Posts by Tag

• PowerShell 6
• Yara 6
• .NET 5
• Config Extraction 4
• IDA 4
• IDAPython 3
• Batch 2
• ShellCode 2
• Injection 2
• KrakenKeylogger 2
• AsyncRAT 1
• OneNote 1
• Vidar 1
• C/C++ 1
• BumbleBee 1
• TA579 1
• Gozi 1
• Jscript 1
• ScrubCrypt 1
• Xworm 1
• Threat Intel 1
• LummaC2 1
• PlutoCrypt 1
• CryptoJoker 1
• Threat Hunting 1
• Dorking 1
• URLscan 1
• VirusTotal 1
• URLhaus 1
• UnpackMe 1
• DarkGate 1
• Loader 1
• Delphi 1

PowerShell

Malware Analysis

Kraken - The Deep Sea Lurker Part 1

Part 1 of analyzing the KrakenKeylogger Malware

20 May 2023

5 minute read

Threat Breakdown

PlutoCrypt - A CryptoJoker Ransomware Variant

Pivoting through the execution chain of a CryptoJoker Ransomware copycat

14 Apr 2023

10 minute read

Threat Breakdown

ScrubCrypt - The Rebirth of Jlaive

ScrubCrypt - Uncovering the rebranded Jlaive crypter

19 Mar 2023

8 minute read

Malware Analysis

BumbleBee DocuSign Campaign

Breakdown of a BumbleBee PowerShell Dropper & extracting the config of BumbleBee

04 Mar 2023

6 minute read

Malware Analysis

Vidar Stealer H&M Campaign

Deep Dive analysis of an Vidar Stealer

20 Feb 2023

12 minute read

Malware Analysis

AsyncRAT OneNote Dropper

Deep Dive analysis of an AsyncRAT OneNote Dropper

11 Feb 2023

5 minute read

Back to top ↑

Yara

Threat Breakdown

DarkGate - Threat Breakdown Journey

Shining a Light on the Hidden Tactics and Techniques Employed by DarkGate

06 Aug 2023

11 minute read

Threat Hunting

Kraken - The Deep Sea Lurker Part 2

Part 2 of analyzing the KrakenKeylogger Malware

26 May 2023

5 minute read

Threat Breakdown

PlutoCrypt - A CryptoJoker Ransomware Variant

Pivoting through the execution chain of a CryptoJoker Ransomware copycat

14 Apr 2023

10 minute read

Malware Analysis

LummaC2 - Stealer Features BreakDown

Breakdown of a key features stored in LummaC2 Stealer

09 Apr 2023

9 minute read

Threat Breakdown

Gozi - Italian ShellCode Dance

Breakdown of a recent Gozi trojan Italian targeted campaign

19 Mar 2023

8 minute read

Malware Analysis

Vidar Stealer H&M Campaign

Deep Dive analysis of an Vidar Stealer

20 Feb 2023

12 minute read

Back to top ↑

.NET

Malware Analysis

Kraken - The Deep Sea Lurker Part 1

Part 1 of analyzing the KrakenKeylogger Malware

20 May 2023

5 minute read

Threat Breakdown

PlutoCrypt - A CryptoJoker Ransomware Variant

Pivoting through the execution chain of a CryptoJoker Ransomware copycat

14 Apr 2023

10 minute read

Threat Breakdown

ScrubCrypt - The Rebirth of Jlaive

ScrubCrypt - Uncovering the rebranded Jlaive crypter

19 Mar 2023

8 minute read

Malware Analysis

Vidar Stealer H&M Campaign

Deep Dive analysis of an Vidar Stealer

20 Feb 2023

12 minute read

Malware Analysis

AsyncRAT OneNote Dropper

Deep Dive analysis of an AsyncRAT OneNote Dropper

11 Feb 2023

5 minute read

Back to top ↑

Config Extraction

Malware Analysis

Kraken - The Deep Sea Lurker Part 1

Part 1 of analyzing the KrakenKeylogger Malware

20 May 2023

5 minute read

Threat Breakdown

Gozi - Italian ShellCode Dance

Breakdown of a recent Gozi trojan Italian targeted campaign

19 Mar 2023

8 minute read

Malware Analysis

