Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2021-01-20 ⋅ Medium walmartglobaltech ⋅ Jason Reaves, Joshua Platt
Anchor and Lazarus together again?
Anchor TrickBot
2021-01-19 ⋅ Medium validhorizon ⋅ Daniel Gordon
Oh, So You Got IOCs? Being a Good CTI Consumer
2021-01-19 ⋅ Medium elis531989 ⋅ Eli Salem
Funtastic Packers And Where To Find Them
Get2 IcedID QakBot
2021-01-18 ⋅ Medium csis-techblog ⋅ Benoît Ancel
GCleaner — Garbage Provider Since 2019
Amadey Ficker Stealer Raccoon RedLine Stealer SmokeLoader STOP
2021-01-16 ⋅ Medium ⋅ Isha Kudkar
Oski Stealer : A Credential Theft Malware
Oski Stealer
2021-01-16 ⋅ Medium christiaanbeek ⋅ Christiaan Beek
VHD Forensics — the sequel
2021-01-15 ⋅ Medium Dansec ⋅ Dan Lussier
Detecting Malicious C2 Activity -SpawnAs & SMB Lateral Movement in CobaltStrike
Cobalt Strike
2021-01-13 ⋅ Medium Coinmonks ⋅ Coinmonks, Rakesh Krishnan
Passive Income of Cyber Criminals: Dissecting Bitcoin Multiplier Scam
Magniber
2021-01-12 ⋅ Medium walmartglobaltech ⋅ Jason Reaves
De-ofuscating GoLang Functions
2021-01-10 ⋅ Medium walmartglobaltech ⋅ Jason Reaves
MAN1, Moskal, Hancitor and a side of Ransomware
Cobalt Strike Hancitor SendSafe VegaLocker Moskalvzapoe
2021-01-04 ⋅ Medium haggis-m ⋅ Michael Haag
Malleable C2 Profiles and You
Cobalt Strike
2020-12-26 ⋅ Medium grimminck ⋅ Stefan Grimminck
Spoofing JARM signatures. I am the Cobalt Strike server now!
Cobalt Strike
2020-12-22 ⋅ Medium mitre-attack ⋅ Adam Pennington, Matt Malone
Identifying UNC2452-Related Techniques for ATT&CK
SUNBURST TEARDROP UNC2452
2020-12-20 ⋅ Medium Asuna Amawaka ⋅ Asuna Amawaka
A Look into SUNBURST’s DGA
SUNBURST
2020-12-15 ⋅ Medium (Cryptax) ⋅ Axelle Apvrille
Unpacking an Android malware with Dexcalibur and JEB
2020-12-15 ⋅ Medium 0xthreatintel ⋅ 0xthreatintel
Reversing Conti Ransomware
Conti
2020-12-14 ⋅ Medium Killbit ⋅ killbit
Applying the Diamond Model to Cognizant (MSP) vs. Maze Ransomware
Maze
2020-12-13 ⋅ Medium (Cryptax) ⋅ Axelle Apvrille
Decrypting strings with a JEB script
2020-12-12 ⋅ Medium 0xthreatintel ⋅ 0xthreatintel
Reversing QakBot [ TLP: White]
QakBot
2020-12-03 ⋅ Medium GhouLSec ⋅ GhouLSec
[Mal Series #13] Darkside Ransom
DarkSide