Labs Home

Category

Crimeware

Deep-Dive-Into-TrickBot-Executor-Module-“mexec”_-Reversing-the-Dropper-Variant-7

Deep Dive Into TrickBot Executor Module “mexec”: Reversing the Dropper Variant

Continuing our earlier analysis of the TrickBot Executor Module "mexec", we take a look at the dropper variant and reveal how it carries its payload onboard

Read More

Crimeware

  • HelloKitty Ransomware Lacks Stealth, But Still Strikes Home
    Crimeware
    Jim WalterMar 9, 2021

    HelloKitty Ransomware Lacks Stealth, But Still Strikes Home

  • Zeoticus 2.0 | Ransomware With No C2 Required
    Crimeware
    Jim WalterFeb 4, 2021

    Zeoticus 2.0 | Ransomware With No C2 Required

  • Greyware’s Anatomy: The “Potentially Unwanted” are Upping Their Game
    Crimeware
    Mike DvorkinJan 8, 2021

    Greyware’s Anatomy: The “Potentially Unwanted” are Upping Their Game

  • Egregor RaaS Continues the Chaos with Cobalt Strike and Rclone
    Crimeware
    Jim WalterNov 26, 2020

    Egregor RaaS Continues the Chaos with Cobalt Strike and Rclone

  • Ranzy Ransomware | Better Encryption Among New Features of ThunderX Derivative
    Crimeware
    Jim WalterNov 18, 2020

    Ranzy Ransomware | Better Encryption Among New Features of ThunderX Derivative

  • Anchor Project for Trickbot Adds ICMP
    Crimeware
    Jason ReavesOct 30, 2020

    Anchor Project for Trickbot Adds ICMP

  • An Inside Look at How Ryuk Evolved Its Encryption and Evasion Techniques
    Crimeware
    Marco FigueroaOct 22, 2020

    An Inside Look at How Ryuk Evolved Its Encryption and Evasion Techniques

  • Purple Fox EK | New CVEs, Steganography, and Virtualization Added to Attack Flow
    Crimeware
    Gal KristalOct 19, 2020

    Purple Fox EK | New CVEs, Steganography, and Virtualization Added to Attack Flow

  • The FONIX RaaS | New Low-Key Threat with Unnecessary Complexities
    Crimeware
    Jim WalterOct 6, 2020

    The FONIX RaaS | New Low-Key Threat with Unnecessary Complexities

  • Multi-Platform SMAUG RaaS Aims To See Off Competitors
    Crimeware
    Jim WalterSep 3, 2020

    Multi-Platform SMAUG RaaS Aims To See Off Competitors

  • Agent Tesla | Old RAT Uses New Tricks to Stay on Top
    Crimeware
    Jim WalterAug 10, 2020

    Agent Tesla | Old RAT Uses New Tricks to Stay on Top

  • WastedLocker Ransomware: Abusing ADS and NTFS File Attributes
    Crimeware
    Jim WalterJul 23, 2020

    WastedLocker Ransomware: Abusing ADS and NTFS File Attributes