Click here to download all references as Bib-File.
| 2021-04-05 ⋅ Medium walmartglobaltech ⋅ TrickBot Crews New CobaltStrike Loader Cobalt Strike TrickBot |
| 2021-03-05 ⋅ Medium walmartglobaltech ⋅ A look at an Android bot from unpacking to DGA FluBot |
| 2021-03-01 ⋅ Medium walmartglobaltech ⋅ Nimar Loader BazarBackdoor BazarNimrod Cobalt Strike |
| 2021-03-01 ⋅ Medium walmartglobaltech ⋅ Investigation into the state of Nim malware BazarNimrod Cobalt Strike |
| 2021-01-20 ⋅ Medium walmartglobaltech ⋅ Anchor and Lazarus together again? Anchor TrickBot |
| 2021-01-12 ⋅ Medium walmartglobaltech ⋅ De-ofuscating GoLang Functions |
| 2021-01-10 ⋅ Medium walmartglobaltech ⋅ MAN1, Moskal, Hancitor and a side of Ransomware Cobalt Strike Hancitor SendSafe VegaLocker |
| 2020-07-22 ⋅ SentinelOne ⋅ Enter the Maze: Demystifying an Affiliate Involved in Maze (SNOW) ISFB Maze TrickBot Zloader |
| 2020-07-07 ⋅ Sentinel LABS ⋅ Breaking EvilQuest | Reversing A Custom macOS Ransomware File Encryption Routine EvilQuest |
| 2020-06-22 ⋅ Sentinel LABS ⋅ Inside a TrickBot Cobalt Strike Attack Server Cobalt Strike TrickBot |
| 2020-06-09 ⋅ Sentinel LABS ⋅ Valak Malware and the Connection to Gozi Loader ConfCrew Valak |
| 2020-05-31 ⋅ Medium walmartglobaltech ⋅ WastedLoader or DridexLoader? Dridex WastedLocker |
| 2020-05-14 ⋅ SentinelOne ⋅ Deep Dive Into TrickBot Executor Module “mexec”: Reversing the Dropper Variant TrickBot |
| 2020-05-08 ⋅ Twitter (@sysopfb) ⋅ Tweet on GuLoader anti analysis techniques CloudEyE |
| 2020-04-28 ⋅ Random RE ⋅ IcedID PhotoLoader evolution PhotoLoader |
| 2020-04-08 ⋅ SentinelOne ⋅ Deep Dive Into TrickBot Executor Module “mexec”: Hidden “Anchor” Bot Nexus Operations Anchor TrickBot |
| 2020-03-04 ⋅ SentinelOne ⋅ Breaking TA505’s Crypter with an SMT Solver Clop CryptoMix MINEBRIDGE |
| 2020-02-26 ⋅ SentinelOne ⋅ Revealing the Trick | A Deep Dive into TrickLoader Obfuscation TrickBot |
| 2020-02-10 ⋅ viXra ⋅ A Case Study into solving Crypters/Packers in Malware Obfuscation using an SMT approach Locky |
| 2020-01-09 ⋅ SentinelOne ⋅ Top-Tier Russian Organized Cybercrime Group Unveils Fileless Stealthy “PowerTrick” Backdoor for High-Value Targets TrickBot WIZARD SPIDER |