Top Tweets for #Ataware
Excel 4.0 Macro, hta, VBScript & PowerShell Analysis Ataware Ransomware β Part 0x1
https://t.co/zX7hRZz39x
#InfoSec #CyberSecurity #Ataware #Ransomware #Malware
Unique Infection vector from Excel 4.0 Macro to #Ataware #Ransomware series using #Ghidra #Sysmon
Analysis steps for #hta #VBScript & #PowerShell
https://t.co/grayfXFmxD
UAC bypass using CMSTPLUA COM
https://t.co/pWJwd1a7tY
ParentPID Spoofing
https://t.co/4OIus6aHTL
#Malware

Feeling the good kind of tired tonight after a successful first #techforgood roadshow where our staff had the opportunity to become more #ataware and help transform the lives of the people we support. Bring on #Hampshire tomorrow!
Parent PID Spoofing (Stage 2) #Ataware #Ransomware Part 3
https://t.co/4OIus6aHTL
Using the same technique mentioned in @DidierStevens blog in 2009 π
Analysis using #Ghidra & #Sysmon

UAC bypass analysis (Stage 1) #Ataware #Ransomware Part 2 using #Ghidra & #Sysmon https://t.co/pWJwd1a7tY
Malware author using UAC bypass CMSTPLUA COM interface technique/code from https://t.co/2XPF7oD2dZ
cc @hFireF0X @nik_seetharaman

Unique Infection vector
xls -> Excel 4.0 -> mshta -> Dropbox url -> hta -> VBScript -> PowerShell -> Dropbox url -> exe
New blog post : Excel 4.0 Macro, hta, #VBScript & #PowerShell Analysis β #Ataware #Ransomware Part 1
https://t.co/grayfXFmxD
#Deobfuscate #MalwareAnalysis

New article in Digest: #Ataware #Ransomware
https://t.co/nNhkLgc5Fn
For AtawareCat, a picture with Canadian money was used.
Thanks to @GrujaRS @demonslay335
Requires an addition for sample, that encrypts files. Give me, if you have it.

Learned something new in #GHIDRA while analysing #Ataware #Ransomware, to fix decompiled code use Retype Variable, check this GIF. Thanks to @ghidraninja for Youtube videos
#Ataware Interesting #Ransomware
https://t.co/vKfWjQdGyy
1. Unique #WMIPersistence, check https://t.co/w8beOTuQxe
2. Hardcoded pwd for spreading uses WNetAddConnection2W/CreateServiceA
3. Extension include popular language
https://t.co/sINzfkgwEq
cc @nao_sec @demonslay335

@nao_sec Definitely #Ransomware looks to be new variant #Ataware
Encrypt the file with extension #ATANUR
CC: @demonslay335

#ATAWARE #Ransomware probably fake,at this time does not encrypt!Sample VT 0/70 https://t.co/Y6QhgP3Nj9 @BleepinComputer @demonslay335 @JAMESWT_MHT

As seen at the airport. The legacy continues! #ata59 #ataware #awareness #translatorsrock #interpretersrock

@NATA1950 2017 annual report is out and @NWATAd10 has the fewest members in the nation. Let's change this and get #ATaware #AT4Oregon #AT4All

Tomorrow is Concussion Awareness Day 2017 in NJ! We created a flyer for #ATs to put up in their athletic training facility! #concussions

Last Seen Hashtags on Sotwe
Trends for you
Most Popular Users

Elon Musk 
@elonmusk
240.8M followers

Barack Obama 
@barackobama
119.2M followers

Donald J. Trump 
@realdonaldtrump
111.7M followers

Cristiano Ronaldo 
@cristiano
111.2M followers

Narendra Modi 
@narendramodi
107M followers

Rihanna 
@rihanna
97.8M followers

NASA 
@nasa
92.2M followers

Justin Bieber 
@justinbieber
91M followers

KATY PERRY 
@katyperry
88M followers

Taylor Swift 
@taylorswift13
81.8M followers

Lady Gaga 
@ladygaga
73.3M followers

Virat Kohli 
@imvkohli
70.4M followers

Kim Kardashian 
@kimkardashian
69.9M followers

YouTube 
@youtube
68.7M followers

Bill Gates 
@billgates
64.1M followers

Neymar Jr 
@neymarjr
63.2M followers

The Ellen Show
@theellenshow
62.4M followers

CNN 
@cnn
61.9M followers

Selena Gomez 
@selenagomez
61M followers

X 
@x
60.8M followers





