BumbleBee DocuSign Campaign

Breakdown of a BumbleBee PowerShell Dropper & extracting the config of BumbleBee

04 Mar 2023

6 minute read

Malware Analysis

AsyncRAT OneNote Dropper

Deep Dive analysis of an AsyncRAT OneNote Dropper

11 Feb 2023

5 minute read

Back to top ↑

IDA

Threat Breakdown

DarkGate - Threat Breakdown Journey

Shining a Light on the Hidden Tactics and Techniques Employed by DarkGate

06 Aug 2023

11 minute read

Malware Analysis

LummaC2 - Stealer Features BreakDown

Breakdown of a key features stored in LummaC2 Stealer

09 Apr 2023

9 minute read

Threat Breakdown

Gozi - Italian ShellCode Dance

Breakdown of a recent Gozi trojan Italian targeted campaign

19 Mar 2023

8 minute read

Malware Analysis

Vidar Stealer H&M Campaign

Deep Dive analysis of an Vidar Stealer

20 Feb 2023

12 minute read

Back to top ↑

IDAPython

Threat Breakdown

DarkGate - Threat Breakdown Journey

Shining a Light on the Hidden Tactics and Techniques Employed by DarkGate

06 Aug 2023

11 minute read

Malware Analysis

LummaC2 - Stealer Features BreakDown

Breakdown of a key features stored in LummaC2 Stealer

09 Apr 2023

9 minute read

Malware Analysis

Vidar Stealer H&M Campaign

Deep Dive analysis of an Vidar Stealer

20 Feb 2023

12 minute read

Back to top ↑

Batch

Threat Breakdown

ScrubCrypt - The Rebirth of Jlaive

ScrubCrypt - Uncovering the rebranded Jlaive crypter

19 Mar 2023

8 minute read

Malware Analysis

AsyncRAT OneNote Dropper

Deep Dive analysis of an AsyncRAT OneNote Dropper

11 Feb 2023

5 minute read

Back to top ↑

ShellCode

Threat Breakdown

DarkGate - Threat Breakdown Journey

Shining a Light on the Hidden Tactics and Techniques Employed by DarkGate

06 Aug 2023

11 minute read

Threat Breakdown

Gozi - Italian ShellCode Dance

Breakdown of a recent Gozi trojan Italian targeted campaign

19 Mar 2023

8 minute read

Back to top ↑

Injection

Threat Breakdown

DarkGate - Threat Breakdown Journey

Shining a Light on the Hidden Tactics and Techniques Employed by DarkGate

06 Aug 2023

11 minute read

Threat Breakdown

Gozi - Italian ShellCode Dance

Breakdown of a recent Gozi trojan Italian targeted campaign

19 Mar 2023

8 minute read

Back to top ↑

KrakenKeylogger

Threat Hunting

Kraken - The Deep Sea Lurker Part 2

Part 2 of analyzing the KrakenKeylogger Malware

26 May 2023

5 minute read

Malware Analysis

Kraken - The Deep Sea Lurker Part 1

Part 1 of analyzing the KrakenKeylogger Malware

20 May 2023

5 minute read

Back to top ↑

AsyncRAT

Malware Analysis

AsyncRAT OneNote Dropper

Deep Dive analysis of an AsyncRAT OneNote Dropper

11 Feb 2023

5 minute read

Back to top ↑

OneNote

Malware Analysis

AsyncRAT OneNote Dropper

Deep Dive analysis of an AsyncRAT OneNote Dropper

11 Feb 2023

5 minute read

Back to top ↑

Vidar

Malware Analysis

Vidar Stealer H&M Campaign

Deep Dive analysis of an Vidar Stealer

20 Feb 2023

12 minute read

Back to top ↑

C/C++

Malware Analysis

Vidar Stealer H&M Campaign

Deep Dive analysis of an Vidar Stealer

20 Feb 2023

12 minute read

Back to top ↑

BumbleBee

Malware Analysis

BumbleBee DocuSign Campaign

