Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2023-04-06 ⋅ Spamhaus ⋅ Raashid Bhat
Neutralizing Tofsee Spambot – Part 3 | Network-based kill switch
Tofsee
2023-04-06 ⋅ Spamhaus ⋅ Raashid Bhat
Neutralizing Tofsee Spambot – Part 2 | InMemoryConfig store vaccine
Tofsee
2023-04-06 ⋅ Spamhaus ⋅ Raashid Bhat
Neutralizing Tofsee Spambot – Part 1 | Binary file vaccine
Tofsee
2022-10-12 ⋅ Spamhaus ⋅ Raashid Bhat
Dissecting the new shellcode-based variant of GuLoader (CloudEyE)
CloudEyE
2020-04-22 ⋅ Youtube (Infosec Alpha) ⋅ Raashid Bhat
FlattenTheCurve - Emotet Control Flow Unflattening | Episode 2
Emotet
2020-03-31 ⋅ Youtube (Infosec Alpha) ⋅ Raashid Bhat
Emotet Binary Deobfuscation | Coconut Paradise | Episode 1
Emotet
2020-03-11 ⋅ Twitter (@raashidbhatt) ⋅ Raashid Bhat
Tweet on Emotet Deobfuscation with Video
Emotet
2019-07-30 ⋅ int 0xcc blog ⋅ Raashid Bhat
Practical Threat Hunting and Incidence Response : A Case of A Pony Malware Infection
Pony
2019-04-22 ⋅ int 0xcc blog ⋅ Raashid Bhat
Dissecting Emotet’s network communication protocol
Emotet
2018-09-18 ⋅ int 0xcc blog ⋅ Raashid Bhat
A taste of our own medicine: How SmokeLoader is deceiving configuration extraction by using binary code as bait
SmokeLoader
2018-09-06 ⋅ int 0xcc blog ⋅ Raashid Bhat
Dissecting DEloader malware with obfuscation
Zloader
2017-02-22 ⋅ PhishLabs ⋅ Raashid Bhat
Dissecting the Qadars Banking Trojan
Qadars
2016-02-01 ⋅ Blueliv ⋅ Raashid Bhat
Tracking the footprints of PushDo Trojan
Pushdo