Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2023-12-14 ⋅ Checkpoint ⋅ hasherezade
Rhadamanthys v0.5.0 – A Deep Dive into the Stealer’s Components
Rhadamanthys
2023-08-31 ⋅ Checkpoint ⋅ hasherezade
From Hidden Bee to Rhadamanthys - The Evolution of Custom Executable Formats
Hidden Bee Rhadamanthys
2023-03-30 ⋅ hasherezade's 1001 nights ⋅ hasherezade
Magniber ransomware analysis: Tiny Tracer in action
Magniber
2021-07-23 ⋅ Malwarebytes ⋅ hasherezade
AvosLocker enters the ransomware scene, asks for partners
AvosLocker
2020-11-30 ⋅ Malwarebytes ⋅ hasherezade, Jérôme Segura
German users targeted with Gootkit banker or REvil ransomware
GootKit REvil
2020-10-28 ⋅ Malwarebytes ⋅ hasherezade, Hossein Jazi, Jérôme Segura, Marcelo Rivero
Fake COVID-19 survey hides ransomware in Canadian university attack
Vaggen
2020-05-31 ⋅ Malwarebytes ⋅ hasherezade
Revisiting the NSIS-based crypter
Formbook
2020-05-21 ⋅ Malwarebytes ⋅ hasherezade, prsecurity
The “Silent Night” Zloader/Zbot
Zloader
2019-08-15 ⋅ Malwarebytes ⋅ hasherezade
The Hidden Bee infection chain, part 1: the stegano pack
Hidden Bee
2019-07-24 ⋅ Malwarebytes ⋅ hasherezade
A deep dive into Phobos ransomware
Phobos
2019-05-31 ⋅ Malwarebytes ⋅ hasherezade
Hidden Bee: Let’s go down the rabbit hole
Hidden Bee
2019-04-06 ⋅ Youtube (hasherezade) ⋅ hasherezade
Unpacking ISFB (including the custom 'PX' format)
ISFB
2019-03-21 ⋅ Youtube (hasherezade) ⋅ hasherezade
Unpacking Baldr stealer
Baldr
2018-11-12 ⋅ Malwarebytes ⋅ hasherezade
What’s new in TrickBot? Deobfuscating elements
TrickBot
2018-08-30 ⋅ Malwarebytes ⋅ hasherezade
Reversing malware in a custom format: Hidden Bee elements
Hidden Bee
2018-07-26 ⋅ Malwarebytes ⋅ hasherezade, Jérôme Segura
‘Hidden Bee’ miner delivered via improved drive-by download toolkit
Hidden Bee
2018-07-16 ⋅ Malwarebytes Labs ⋅ hasherezade, Jérôme Segura
Magniber ransomware improves, expands within Asia
Magniber
2018-03-31 ⋅ Youtube (hasherezade) ⋅ hasherezade
Deobfuscating TrickBot's strings with libPeConv
TrickBot
2018-03-19 ⋅ hasherezade
Unpacking Ursnif
ISFB
2018-03-14 ⋅ Malwarebytes Labs ⋅ hasherezade, Jérôme Segura, Vasilios Hioureas
Hermes ransomware distributed to South Koreans via recent Flash zero-day
Hermes