May 8, 2025
Proactive Defense: The Importance of Incident Response Planning in Cybersecurity
Rewterz Threat Advisory – CVE-2022-24099 – Adobe Photoshop Font Parsing Out-Of-Bounds Read Vulnerability
May 10, 2022Rewterz Threat Alert – APT Machete (APT-C-43) – Active IOCs
May 10, 2022Rewterz Threat Advisory – CVE-2022-24099 – Adobe Photoshop Font Parsing Out-Of-Bounds Read Vulnerability
May 10, 2022Rewterz Threat Alert – APT Machete (APT-C-43) – Active IOCs
May 10, 2022
Severity
Medium
Analysis Summary
AveMaria RAT is a remote access trojan that targets Windows systems that provides the capability to gain unauthorized access to a victim’s PC or allow covert surveillance of it. It acts as a keylogger, can steal passwords, escalate privileges, and much more. AveMaria, like most malware, first arrives at systems as a result of phishing mails (as invoices and shipping orders), but is also available on the dark web for subscriptions.
Impact
- Unauthorized Access
Indicators of Compromise
MD5
- 3955f7531a1a620ea15710393cb4dae8
SHA-256
- a9152a5198fb6d6fbf38b7d6d941c5300cc6e23117c146caccc28d4274f15699
SHA-1
- 34f3cf095eab9046b13b215eee24e1d5f53eb9bb
Remediation
- Block all threat indicators at your respective controls.
- Search for IOCs in your environment.
