Всесторонний анализ угроз, индикаторы IOC и исследования по RAT, инфостилерам, бэкдорам и другим семействам вредоносных программ.
LockBit 3.0 builder binary LBB_pass.bin 165KB. WoLc2 C2 string. Sifreli yuk.
SilverRAT 88KB. Registry manipulation. RegOpenKeyA, RegReplaceKeyA. Sifrelenmis C2.
XMRig 5.3MB Linux ELF. extranonce.su, mining.su cleartext mining pool. Ghostrider algoritma.
IcedID 405KB MFC banker. Sifrelenmis C2. Browser form grabbing. PE32 yuk.
AgentTesla SWIFT_Payment_Receipt JS dropper. Danca obfuske. WSH ActiveX. 354KB.
TrickBot 55ryoipjfdr.exe 396KB. Modular bankacilik trojan. Sifrelenmis modul config.
SmokeLoader 404KB agir paket. Anti-forensic SetFileShortNameA. Sifrelenmis C2.
Rhadamanthys metacore-loader.exe. C2: 176.46.152.62:5858 acik metin.
Raccoon Stealer v2 ProtonVPN kamuflaj. Telegram dead drop. Browser, crypto hedef.
Emotet (Heodo) 193KB DLL. 327 string agir paket. RC4 C2 config. Botnet loader.
QakBot 326 byte BAT dropper. upd5.pro acik metin C2. conhost.exe LOLBAS.
NetWire RAT 169KB. Chrome Login Data hedef. Yandex GeoIP. HostId protokol.
RemcosRAT RCFB88.exe 231KB. RSA DH anahtar materyali. Sifrelenmis C2.
3.1MB Go binary. MB Vidar yanlis etiketledi. sync.Mutex Go runtime kaniti.
FormBook dstq.exe 287KB. HTML form hijack. Sifrelenmis C2 config.
BumbleBee 1.8MB EXE. GlobalSign TLS sertifikasi. Sifrelenmis C2 config. Cobalt Strike yuklemesi.
AsyncRAT JS dropper. REQ NEW INQUIRY 2026 PDF.js 328KB. Tam obfuske, 1 string. PS code fragment tespit edildi.
Jupyter/SolarMarker .NET infostealer. AES-256-CBC base64url sifrelenmis C2 config. SEO zehirleme yemi.
DiceLoader e345rt.vbs 237KB VBS. WPF TextFormattingRunProperties exploit. .NET reflection get_MachineName. Base64 obfuske.
Matanbuchus 495KB DLL. libcurl ile HTTPS C2. Sifrelenmis config fragmentleri. MaaS underground hizmeti.