Top Tweets for #ataware
Excel 4.0 Macro, hta, VBScript & PowerShell Analysis Ataware Ransomware – Part 0x1
https://t.co/zX7hRZz39x
#InfoSec #CyberSecurity #Ataware #Ransomware #Malware
Unique Infection vector from Excel 4.0 Macro to #Ataware #Ransomware series using #Ghidra #Sysmon
Analysis steps for #hta #VBScript & #PowerShell
https://t.co/grayfXFmxD
UAC bypass using CMSTPLUA COM
https://t.co/pWJwd1a7tY
ParentPID Spoofing
https://t.co/4OIus6aHTL
#Malware
Feeling the good kind of tired tonight after a successful first #techforgood roadshow where our staff had the opportunity to become more #ataware and help transform the lives of the people we support. Bring on #Hampshire tomorrow!
Parent PID Spoofing (Stage 2) #Ataware #Ransomware Part 3
https://t.co/4OIus6aHTL
Using the same technique mentioned in @DidierStevens blog in 2009 😀
Analysis using #Ghidra & #Sysmon
UAC bypass analysis (Stage 1) #Ataware #Ransomware Part 2 using #Ghidra & #Sysmon https://t.co/pWJwd1a7tY
Malware author using UAC bypass CMSTPLUA COM interface technique/code from https://t.co/2XPF7oD2dZ
cc @hFireF0X @nik_seetharaman
Unique Infection vector
xls -> Excel 4.0 -> mshta -> Dropbox url -> hta -> VBScript -> PowerShell -> Dropbox url -> exe
New blog post : Excel 4.0 Macro, hta, #VBScript & #PowerShell Analysis – #Ataware #Ransomware Part 1
https://t.co/grayfXFmxD
#Deobfuscate #MalwareAnalysis
New article in Digest: #Ataware #Ransomware
https://t.co/nNhkLgc5Fn
For AtawareCat, a picture with Canadian money was used.
Thanks to @GrujaRS @demonslay335
Requires an addition for sample, that encrypts files. Give me, if you have it.
Learned something new in #GHIDRA while analysing #Ataware #Ransomware, to fix decompiled code use Retype Variable, check this GIF. Thanks to @ghidraninja for Youtube videos
#Ataware Interesting #Ransomware
https://t.co/vKfWjQdGyy
1. Unique #WMIPersistence, check https://t.co/w8beOTuQxe
2. Hardcoded pwd for spreading uses WNetAddConnection2W/CreateServiceA
3. Extension include popular language
https://t.co/sINzfkgwEq
cc @nao_sec @demonslay335
@nao_sec Definitely #Ransomware looks to be new variant #Ataware
Encrypt the file with extension #ATANUR
CC: @demonslay335
#ATAWARE #Ransomware probably fake,at this time does not encrypt!Sample VT 0/70 https://t.co/Y6QhgP3Nj9 @BleepinComputer @demonslay335 @JAMESWT_MHT
As seen at the airport. The legacy continues! #ata59 #ataware #awareness #translatorsrock #interpretersrock
@NATA1950 2017 annual report is out and @NWATAd10 has the fewest members in the nation. Let's change this and get #ATaware #AT4Oregon #AT4All
Tomorrow is Concussion Awareness Day 2017 in NJ! We created a flyer for #ATs to put up in their athletic training facility! #concussions
Last Seen Hashtags on Sotwe
eskisehirbağlar
Seen from Turkey
moan colmek
Seen from Indonesia
完美露脸
Seen from Netherlands
baitedboys
Seen from United States
naturelover
Seen from United States
nolimit nolimit()*** +filter:native_video
Seen from Canada
korean sex scene
Seen from Turkey
Madura
Seen from Mexico
ReReina
Seen from Brazil
nolimit()********
Seen from Algeria
Most Popular Users
Elon Musk 
@elonmusk
240.8M followers
Barack Obama
@barackobama
119.2M followers
Donald J. Trump
@realdonaldtrump
111.7M followers
Cristiano Ronaldo
@cristiano
111.2M followers
Narendra Modi
@narendramodi
107M followers
Rihanna
@rihanna
97.8M followers
NASA
@nasa
92.2M followers
Justin Bieber
@justinbieber
91M followers
KATY PERRY
@katyperry
88M followers
Taylor Swift
@taylorswift13
81.8M followers
Lady Gaga
@ladygaga
73.4M followers
Virat Kohli
@imvkohli
70.4M followers
Kim Kardashian
@kimkardashian
69.9M followers
YouTube
@youtube
68.7M followers
Bill Gates
@billgates
64.1M followers
Neymar Jr
@neymarjr
63.2M followers
The Ellen Show
@theellenshow
62.4M followers
CNN
@cnn
61.9M followers
Selena Gomez
@selenagomez
61.1M followers
X
@x
60.8M followers