1 Summary 2 Ransomware Binary Analysis 2.1 Configuration Format 2.2 Encryption Management Routine 2.3 File Enumeration Routine 2.4 File Processing 2.5 Stopping Services 2.6 Encryption File Extension 2.7 Victim Fingerprinting 3 Case Analysis 3.1 Case 1 – Exploitation of ActiveMQ for SparkRAT Deployment (Windows) 3.2 Case 2 – Exploitation of ActiveMQ for Ransomware (Windows) 3.3 … TellMeTheTruth: Exploitation of CVE-2023-46604 Leading to Ransomware
Article Link: TellMeTheTruth: Exploitation of CVE-2023-46604 Leading to Ransomware - Arctic Wolf