Threat Source newsletter (Nov. 11, 2021)
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2021-42292 | Security Feature Bypass in Microsoft Excel Enables Arbitrary Code Execution | 7.8 | 43% | KEV | KEV |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| md5 | 34560233e751b7e95f155b6f61e7419a | 0599b11241876ada8ae6f07b48f1abe6590c2440004ea4db5becc9 MD5: 34560233e751b7e95f155b6f61e7419a Typical Filename: SAntivirusService.exe Claimed Product: A |
| md5 | 6ea750c9d69b7db6532d90ac0960e212 | f8ea3090c2460a5f7d92a5a49e7fa040bf26659ec2f7c442dda762 MD5: 6ea750c9d69b7db6532d90ac0960e212 VirusTotal: Typical Filename: deps.zip Claimed Product: N/A |
| md5 | a6a7eb61172f8d988e47322ebf27bf6d | da90f37b821e4803912c5b351fda417bbf0a9c768b715c6d492e13 MD5: a6a7eb61172f8d988e47322ebf27bf6d Typical Filename: wx.exe Claimed Product: N/A Detection Nam |
| md5 | ee62e8f42ed70e717b2571c372e9de9a | 2f3bade35e03b6b0554a80b1563f2c167d9064263845653d912ec6 MD5: ee62e8f42ed70e717b2571c372e9de9a Typical Filename: lHe Claimed Product: N/A Detection Name: |
| md5 | fdcdb2db7d4f9cb8b463ea2e8272d175 | c9e4b829ef0cc0049eecdfae3655f87a1e79620bbcc39eb8c21c8b MD5: fdcdb2db7d4f9cb8b463ea2e8272d175 Typical Filename: javarx2.dat Claimed Product: N/A Detectio |
| sha256 | 1487f122c92f3bade35e03b6b0554a80b1563f2c167d9064263845653d912ec6 | c e Detection Name: PUA.Win.Dropper.Segurazo::tpd SHA 256: 1487f122c92f3bade35e03b6b0554a80b1563f2c167d9064263845653d912ec6 MD5: ee62e8f42ed70e717b2571c372e9de9a Typical Filename: lHe |
| sha256 | 4d47791970c9e4b829ef0cc0049eecdfae3655f87a1e79620bbcc39eb8c21c8b | Detection Name: Auto.E5044D5AC2.242358.in07.Talos SHA 256: 4d47791970c9e4b829ef0cc0049eecdfae3655f87a1e79620bbcc39eb8c21c8b MD5: fdcdb2db7d4f9cb8b463ea2e8272d175 Typical Filename: jav |
| sha256 | 5bab2ae1cada90f37b821e4803912c5b351fda417bbf0a9c768b715c6d492e13 | 430 - 58433 Most prevalent malware files this week SHA 256: 5bab2ae1cada90f37b821e4803912c5b351fda417bbf0a9c768b715c6d492e13 MD5: a6a7eb61172f8d988e47322ebf27bf6d Typical Filename: wx. |
| sha256 | 8b4216a7c50599b11241876ada8ae6f07b48f1abe6590c2440004ea4db5becc9 | Detection Name: Auto.4D47791970.232152.in07.Talos SHA 256: 8b4216a7c50599b11241876ada8ae6f07b48f1abe6590c2440004ea4db5becc9 MD5: 34560233e751b7e95f155b6f61e7419a Typical Filename: SAn |
| sha256 | e5044d5ac2f8ea3090c2460a5f7d92a5a49e7fa040bf26659ec2f7c442dda762 | N/A Detection Name: Win.Dropper.Wingo::in07.talos SHA 256: e5044d5ac2f8ea3090c2460a5f7d92a5a49e7fa040bf26659ec2f7c442dda762 MD5: 6ea750c9d69b7db6532d90ac0960e212 VirusTotal: Typical F |
From the original article
4 min read at blog.talosintelligence.com
It's important to be proactive, and not reactive, with your security. It's always better to see the worst coming and block it than have to scramble to deal with the worst-case scenario in the moment. That's why it's so important to have a polished Incident Response Plan that's tested and proven.
blog.talosintelligence.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.