Search

Ukycircle
Ukycircle @UkyKnight ·
Replying to @UkyKnight
CFF evolved since Mandiant's analysis: .data tables -> stack-based runtime routing. Also identified what CFF protected: exfil paths & COM/WMI init. Scripts + decrypted data (JSON) in our repo. #LummaStealer #malwareanalysis
9
Cybersecurity News Everyday
Cybersecurity News Everyday @TweetThreatNews ·
Elastic Security Labs uncovered BRUSHWORM, a modular backdoor spreading via USB and stealing files, and BRUSHLOGGER, an XOR-encoded DLL side-loading keylogger targeting a South Asian financial institution. #MalwareAnalysis #SouthAsia #Backdoor ift.tt/xZcAIzm
Elastic Security Labs uncovers BRUSHWORM and BRUSHLOGGER

Elastic Security Labs discovered two custom tools deployed against a South Asian financial institution: BRUSHWORM, a modular backdoor that establishes persistence, downloads plugins, spreads via USB,...

From hendryadrian.com
69
Network Defense Solutions
Network Defense Solutions @nds_security ·
So lately I've been looking at how malware analysis is actually done, and I think it's time some of the process changes. Once things calm down, I will be posting more tooling that we are developing to help with this process -=] #malwareanalysis #dfir
73
Batch_7z
Batch_7z @batch_7z ·
الدرس 10: حسابات الـ C ​Priorities ➔ فك الـ Obfuscation ++x/x++ ➔ تتبع الـ Registers والـ Loops % ➔ بطل الـ Encryption ​الـ Logic الصح هو أساس الـ Reverse. ​الكود والتحليل: batch7z.github.io/posts/10-C-lan… ​ إيه أصعب: معادلة Static ولا Dynamic؟ ​#Batch_7z #MalwareAnalysis #C_Language
6
Vivek | Cybersecurity
Vivek | Cybersecurity @VivekIntel ·
A VMRay and Iknaio investigation found threat actors using public blockchains like Binance Smart Chain as resilient C2 infrastructure, embedding malicious code on-chain to evade takedowns and highlighting the need for cross-chain threat monitoring. #CyberSecurity #MalwareAnalysis #BSC #ThreatIntel vmray.com/tracing-blockc…
Tracing Blockchain-Controlled Malware Across Chains

Discover how VMRay and Iknaio traced blockchain-based malware C2 infrastructure from BSC to Ethereum exchanges.

From vmray.com
39