Всесторонний анализ угроз, индикаторы IOC и исследования по RAT, инфостилерам, бэкдорам и другим семействам вредоносных программ.
SparkRAT 1.5MB ChromeSetup.msi. Gercek Chrome GUID 8A69D345-D564-463C-AFF1-A69D9E530F96 kullanilmis. Trojanize Chrome kurulum kili.
IcedID 1.1MB info_IR-99661418.msi fatura receipt lure. NSABX.GG C2 domain. cT_Gzip_Uncompress ozel sikistirma.
Bandook 2MB Confirmar Transferencia lista.rar. Ispanyolca LATAM banka transferi onay lure. 9485 string.
Conti 515KB run-as-admin.exe. mojobiden.com paymenthacks.com C2. supp24yy6a66hwszu2piygicgwzdtbwftb76htfj7vnip3getgqnzxid.onion destek.
QuasarRAT 920KB prick.exe kaba gelistirici adi. DHwidFDFPwjuob mutex. SysNtQueryInformationProcess2 syscall anti-debug.
Kimsuky APT 94KB Shadows of BlackwoodHotel.pdf.lnk cift uzanti LNK. Dark Hotel APT grubu otel spy teması.
WannaCry 743KB. iuqerfsodp9ifjaposdfjhgosurijfaewrwergwff.com kill switch. Global\MsWinZonesCacheCounterMutexA mutex. 115p7UMM BTC.
SnakeKeylogger 1.5MB AW PO-REG 1529_052026.js. 1 string 1.5MB maksimum JS obfuskasyon. _0x49b7 hex fonksiyon adlari.
AgentTesla 1.7MB .xls Excel makro. mx06.ispgateway.de (80.67.18.37) Alman SMTP relay exfil. Kimlik bilgisi email sızıntısı.
PrivateLoader 401KB sysmon.exe Sysinternals Sysmon sistem monitoru kıliği. IsDebuggerPresent çift anti-debug kontrol.
Dharma 1MB. decoder@firemail.cc fidye iletisim email. 13bpPxtiX48ccfV6ampj4kpfz3wLuvtp1lW + 13URQhAKhdqlxZUg BTC. schtasks ONLOGON.
Tofsee 78KB spam botnet. mail.ru SMTP hedef. NtQueryInformationToken token sorgulama. C:\Users\Bruno gelistirici.
Laplas Clipper 8KB. clipper.guru C2. _runMutex. Kripto para pano adres degistirici. Ultra kucuk 8KB boyut.
HijackLoader 11.9MB MSI. C:\Users\owner\Desktop\OLU\1.2.35.3 SsUSetting.pdb. NtQueryInformationProcess anti-debug.
CyberStealer 1.4MB ChromeB_test.exe gelistirici test binary. iloveboats9.vip C2. ChromeB Screenshot data sent to panel debug mesaj.
Phorpiex 113KB. 178.16.54.109 C2. lb10.exe lb11.exe lb12.exe coklu payload URL. Botnet numarali yukleyici zinciri.
SmokeLoader 520KB autoruns.exe Sysinternals Autoruns kılığında. C:\Users\Spaso stub.pdb Sırp gelistirici adi.
GuLoader 965KB PO BCF2026.exe Satin Alma Siparisi BCF 2026 yil kodu. Control Panel ResourceLocale kurban dil profili.
MassLogger 4.4MB QUOTATION REQUEST-DTC-9-PQD-0137.JS DTC sirket kodu PQD-0137 siparis. 3675 string 4.4MB.
RedLine 1.2MB QUOTATION#006565.exe fiyat teklifi 6565. BROWSER_BACK BROWSER_FORWARD BROWSER_REFRESH BROWSER_STOP tarayici kanca.