Macro
SANS ISC Diary - Qakbot in a response to Full Disclosure post
SANS ISC Diary - Qakbot in a response to Full Disclosure post
· ☕ 1 min read
A Diary of mine was published today on the SANS Internet Storm Center. In this one, we take a look at an interesting e-mail message carrying Qakbot downloader, which appeared to be sent in a response to a historical Full Disclosure mailing list post…
SANS ISC Diary - Analysis of a triple-encrypted AZORult downloader
SANS ISC Diary - Analysis of a triple-encrypted AZORult downloader
· ☕ 1 min read
A Diary of mine was published today on the SANS Internet Storm Center. In this one we take a look at analysis of an interesting malicious document which turned out to be AZORult downloader. What made it stand out - among its other aspects - were 3 layers of home-grown encryption...