Breakdown of a BumbleBee PowerShell Dropper & extracting the config of BumbleBee

04 Mar 2023

6 minute read

Back to top ↑

TA579

Malware Analysis

BumbleBee DocuSign Campaign

Breakdown of a BumbleBee PowerShell Dropper & extracting the config of BumbleBee

04 Mar 2023

6 minute read

Back to top ↑

Gozi

Threat Breakdown

Gozi - Italian ShellCode Dance

Breakdown of a recent Gozi trojan Italian targeted campaign

19 Mar 2023

8 minute read

Back to top ↑

Jscript

Threat Breakdown

Gozi - Italian ShellCode Dance

Breakdown of a recent Gozi trojan Italian targeted campaign

19 Mar 2023

8 minute read

Back to top ↑

ScrubCrypt

Threat Breakdown

ScrubCrypt - The Rebirth of Jlaive

ScrubCrypt - Uncovering the rebranded Jlaive crypter

19 Mar 2023

8 minute read

Back to top ↑

Xworm

Threat Breakdown

ScrubCrypt - The Rebirth of Jlaive

ScrubCrypt - Uncovering the rebranded Jlaive crypter

19 Mar 2023

8 minute read

Back to top ↑

Threat Intel

Threat Breakdown

ScrubCrypt - The Rebirth of Jlaive

ScrubCrypt - Uncovering the rebranded Jlaive crypter

19 Mar 2023

8 minute read

Back to top ↑

LummaC2

Malware Analysis

LummaC2 - Stealer Features BreakDown

Breakdown of a key features stored in LummaC2 Stealer

09 Apr 2023

9 minute read

Back to top ↑

PlutoCrypt

Threat Breakdown

PlutoCrypt - A CryptoJoker Ransomware Variant

Pivoting through the execution chain of a CryptoJoker Ransomware copycat

14 Apr 2023

10 minute read

Back to top ↑

CryptoJoker

Threat Breakdown

PlutoCrypt - A CryptoJoker Ransomware Variant

Pivoting through the execution chain of a CryptoJoker Ransomware copycat

14 Apr 2023

10 minute read

Back to top ↑

Threat Hunting

Threat Breakdown

PlutoCrypt - A CryptoJoker Ransomware Variant

Pivoting through the execution chain of a CryptoJoker Ransomware copycat

14 Apr 2023

10 minute read

Back to top ↑

Dorking

Threat Hunting

Kraken - The Deep Sea Lurker Part 2

Part 2 of analyzing the KrakenKeylogger Malware

26 May 2023

5 minute read

Back to top ↑

URLscan

Threat Hunting

Kraken - The Deep Sea Lurker Part 2

Part 2 of analyzing the KrakenKeylogger Malware

26 May 2023

5 minute read

Back to top ↑

VirusTotal

Threat Hunting

Kraken - The Deep Sea Lurker Part 2

Part 2 of analyzing the KrakenKeylogger Malware

26 May 2023

5 minute read

Back to top ↑

URLhaus

Threat Hunting

Kraken - The Deep Sea Lurker Part 2

Part 2 of analyzing the KrakenKeylogger Malware

26 May 2023

5 minute read

Back to top ↑

UnpackMe

Threat Hunting

Kraken - The Deep Sea Lurker Part 2

Part 2 of analyzing the KrakenKeylogger Malware

26 May 2023

5 minute read

Back to top ↑

DarkGate

Threat Breakdown

DarkGate - Threat Breakdown Journey

Shining a Light on the Hidden Tactics and Techniques Employed by DarkGate

06 Aug 2023

11 minute read

Back to top ↑

Loader

Threat Breakdown

DarkGate - Threat Breakdown Journey

Shining a Light on the Hidden Tactics and Techniques Employed by DarkGate

06 Aug 2023

11 minute read

Back to top ↑

Delphi

Threat Breakdown

DarkGate - Threat Breakdown Journey

Shining a Light on the Hidden Tactics and Techniques Employed by DarkGate

06 Aug 2023

11 minute read

Back to top ↑