |
| sha256 | 00ab15b194cc1fc8e48e849ca9717c0700ef7ce2265511276f7015d7037d8725 | t: N/A Detection Name: Win.Dropper.Coinminer::1201 SHA 256: 00ab15b194cc1fc8e48e849ca9717c0700ef7ce2265511276f7015d7037d8725 MD5: d47fa115154927113b05bd3c8a308201 Typical Filename: mss |
| sha256 | 5616b94f1a40b49096e2f8f78d646891b45c649473a5b67b8beddac46ad398e1 | ion Name: PUA.Win.Trojan.Generic::85.lp.ret.sbx.tg SHA 256: 5616b94f1a40b49096e2f8f78d646891b45c649473a5b67b8beddac46ad398e1 MD5: 3e10a74a7613d1cae4b9749d7ec93515 Typical Filename: IMG |
| sha256 | 856777e16c153722ebd3f389197d4b6482f8afb2e51345e1ab19760c486c3f78 | ware files from Talos telemetry over the past week SHA 256: 856777e16c153722ebd3f389197d4b6482f8afb2e51345e1ab19760c486c3f78 MD5: c720ac483a5752c2b69945a8ad673162 Typical Filename: DOC |
| sha256 | e12b6641d7e7e4da97a0ff8e1a0d4840c882569d47b8fab8fb187ac2b475636c | uct: N/A Detection Name: Trojan.GenericKD.65065311 SHA 256: e12b6641d7e7e4da97a0ff8e1a0d4840c882569d47b8fab8fb187ac2b475636c MD5: a087b2e6ec57b08c0d0750c60f96a74c Typical Filename: AAc |
| sha256 | e4973db44081591e9bff5117946defbef6041397e56164f485cf8ec57b1d8934 | ion Name: DeepScan:Generic.BitcoinMiner.9.88FBC400 SHA 256: e4973db44081591e9bff5117946defbef6041397e56164f485cf8ec57b1d8934 MD5: 93fefc3e88ffb78abb36365fa5cf857c Typical Filename: Wex |
From the original article
6 min read at blog.talosintelligence.com
Welcome to this week’s edition of the Threat Source newsletter. As a longtime macOS user, I must admit I’m behind the times when it comes to Microsoft Windows. Since buying a Steam Deck, I’ve actually come to learn more about Linux and the Proton compatibility layer than I ever did about Windows.
blog.talosintelligence.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.