Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2025-01-03 ⋅ SANS ISC ⋅ Xavier Mertens
SwaetRAT Delivery Through Python
SwaetRAT
2023-11-01 ⋅ SANS ISC ⋅ Xavier Mertens
Malware Dropped Through a ZPAQ Archive
2022-06-16 ⋅ SANS ISC ⋅ Xavier Mertens
Houdini is Back Delivered Through a JavaScript Dropper
Houdini
2022-05-20 ⋅ SANS ISC ⋅ Xavier Mertens
A 'Zip Bomb' to Bypass Security Controls & Sandboxes
BitRAT
2022-05-09 ⋅ InfoSec Handlers Diary Blog ⋅ Xavier Mertens
Octopus Backdoor is Back with a New Embedded Obfuscated Bat File
Octopus
2022-04-25 ⋅ SANS ISC ⋅ Xavier Mertens
Simple PDF Linking to Malicious Content
2022-03-25 ⋅ SANS ISC ⋅ Xavier Mertens
XLSB Files: Because Binary is Stealthier Than XML
QakBot
2022-02-18 ⋅ SANS ISC ⋅ Xavier Mertens
Remcos RAT Delivered Through Double Compressed Archive
Remcos
2022-02-11 ⋅ blog.rootshell.be ⋅ Xavier Mertens
[SANS ISC] CinaRAT Delivered Through HTML ID Attributes
Quasar RAT
2022-01-20 ⋅ blog.rootshell.be ⋅ Xavier Mertens
[SANS ISC] RedLine Stealer Delivered Through FTP
RedLine Stealer
2022-01-20 ⋅ SANS ISC InfoSec Forums ⋅ Xavier Mertens
RedLine Stealer Delivered Through FTP
RedLine Stealer
2021-07-24 ⋅ InfoSec Handlers Diary Blog ⋅ Xavier Mertens
Agent.Tesla Dropped via a .daa Image and Talking to Telegram
Agent Tesla
2021-03-31 ⋅ InfoSec Handlers Diary Blog ⋅ Xavier Mertens
Quick Analysis of a Modular InfoStealer
Amadey
2021-03-29 ⋅ InfoSec Handlers Diary Blog ⋅ Xavier Mertens
Jumping into Shellcode
2021-02-12 ⋅ InfoSec Handlers Diary Blog ⋅ Xavier Mertens
AgentTesla Dropped Through Automatic Click in Microsoft Help File
Agent Tesla
2021-01-22 ⋅ InfoSec Handlers Diary Blog ⋅ Xavier Mertens
Another File Extension to Block in your MTA: .jnlp
2021-01-21 ⋅ InfoSec Handlers Diary Blog ⋅ Xavier Mertens
Powershell Dropping a REvil Ransomware
REvil
2020-12-24 ⋅ InfoSec Handlers Diary Blog ⋅ Xavier Mertens
Malicious Word Document Delivering an Octopus Backdoor
Octopus
2020-11-19 ⋅ SANS ISC InfoSec Forums ⋅ Xavier Mertens
PowerShell Dropper Delivering Formbook
Formbook
2020-07-14 ⋅ blog.rootshell.be ⋅ Xavier Mertens
Simple DGA Spotted in a Malicious PowerShell
2020-05-23 ⋅ InfoSec Handlers Diary Blog ⋅ Xavier Mertens
AgentTesla Delivered via a Malicious PowerPoint Add-In
Agent Tesla
2018-05-19 ⋅ Xavier Mertens
Malicious Powershell Targeting UK Bank Customers
sLoad
2017-07-08 ⋅ InfoSec Handlers Diary Blog ⋅ Xavier Mertens
A VBScript with Obfuscated Base64 Data
Revenge RAT