AlienVault

OCTOBER 29, 2018

During the execution of sogou.exe, the following exploits are used to install on new victims’ PCs: CVE-2017-9073, RDP vulnerability on Windows XP and Windows Server 2003. CVE-2017-0143, SMB exploit. CVE-2017-0146, SMB exploit. Installation. Mask.exe ends up on a victim’s computer after either x86.dll

Malware 40

Malware Windows IPv6 Analysis 40

AlienVault

SEPTEMBER 24, 2018

2018 seems to be a time for highly profitable cryptominers that spread over SMB file-shares. Depending on the victim’s architecture, obtained from CPUInfo.exe, either x86.dll dll are virtually identical just one is specifically for x86-x64 OS architecture and one is specifically for x86 OS architecture. dll or x64.dll

Malware 40

Malware SMB .Net Architecture 40

Linux Academy

MAY 15, 2020

This article will give you the full lowdown on Windows Containers, to prepare you to do just that. Why Windows? First, I want to acknowledge that there is a big difference between Linux and Windows containers. So why do we even need Windows containers? Each running container is isolated inside a Hyper-V VM.

Windows 129

Windows Linux Azure SMB 129

AlienVault

JULY 18, 2018

ZombieBoy makes use of several exploits during execution: CVE-2017-9073, RDP vulnerability on Windows XP and Windows Server 2003. CVE-2017-0143, SMB exploit. CVE-2017-0146, SMB exploit. exe uses the DoublePulsar exploit to install both a SMB backdoor as well as an RDP backdoor. Installation. In addition, 64.exe

Malware 40

Malware SMB Analysis System 40

CTOvision

AUGUST 4, 2014

Extends Platform Coverage to Windows 8.1 releases as part of the Invincea platform focus specifically on the enterprise need for rapid adoption and ongoing management of large-scale Invincea deployments, including coverage for Microsoft’s recent Windows and Office product suites. . – bg. From Invincea. The FreeSpace 4.0

Security 102

Security Enterprise Windows Malware 102