Malware Research

31 Jul 2024 09:32

some stealer in marketplace also have hashes(public in ressearch article) when combine with others exe i think when extract compressed files in it we found exact stealer inside

Malware Research

31 Jul 2024 09:30

that's new, you have any download samples link ?

Malware Research

31 Jul 2024 09:15

Guys am dealing with a bunch of stealer files with naming "node.exe" i guess its nodejs file also some of them are electron apps, is there any means to deal with it?

One of them I just found is using *asar* which can be used to extract the actual code

Malware Research

30 Jul 2024 18:21

Hi, any recommedations for an EDR with a friendly trial or free seats for learning?

Malware Research

29 Jul 2024 20:34

Thanks for the integration

Malware Research

28 Jul 2024 08:48

Parmanu [1113907741] is currently banned in Libra's Empire.
Reason:
cracks

Date of ban: 25/02/2023
FedAdmin: ❤🦦

Malware Research

28 Jul 2024 08:46

The following federations have caused Parmanu to be banned in chats:
- b578caf1-07e7-4e92-9226-f69346180d99: Libra's Empire

If you would like to know more about the fedban reason in a specific federation, use /fbanstat <UserID> <FedID>.

Malware Research

28 Jul 2024 08:45

User info:
ID: 1113907741
First Name: Parmanu
Username: @parmanoo
User link: link
Status: banned

This user has been fbanned in the current fed, Libra's Empire.
Reason: cracks

Malware Research

28 Jul 2024 08:10

User Parmanu is banned in the current federation (Libra's Empire), and so has been removed.
Reason: cracks

Malware Research

27 Jul 2024 04:35

Hello Sagor, welcome to the Malware Research group! Please read the pinned message before you post!

Malware Research

26 Jul 2024 06:24

Hello @MEERFARAZ787, welcome to the Malware Research group! Please read the pinned message before you post!

Malware Research

24 Jul 2024 13:54

Remind me in about an hour

Malware Research

24 Jul 2024 12:25

Maybe if this is feasible, we can keep a track of the campaign before they are used ITW

Malware Research

24 Jul 2024 12:24

Well thats nice because I was unaware of it

Malware Research

24 Jul 2024 12:23

The paid github api allpws you to do so

Malware Research

31 Jul 2024 09:30

and with the AZstealer-Build.exe in virus total you found it as stealer ?

Malware Research

31 Jul 2024 09:18

Context : https://www.virustotal.com/gui/file/a2b284d185326ef5a6031fd2278302a715181989230b54f9e4e4d79545a0dde7/details

Malware Research

30 Jul 2024 18:25

On GitHub there are 2

https://github.com/ComodoSecurity/openedr

https://github.com/0xrawsec/whids

I use whids at home, but be careful how you configure it. I think I have a setting that backs up my VM and ate up all my storage space because of some detections and I had to hunt that down

Malware Research

30 Jul 2024 16:21

Hello Unkle, welcome to the Malware Research group! Please read the pinned message before you post!

Malware Research

29 Jul 2024 03:51

Hello @Lorddevilhunter, welcome to the Malware Research group! Please read the pinned message before you post!

Malware Research

28 Jul 2024 08:48

/fbanstat @parmanoo b578caf1-07e7-4e92-9226-f69346180d99

Malware Research

28 Jul 2024 08:46

/fedstat @parmanoo

Malware Research

28 Jul 2024 08:45

/info @parmanoo

Malware Research

27 Jul 2024 20:33

Hello Roshan, welcome to the Malware Research group! Please read the pinned message before you post!

Malware Research

26 Jul 2024 21:16

Hello @apostol0s, welcome to the Malware Research group! Please read the pinned message before you post!

Malware Research

25 Jul 2024 07:03

There have many opinion in I have seeing, let me share my experinece.

You may install the EDR agent in endpoint and perform attack using Atomic Red Team https://atomicredteam.io/

In our office, when we take trail for huntress, I tested in VM. also, caldera, spider monkey etc. advisory emulation you may use. Which actually purple teaming, for understood the capability of defender product like EDR.

And bitter truth, no EDR is the BEST of BEST. They have lackings, they try to improve to beat the hackers. Thanks.

Malware Research

24 Jul 2024 12:25

Thanks @Libranalysis

Malware Research

24 Jul 2024 12:24

Recently I have been monitoring a simple yet very busy stealer abusing github as its downloader for second stager

Malware Research

24 Jul 2024 12:23

The free version too, but is limited

Malware Research

24 Jul 2024 09:50

Folks do let me know if I am wrong, but do we have any tool, " which can help us search certain code fragements on github, on a daily basis, like lets say, I wanna search "H-e-l-l-o,W_o_r_l_d" content ovet entire github code repositories and on a daily basis, and once we have any new repo updating this content, we get a hit or a notification.."