Security Affairs

MAY 3, 2020

In other words, it could be nice to see what are the patterns used by malware in both: domain names, file names and process names. TOP domains, TOP processes and TOP File Names. I am a computer security scientist with an intensive hacking background. About the author: Marco Ramilli, Founder of Yoroi.

Computer and Electronics 95

Computer and Electronics File names Cybersecurity IT 95

Security Affairs

NOVEMBER 16, 2018

The script downloads a file named: AZZI.exe and saves it by a new name: VRE1wEh9j0mvUATIN3AqW1HSNnyir8id.exe on a System temporary directory for running it. In other words Stage 3 reads an image placed under the internal resource of PE File, extracts and executes it. The final payload looks like AzoRult Malware.

Computer and Electronics 98

Computer and Electronics File names Security IT 98

DLA Piper Privacy Matters

MARCH 20, 2023

As a reminder, in 2022, the CNIL priority topics were (i) direct marketing (ii) monitoring telework and (iii) the use of cloud computing (see our previous post ). This decision comes from several claims filed with CNIL for unauthorized access by third parties to patient records held by health care institutions.

Computer and Electronics 52

Computer and Electronics IT File names Access 52

Security Affairs

AUGUST 20, 2018

During the analysis time, only really few Antivirus (6 out of 60) were able to “detect” the sample. The execution of such a command drops on local HardDrive (AppData-Local-Temp) three new files named: RetrieveRandomNumber.vbs (2x) and RandomName.reg. On Final Stage VBS Run Files. reg) analysis program.

Computer and Electronics 62

Computer and Electronics Encryption Security File names 62

Security Affairs

MAY 2, 2019

Indeed we might observe a File-based command and control (a quite unusual solution) structure, a VBS launcher, a PowerShell Payload and a covert channel over DNS engine. But let’s move on and start a quick analysis on it. The command and control is implemented by a standalone.NET application working through files.

Computer and Electronics 85

Computer and Electronics Communications Government File names 85

Security Affairs

AUGUST 31, 2018

Today I’d like to share a full path analysis including a KickBack attack which took me to gain full access to an entire Ursniff/Gozi botnet. My entire “Cyber adventure” began with a simple email within a.ZIP file named “Nuovo Documento1.zip” SEAAppDataLocalTemp/rEOuvWkRP.exe.

Computer and Electronics 54

Computer and Electronics File names Security Access 54