iiinova — where your digital self keeps evolving

Intrinsec

@intrinsec.bsky.social

Notre métier ? Protéger le vôtre ! Management des risques, Évaluation, Cyber Threat Intelligence, Détection, Réponse (CERT), Innovation. Pour en savoir plus, visitez intrinsec.com

Posts Replies Media

Intrinsec @intrinsec.bsky.social · 21/12/2023

SHA1: f004c09428f2f18a145212a9e55eef3615858f9c 7d4a6976c1ece81e01d1f16ac5506266d5210734 Stay tuned for our report on Qakbot's comeback!

100

Intrinsec @intrinsec.bsky.social · 21/12/2023

[CTI insights] The latest Qakbot payload distributed happened to be packed by the Dave crypter. The DLL decrypts a resource containing Dave's encrypted shellcode and executes it! (cf. securityintelligence.com/x-force/tric...)

122

Intrinsec @intrinsec.bsky.social · 18/10/2023

3/ Code analysis of different sample revealed the use of a “morpher”, an advanced tool to evade detection:

Vue graphique d'une fonction d'obfuscation CFF, illustrant le fonctionnement du "morpher".

100

Intrinsec @intrinsec.bsky.social · 18/10/2023

1/ Intrinsec’s CTI team recently published a report on Lumma Stealer, the most active stealer of the last months

Page de couverture du dernier rapport publié par Intrinsec sur le stealer Lumma.

122

Intrinsec @intrinsec.bsky.social · 04/10/2023

The RAR archive contains a legitimate PDF taken from the New Zealand Foreign Affairs & Trade weekly global report of October 2023 which launches an EXE with the same name by leveraging CVE-2023-38831. RAR archive : www.virustotal.com/gui/file/35f... Bumblebee EXE : www.virustotal.com/gui/file/60f...

100

Intrinsec @intrinsec.bsky.social · 04/10/2023

New #Bumblebee campaign leveraging CVE-2023-38831 Botnet ID : is0210 RC4 key : NEW_BLACK C2 : g7qf7ew5c[.]life TTPs : .RAR -> .EXE

111

Intrinsec @intrinsec.bsky.social · 08/09/2023

5/6

100

Intrinsec @intrinsec.bsky.social · 08/09/2023

4/6

100