Top Tweets for #Trashtics

Bryce @bryceabdo

almost 6 years ago

@malwrhunterteam @kaspersky #trashtics

Silv0123 @silv0123

over 6 years ago

#APT34 #OilRig #APT #ThreatIntel #TRASHTICS 7a5037f6e8c9788ebc3e8a093df2b979 Recently uploaded ALMA Communicator sample

Silv0123 @silv0123

over 6 years ago

I managed not to refer to this as #TRASHTICS, it was obviously #GOODTACTICS but could've been better looking lure weaponized excel sheets

Steve YARA Synapse Miller @stvemillertime

over 6 years ago

Malware developers, being humans and entirely predictable, are prone to glom onto memes like random case for no good reason. If you see anything like this, you're better off calling it malicious and moving on. hKEy_LOcAl_MaChiNE #trashtics

Silv0123 @silv0123

over 6 years ago

#TRASHTICS #APT34 #OILRIG modified samples with JPEG headers 1485dc1d355eb3d32a26836b9c558247 e08222618ad04b7ac11ac34d7cd64337 Seriously what the hell?!

Jimmy Vo @JimmyVo

over 6 years ago

@sherrod_im #trashtics as @QW5kcmV3 would say

DW @DaveWestgard

over 6 years ago

@stvemillertime I'll donate $25 to @RuralTechFund if one of your speakers mentions #trashtics on stage.

Nick Carr

@ItsReallyNick

almost 7 years ago

@QW5kcmV3 I love all #trashtics but the most memorable are those that actively help defenders. For example, when an operator installs a keylogger writing all keystrokes to an encrypted local file then proceeds to use that system as their foothold to facilitate the full intrusion. 🙏

Silv0123 @silv0123

almost 7 years ago

#APT #APT34 #OilRig #trashtics recently uploaded old weaponized document 80bbc4f18393994e2e5e049c41bce28b C2: withyourface.\com Port: 53/udp (DNS) similar to BONDUPDATER mentioned in https://t.co/RnCMSngQaf

Silv0123 @silv0123

almost 7 years ago

#APT #APT39 #CHAFER #TRASHTICS #ThreatIntel 5aee0c0a06ea91102649bed484c88147 The lost temporary base64 encoded file of POWBAT for over 2 years, surprised no one mentioned it 😅 possibly targeting Qatar at that time, go and write some YARA rules folks!

SwitHak (👁)

@SwitHak

almost 7 years ago

@QW5kcmV3 #trashtics explained

Silv0123 @silv0123

almost 7 years ago

@QW5kcmV3 Nice catch TLS issued for: chrome.microsift[.]net, microsift[.]net, update.microsift[.]net I smell an Iranian rat with the free Let's Encrypt certificate #TRASHTICS

Silv0123 @silv0123

almost 7 years ago

#CHAFER #APT39 #TRASHTICS Quite old sample with unique ID MD5: 7b16fc361b8e5092a6de246c5de3a37e MD5: 9bd9a775ef26d8f4983a431b6eb3fcd7 C2: yjksdrl[.]tk Dropped files: %LOCALAPPDATA%\Microsoft\Windows\L69742.vbs %LOCALAPPDATA%\Microsoft\Windows\mc.ps1 Task: GoogleServiceUpdate

$silv0123's tweet photo. #CHAFER #APT39 #TRASHTICS Quite old sample with unique ID MD5: 7b16fc361b8e5092a6de246c5de3a37e MD5: 9bd9a775ef26d8f4983a431b6eb3fcd7 C2: yjksdrl[.]tk Dropped files: %LOCALAPPDATA%\Microsoft\Windows\L69742.vbs %LOCALAPPDATA%\Microsoft\Windows\mc.ps1 Task: GoogleServiceUpdate https://t.co/rcmF4QlorB$

Steve YARA Synapse Miller @stvemillertime

almost 7 years ago

"Use a template, or mimic something legitimate? Nah, I'll write my own HTTP request." #dailypcap #trashtics #asdasdfasf HTTP header anomalies *will* help you find evil, but you might not like what it finds.

stvemillertime's tweet photo. "Use a template, or mimic something legitimate? Nah, I'll write my own HTTP request." #dailypcap #trashtics #asdasdfasf

HTTP header anomalies *will* help you find evil, but you might not like what it finds. https://t.co/AX7SwRpx5Q

Katie Nickels @likethecoins

almost 7 years ago

@DrunkBinary @jfslowik @QW5kcmV3 @ItsReallyNick @matthieu_faou @KevinPerlow @Mao_Ware @cnoanalysis @Dragonkin37 @juanandres_gs So does this count as #trashtics?

Steve YARA Synapse Miller @stvemillertime

about 7 years ago

@ItsReallyNick @VK_Intel @malwrhunterteam There's a binary C2 protocol in amongst some of these samples for you wily #dailypcap enthusiasts to take a look at. Here's some TCP/9919 traffic to r\.pre23sence\.club. #trashtics

$stvemillertime's tweet photo. @ItsReallyNick @VK_Intel @malwrhunterteam There's a binary C2 protocol in amongst some of these samples for you wily #dailypcap enthusiasts to take a look at. Here's some TCP/9919 traffic to r\.pre23sence\.club. #trashtics https://t.co/93BPAqcjKY$

Joe Słowik 🌻 @jfslowik

about 7 years ago

@0xCC_sh Respect for the adversary - even when they screw up or exhibit '#trashtics', they're still a party at the other end to understand and counter.

Joe Słowik 🌻 @jfslowik

over 7 years ago

If it is effective, I wouldn't call it "#trashtics" but still kind of funny when your APT just copies and pastes right out of GitHub: https://t.co/xrZqEVtXyx

Steve YARA Synapse Miller @stvemillertime

over 7 years ago

@reesespcres #adversarymethods &... #trashtics

Thread Reader App

@threadreaderapp

over 7 years ago

@ItsReallyNick Hola the unroll you asked for: Thread by @3dRailForensics: "Although achieved some success targeting the casino and mining industry, @FireEye asn't discussed the actor much […]" #FIN10 #trashtics https://t.co/DZFlHGhKwJ Share this if you think it's interesting. 🤖

Top Tweets for #Trashtics

Last Seen Hashtags on Sotwe

Trends for you

Most Popular Users