Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2023-04-19 ⋅ Sophos ⋅ Andreas Klopsch
‘AuKill’ EDR killer malware abuses Process Explorer driver
AuKill
2022-12-13 ⋅ Sophos ⋅ Andreas Klopsch, Andrew Brandt
Signed driver malware moves up the software trust chain
KillAV
2022-10-04 ⋅ Sophos ⋅ Andreas Klopsch
Remove All The Callbacks – BlackByte Ransomware Disables EDR Via RTCore64.sys Abuse
BlackByte
2022-05-04 ⋅ Sophos ⋅ Andreas Klopsch
Attacking Emotet’s Control Flow Flattening
Emotet
2021-08-22 ⋅ Malware and Stuff ⋅ Andreas Klopsch
PEB: Where Magic Is Stored
Dacls
2021-01-24 ⋅ malwareandstuff blog ⋅ Andreas Klopsch
Catching Debuggers with Section Hashing
2020-07-12 ⋅ Malware and Stuff ⋅ Andreas Klopsch
Deobfuscating DanaBot’s API Hashing
DanaBot
2020-06-21 ⋅ Malware and Stuff ⋅ Andreas Klopsch
UpnP – Messing up Security since years
QakBot
2020-06-10 ⋅ Gdata ⋅ Andreas Klopsch
Harmful Logging - Diving into MassLogger
MASS Logger
2020-05-24 ⋅ Malware and Stuff ⋅ Andreas Klopsch
Examining Smokeloader’s Anti Hooking technique
SmokeLoader
2020-05-05 ⋅ Malware and Stuff ⋅ Andreas Klopsch
An old enemy – Diving into QBot part 3
QakBot
2020-03-30 ⋅ Malware and Stuff ⋅ Andreas Klopsch
An old enemy – Diving into QBot part 1
QakBot
2020-03-22 ⋅ Malware and Stuff ⋅ Andreas Klopsch
Mustang Panda joins the COVID-19 bandwagon
Cobalt Strike