https://untrustednetwork.net/en/tag/azorult/ Recent content in AZORult on Untrusted Network Hugo -- gohugo.io en &copy; Jan Kopriva 2015 - {year} Mon, 03 Feb 2020 07:45:10 +0100 weekly weekly https://untrustednetwork.net/en/2020/02/03/sans-isc-diary-analysis-of-a-triple-encrypted-azorult-downloader/ Mon, 03 Feb 2020 07:45:10 +0100 Mon, 03 Feb 2020 07:45:10 +0100 https://untrustednetwork.net/en/2020/02/03/sans-isc-diary-analysis-of-a-triple-encrypted-azorult-downloader/ A Diary of mine was published today on the SANS Internet Storm Center. In this one we take a look at analysis of an interesting malicious document which turned out to be AZORult downloader. What made it stand out - among its other aspects - were 3 layers of home-grown encryption&hellip; EDIT 04/02/2020: Tom from Threat Post liked the diary and wrote an article based on it - you may find it here. <p>A <a href="https://isc.sans.edu/forums/diary/Analysis+of+a+tripleencrypted+AZORult+downloader/25768/">Diary</a> of mine was published today on the <a href="https://isc.sans.edu/">SANS Internet Storm Center</a>. In this one we take a look at analysis of an interesting malicious document which turned out to be AZORult downloader. What made it stand out - among its other aspects - were 3 layers of home-grown encryption&hellip;</p> <p><em>EDIT 04/02/2020: Tom from Threat Post liked the diary and wrote an article based on it - you may find it <a href="https://threatpost.com/azorult-campaign-encryption-technique/152508/">here</a>.</em></p> <img src="https://untrustednetwork.net/images/isc/isc-diary.jpg" alt="ISC diary"> Jan Kopriva featured image SANS Malware Phishing AZORult Macro News 2020 SANS ISC Diary