Quick And Dirty Binary Patching With A Hex Editor
Whether it's to circumvent an anti-analysis check, or simply a bug that needs to be fixed, patching a binary is a useful technique to have in »
The case of getlook23: Using GitHub Issues as a C2
This is a brief analysis of a sample I came across on twitter which uses a GitHub issue as a communication channel for the malware. Although »
Malware Persistence: HKEY_CURRENT_USER Shell Extension Handlers
This article was transferred from the @herrcore blog. Update June 8, 2015: Harlan (@keydet89), of Regripper fame, has updated Regripper to identify this persistence mechanism. Details »
Inside The New Asprox/Kuluoz (October 2013 - January 2014)
This article was transferred from the @herrcore blog. In the past few months we have seen asprox rise to be one of the leading e-mail distributed »
Exposing Malware In Hidden Desktops Using CmdDesktopSwitcher
This article was transferred from the @herrcore blog. Have you ever come across malware that has opened a window that you just can’t see? You »