Click here to download all references as Bib-File.•
2024-09-12
⋅
kienmanowar Blog
⋅
[QuickNote] The Xworm malware is being spread through a phishing email XWorm |
2024-08-10
⋅
kienmanowar Blog
⋅
[QuickNote] Retrieve unknown python stealer from PyInstaller |
2024-06-06
⋅
kienmanowar Blog
⋅
[QuickNote] DarkGate – Make AutoIt Great Again DarkGate |
2024-04-24
⋅
kienmanowar Blog
⋅
[QuickNote] Qakbot 5.0 – Decrypt strings and configuration QakBot |
2024-04-09
⋅
kienmanowar Blog
⋅
[QuickNote] Phishing email distributes WarZone RAT via DBatLoader Ave Maria DBatLoader |
2024-01-06
⋅
kienmanowar Blog
⋅
[QuickNote] Technical Analysis of recent Pikabot Core Module Pikabot |
2023-09-11
⋅
Github (m4now4r)
⋅
Unveiling Qakbot Exploring one of the Most Active Threat Actors QakBot |
2023-07-06
⋅
kienmanowar Blog
⋅
[QuickNote] Examining Formbook Campaign via Phishing Emails Formbook |
2023-05-22
⋅
kienmanowar Blog
⋅
[Case study] Decrypt strings using Dumpulator |
2023-04-08
⋅
kienmanowar Blog
⋅
[QuickNote] Uncovering Suspected Malware Distributed By Individuals from Vietnam AsyncRAT DCRat WorldWind |
2023-03-25
⋅
kienmanowar Blog
⋅
[QuickNote] Decrypting the C2 configuration of Warzone RAT Ave Maria |
2023-01-09
⋅
kienmanowar Blog
⋅
[QuickNote] Another nice PlugX sample PlugX |
2022-12-27
⋅
kienmanowar Blog
⋅
Diving into a PlugX sample of Mustang Panda group PlugX |
2022-12-19
⋅
kienmanowar Blog
⋅
[Z2A]Bimonthly malware challege – Emotet (Back From the Dead) Emotet |
2022-12-17
⋅
kienmanowar Blog
⋅
[QuickNote] VidarStealer Analysis Vidar |
2022-09-09
⋅
Github (m4now4r)
⋅
“Mustang Panda” – Enemy at the gate PlugX |
2022-06-04
⋅
kienmanowar Blog
⋅
[QuickNote] CobaltStrike SMB Beacon Analysis Cobalt Strike |
2022-05-20
⋅
VinCSS
⋅
[RE027] China-based APT Mustang Panda might have still continued their attack activities against organizations in Vietnam PlugX |
2022-04-25
⋅
VinCSS
⋅
[RE026] A Deep Dive into Zloader - the Silent Night Zloader |
2022-03-21
⋅
VinCSS
⋅
[QuickNote] Analysis of Pandora ransomware Pandora |