Posted by malvuln on Jan 12

Discovery / credits: malvuln – Malvuln.com (c) 2021
Original source:
https://malvuln.com/advisory/9d7be3799594a82bf7056905f501af03.txt
Contact: malvuln13 () gmail com
Media: twitter.com/malvuln

Threat: Backdoor.Win32.Ketch.b
Vulnerability: Remote Stack Buffer Overflow

Description: Makes HTTP GET request for a file “script.dat”, and writes the
server response to temporary file named “watchb.tmp” under c:Windows dir.
At 1032…
Read More – Full Disclosure


By |2021-01-13T04:18:54-05:00January 13th, 2021|