Umfassende Bedrohungsanalysen, IOCs und Forschungsberichte zu RAT, Infostealer, Backdoor und anderen Malware-Familien.
LokiBot officedocuments.doc 611KB. BTC cüzdanlar. VBA makro dağıtım.
WarzoneRAT/AveMaria 363KB. BTC cüzdanlar. AES şifreci. YufC2 config fragmenti.
NanoCore 207KB. PDB: C:\crysis\Release\PDB\payload.pdb. Sıkıştırılmış .NET RAT.
DCRat 80KB JS dropper. JavaScript tabanlı dağıtım. .NET payload. Sifrelenmis C2.
QuasarRAT schtasks.exe kamuflaj 452KB. WinSCP sifre calma. api.ipify.org. ENCRYPTIONKEY.
Meduza Stealer gem1.exe 1.2MB .NET. Config: lD3Qrc28TgRo8O7lKM. Browser kimlik bilgisi calma.
Tofsee 78KB. mail.ru spam kampanyasi. PDB: Bruno. svchost.exe injection. Sifrelenmis C2.
Erbium Stealer Setup.exe 224KB. Sifrelenmis C2. Rust tabanli premium infostealer.
CryptBot shark2.bin 6MB Delphi/VCL. VeriSign TLS. x8D8.io supheli domain.
Anubis Android banker. Hindistan RTO e-Challan lure. Cok dilli overlay. 5.5MB APK.
Play ransomware 513KB. Sifrelenmis C2 config. Double extortion. AES+RSA.
LimeRAT 399KB. kalyanonlinematkaapp.in.net cleartext C2. AES. Disk Enum registry yolu.
NjRAT 95KB VB.NET. .NET delegate/reflection. System.IO false positive filtrelendi. Sifrelenmis C2.
SpyNote ready.apk 704KB. everspy.ru cleartext C2. WebView HTML UI. Android RAT.
Cl0p 336KB. RSA public key gomulu. IOCP ile hizli dosya sifreleme. CreateMutexA.
Carbanak 449KB out.dll. SvchostInjector.x64.dll ile svchost.exe injection. ukc2a7qgRRR C2.
Hive chisel.exe 8.2MB Go. LOTL SSH tunneling. LetsEncrypt ACME. Ransomware pivot tool.
Phobos ransomware 73KB. LisectAVT test ornegi. CreateMutexW. Sifrelenmis, email iletisim.
Dharma ransomware 2018. 147KB. Email fidye iletisimi. .fgC2] config fragmenti.
StormKitty VB6 stealer. ReviewandSignImportantDocument.exe. 248 string. Password calma.