Labs Home

Category

Crimeware

Deep-Dive-Into-TrickBot-Executor-Module-“mexec”_-Reversing-the-Dropper-Variant-7

Deep Dive Into TrickBot Executor Module “mexec”: Reversing the Dropper Variant

Continuing our earlier analysis of the TrickBot Executor Module "mexec", we take a look at the dropper variant and reveal how it carries its payload onboard

Read More

Crimeware

  • Enter the Maze: Demystifying an Affiliate Involved in Maze (SNOW)
    Crimeware
    Jason ReavesJul 22, 2020

    Enter the Maze: Demystifying an Affiliate Involved in Maze (SNOW)

  • Thanos Ransomware | RIPlace, Bootlocker and More Added to Feature Set
    Crimeware
    Jim WalterJul 1, 2020

    Thanos Ransomware | RIPlace, Bootlocker and More Added to Feature Set

  • Inside a TrickBot Cobalt Strike Attack Server
    Crimeware
    Joshua PlattJun 22, 2020

    Inside a TrickBot Cobalt Strike Attack Server

  • Valak Malware and the Connection to Gozi Loader ConfCrew
    Crimeware
    Jason ReavesJun 9, 2020

    Valak Malware and the Connection to Gozi Loader ConfCrew

  • NetWalker Ransomware: No Respite, No English Required
    Crimeware
    Jim WalterJun 4, 2020

    NetWalker Ransomware: No Respite, No English Required

  • Deep Dive Into TrickBot Executor Module “mexec”: Reversing the Dropper Variant
    Crimeware
    Jason ReavesMay 14, 2020

    Deep Dive Into TrickBot Executor Module “mexec”: Reversing the Dropper Variant

  • Meet NEMTY Successor, Nefilim/Nephilim Ransomware
    Crimeware
    Jim WalterMay 5, 2020

    Meet NEMTY Successor, Nefilim/Nephilim Ransomware

  • IcedID Botnet | The Iceman Goes Phishing for US Tax Returns
    Crimeware
    Joshua PlattApr 24, 2020

    IcedID Botnet | The Iceman Goes Phishing for US Tax Returns

  • Maze Ransomware Update: Extorting and Exposing Victims
    Crimeware
    Jim WalterApr 18, 2020

    Maze Ransomware Update: Extorting and Exposing Victims

  • Deep Dive Into TrickBot Executor Module “mexec”: Hidden “Anchor” Bot Nexus Operations
    Crimeware
    Jason ReavesApr 8, 2020

    Deep Dive Into TrickBot Executor Module “mexec”: Hidden “Anchor” Bot Nexus Operations

  • Revealing the Trick | A Deep Dive into TrickLoader Obfuscation
    Crimeware
    Jason ReavesFeb 26, 2020

    Revealing the Trick | A Deep Dive into TrickLoader Obfuscation

  • New Snake Ransomware Adds Itself to the Increasing Collection of Golang Crimeware
    Crimeware
    Jim WalterJan 24, 2020

    New Snake Ransomware Adds Itself to the Increasing Collection of Golang Crimeware