I found the SALTWATER sample from the #Barracuda ESG report on CVE-2023-2868 on VT The funny thing is: s/o appended a 0x00 so that it got a different hash (not the one from the IOC list) PS: I don't have the orig file. I found out by removing 1 byte. https://t.co/Sz3p4dAyYN https://t.co/blpUQ71bbS
— Florian Roth (@cyb3rops) Jun 8, 2023
from Twitter https://twitter.com/cyb3rops
June 08, 2023 at 04:39AM
via IFTTT
I found the SALTWATER sample from the #Barracuda ESG report on CVE-2023-2868 on VT The funny thing is: s/o appended a 0x00 so that it got a different hash (not the one from the IOC list) PS: I don't have the orig file. I found out by removing 1 byte. https://t.co/Sz3p4dAyYN https://t.co/blpUQ71bbS
cyb3rops
https://twitter.com/cyb3rops/status/1666726658806521857
https://t.co/Sz3p4dAyYN
