Всесторонний анализ угроз, индикаторы IOC и исследования по RAT, инфостилерам, бэкдорам и другим семействам вредоносных программ.
LokiBot2 1.3MB Ordine di acquisto_(PO_109228)_doc.iso Italyanca satin alma siparisi ISO teslimat. GetKeyNameTextW klavye tus ismi keylogger.
Tofsee 78KB. C:\Users\Bruno\Desktop\file.exe PDB. NtQueryInformationToken token privilege escalation. ESMTP mx connect Too big smtp respons yazim hatasi.
BlackShades 818KB Firefox.exe sahte Firefox. C:\Users\Stefan\documents\visual studio 2013\sqliteProject.pdb. winSync2 mutex. Chrome Login Data SQL sorgusu.
OrcusRAT 1.1MB task.dll. EC2NPoint@CryptoPP eliptik egri C2 sifreleme. PK_Signer key too short TF_SignerBase this algorithm Crypto++ kutuphane hata stringleri.
Bandook 2MB Confirmar Transferencia lista.rar Ispanyolca banka transfer doğrulama listesi. D!sv^C2][ E\C2, Gc2F C2S5 e?C2 bes C2 substring.
njRAT9 988KB COTIZACION VANKARV.com.exe Ispanyolca fatura lürü. get_Panel1 njRAT C2 panel referansı.
BlindEagle 1.88MB. kbum1963.duckdns.org remnew.duckdns.org DuckDNS dinamik DNS C2. IDS_TITLE1 Pulse el boton Ispanyolca UI. $GETPASSWORD1 WinRAR SFX teslimat.
RedLine2 1.25MB 24099762P2024091901KYRQA.exe tarih damgali build. 94SQ.ME .me TLD C2. AutoIt compiled script teslimat. Control Panel Mouse anti-VM fare hareketi kontrolü.
Phemedrone 234KB WDSecureUtilities(1).exe sahte Windows Defender. Key3Database KeePass veritabani hedefleme. ParseColdWallets kripto soğuk cüzdan. ParsePasswords PasswordsTags.
XenoRAT 378KB UpdateWindowns.exe Windows typo. localto.net tünel servisi C2. costura.costura.dll.compressed Costura.Fody .NET assembly embedding.
BazarLoader2 728KB 1_3-8765.dll. xigcgabbzkswmicmkatl Trigona ransomware ile ayni mutex! cskkpxjgkbiprbotvnwc gmnhqvmxbotuojlbaycq rmbobothaqgnpptdehns fbotuwzbfubtylcpczyr dort 20-karakter DGA string.
PikaBot2 1.46MB Lisect_AVT_24003_G1B_54.exe procurement satın alma lürü. NtQueryObject NtQuerySystemInformation çift NT anti-debug. surrogate U+D800 JSON doğrulama hatası.
SmokeLoader2 520KB autoruns.exe sahte Sysinternals Autoruns. C:\Users\Spaso\source\repos\stub\Release\stub.pdb geliştirici yolu. TQQ obfuscated C2 string.
Dridex3 1MB exe. fromChrome9September9 boobsrChromeannouncedFirefox oHbullshitibChromej2 geliştiricinin küfürlü obfuscated tarayıcı hedefleme stringleri. DuiNavigate DirectUI RTTI.
Cryakl Ransomware 370KB. shopping-na-divane.ru shoptorgvlg.ru Rusya C2 PHP gate. psd:zip:ert:bak:xml:mdf:accdb:fbx:max:m3d:dbf uzanti şifreleme listesi.
TrickBot2 387KB 55ryoipjfdr.exe DGA randomize isim. WTSSetUserConfigW RDP kullanici konfigurasyonu. RegUnLoadKeyA RegReplaceKeyA nadir registry hive dump API.
EvilNum 1.58MB. C:\Users\Administrator\Desktop\vaeeva\shellrundll.tlb geliştirici PDB. shellrundll.tlb COM type library DLL hijacking. gethostbyname gethostname ag fonksiyonu.
Carbanak 449KB out.dll geliştirici artifact. SvchostInjector.x64.dll gömülü enjektör DLL yolu. ukc2a7qgRRR c2 substring.
BlackMoon 1.6MB exe. BlackMoon RunTime Error gomulu aile adi hata mesaji. Game/Config/SISetting.json oyun ayar dosyasi C2 kamuflaji. VC20XC00U mutex GhostRAT ile paylasilmiş.
QakBot2 1.5MB Notesvb.msi VB notlar MSI. ConnectNamedPipe DisconnectNamedPipe named pipe IPC. 2"2)202J2Y2c2p2z2 c2 substring.