Threat Source Newsletter (Jan. 13, 2022)
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2022-21837 | Microsoft SharePoint Server Remote Code Execution Vulnerability | 8.8 | 3% | ||
| CVE-2022-21840 | Microsoft Office Remote Code Execution Vulnerability | 8.8 | 3% | ||
| CVE-2022-21841 | Microsoft Excel Remote Code Execution Vulnerability | 7.8 | 3% | ||
| CVE-2022-21842 | Microsoft Word Remote Code Execution Vulnerability | 7.8 | 2% |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| md5 | 34560233e751b7e95f155b6f61e7419a | 0599b11241876ada8ae6f07b48f1abe6590c2440004ea4db5becc9 MD5: 34560233e751b7e95f155b6f61e7419a Typical Filename: SAntivirusService.exe Claimed Product: A |
| md5 | 8193b63313019b614d5be721c538486b | 4b549eae4447fa20cfe205e8d56beecf43cf14a11bf3e86ae6e8bd MD5: 8193b63313019b614d5be721c538486b Typical Filename: SAService.exe Claimed Product: SAService |
| md5 | a5e345518e6817f72c9b409915741689 | bb4579feb56748082a32239a433cea619c09f827fd6df805707f37 MD5: a5e345518e6817f72c9b409915741689 Typical Filename: swupdater.exe Claimed Product: Wavesor SW |
| md5 | cbd421ed5799f498e42ec6c598dc0aef | 5b79ede6fe39e9ee8a8a8b2d04b71b859fe6e7a0ee583a7b832f43 MD5: cbd421ed5799f498e42ec6c598dc0aef Typical Filename: N/A Claimed Product: N/A Detection Name: |
| md5 | fe3659119e683e1aa07b2346c1f215af | d55c45808f2fa8a5b398b0de18e5dd57af00265e42c822fb6938e2 MD5: fe3659119e683e1aa07b2346c1f215af Typical Filename: SqlServerWorks.Runner.exe Claimed Product |
| sha256 | 0fa5cf65905b79ede6fe39e9ee8a8a8b2d04b71b859fe6e7a0ee583a7b832f43 | c e Detection Name: PUA.Win.Dropper.Segurazo::tpd SHA 256: 0fa5cf65905b79ede6fe39e9ee8a8a8b2d04b71b859fe6e7a0ee583a7b832f43 MD5: cbd421ed5799f498e42ec6c598dc0aef Typical Filename: N/A |
| sha256 | 1b259d8ca9bb4579feb56748082a32239a433cea619c09f827fd6df805707f37 | 013 - 58017 Most prevalent malware files this week SHA 256: 1b259d8ca9bb4579feb56748082a32239a433cea619c09f827fd6df805707f37 MD5: a5e345518e6817f72c9b409915741689 Typical Filename: swu |
| sha256 | 8639fd3ef8d55c45808f2fa8a5b398b0de18e5dd57af00265e42c822fb6938e2 | etection Name: PUA.Win.Dropper.Segurazo::95.sbx.tg SHA 256: 8639fd3ef8d55c45808f2fa8a5b398b0de18e5dd57af00265e42c822fb6938e2 MD5: fe3659119e683e1aa07b2346c1f215af Typical Filename: Sql |
| sha256 | 8b4216a7c50599b11241876ada8ae6f07b48f1abe6590c2440004ea4db5becc9 | r Detection Name: W32.1B259D8CA9.Wavesor.SSO.Talos SHA 256: 8b4216a7c50599b11241876ada8ae6f07b48f1abe6590c2440004ea4db5becc9 MD5: 34560233e751b7e95f155b6f61e7419a Typical Filename: SAn |
| sha256 | e3eeaee0af4b549eae4447fa20cfe205e8d56beecf43cf14a11bf3e86ae6e8bd | N/A Detection Name: W32.Auto:0fa5cf6590.in03.Talos SHA 256: e3eeaee0af4b549eae4447fa20cfe205e8d56beecf43cf14a11bf3e86ae6e8bd MD5: 8193b63313019b614d5be721c538486b Typical Filename: SAS |
From the original article
4 min read at blog.talosintelligence.com
Move out of the way, Log4j! Traditional malware is back with a bang in 2022. While Log4j is likely still occupying many defenders' minds, the bad guys are still out there doing not-Log4j things.
blog.talosintelligence.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.