Skip to content
NewA calmer, faster ZeroHour

Threat Source newsletter for Sept. 10, 2020

Cisco Talos ()4 min read3 · 1 read
Analyze CVE-2020-0922 with Vani AIImpact, affected versions, exploitation, mitigations and detection

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2020-0922
A remote code execution vulnerability exists in the way that Microsoft COM for Windows handles objects in memory
8.85%

Indicators of compromise

auto-extracted · verify before use · export allAll
TypeIndicatorContext
md573d1de319c7d61e0333471c82f2fc1047e1b9d6bdc021778c5129edfb9cf7e330b8f07bb140dedb5c9aae7 MD5: 73d1de319c7d61e0333471c82f2fc104 Typical Filename: SAntivirusService.exe Claimed Product: A
md5799b30f47060ca05d80ece53866e01cc56637a3be3d6c5ac91266142266a9910f6f3f85cfd193ec1d6ed8b MD5: 799b30f47060ca05d80ece53866e01cc Typical Filename: mf2016341595.exe Claimed Product: N/A Det
md58193b63313019b614d5be721c538486b4b549eae4447fa20cfe205e8d56beecf43cf14a11bf3e86ae6e8bd MD5: 8193b63313019b614d5be721c538486b Typical Filename: SAService.exe Claimed Product: SAService
md5adad179db8c67696ac24e9e11da2d075bd77a21a806d17cf163ba00ce1a70f8b6af197990aa9924356fd36 MD5: adad179db8c67696ac24e9e11da2d075 Typical Filename: FlashHelperServices.exe Claimed Product:
md5e2ea315d9a83e7577053f52c974f6a5a5583b47322b6649ddc0dab1b64bcf22b124a492606763c52fb048f MD5: e2ea315d9a83e7577053f52c974f6a5a Typical Filename: Tempmf582901854.exe Claimed Product: N/A
sha25615716598f456637a3be3d6c5ac91266142266a9910f6f3f85cfd193ec1d6ed8bt: N/A Detection Name: Win.Dropper.Agentwdcr::1201 SHA 256: 15716598f456637a3be3d6c5ac91266142266a9910f6f3f85cfd193ec1d6ed8b MD5: 799b30f47060ca05d80ece53866e01cc Typical Filename: mf2
sha25632155b070c7e1b9d6bdc021778c5129edfb9cf7e330b8f07bb140dedb5c9aae7ervice Detection Name: W32.7F9446709F-100.SBX.VIOC SHA 256: 32155b070c7e1b9d6bdc021778c5129edfb9cf7e330b8f07bb140dedb5c9aae7 MD5: 73d1de319c7d61e0333471c82f2fc104 Typical Filename: SAn
sha2567f9446709fbd77a21a806d17cf163ba00ce1a70f8b6af197990aa9924356fd364920, 54921 Most prevalent malware files this week SHA 256: 7f9446709fbd77a21a806d17cf163ba00ce1a70f8b6af197990aa9924356fd36 MD5: adad179db8c67696ac24e9e11da2d075 Typical Filename: Fla
sha256c3e530cc005583b47322b6649ddc0dab1b64bcf22b124a492606763c52fb048fv i c e Detection Name: Win.Dropper.Segurazo::tpd SHA 256: c3e530cc005583b47322b6649ddc0dab1b64bcf22b124a492606763c52fb048f MD5: e2ea315d9a83e7577053f52c974f6a5a Typical Filename: Tem
sha256e3eeaee0af4b549eae4447fa20cfe205e8d56beecf43cf14a11bf3e86ae6e8bd: N/A Detection Name: Win.Downloader.Generic::1201 SHA 256: e3eeaee0af4b549eae4447fa20cfe205e8d56beecf43cf14a11bf3e86ae6e8bd MD5: 8193b63313019b614d5be721c538486b Typical Filename: SAS

From the original article

4 min read at blog.talosintelligence.com

In our continued research on election security, we have a new video roundtable discussion up on our YouTube page . In this Q&A-style format, I ask our researchers questions about the work they’ve done researching disinformation (aka “fake news”) and how to combat the spread of it. Microsoft Patch Tuesday was also this week.

Cisco Talos

blog.talosintelligence.com

Read the full article at Cisco Talos

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.