#CONFUSEREX - Twitter Hashtag

about 2 years ago

🦔 📹 New Video: ConfuserEx 2 deobfuscation with Python and dnlib #MalwareAnalysisForHedgehogs #ConfuserEx #Python #dnlib https://t.co/ykO1DfIon5

1

140

47

53

9K

Jonathan Peters

@cod3nym

almost 3 years ago

#100DaysofYARA Day 4: Today we are detecting #ConfuserEx binaries without any watermarks. Messing a bit with hex strings and contributing to #UnprotectProject I wrote a blog post explaining the process behind the creation of this rule: https://t.co/YsVu7GMfHz Find the Yara rule here: https://t.co/KtzZiqHZHy

cod3nym's tweet photo. #100DaysofYARA Day 4:
Today we are detecting #ConfuserEx binaries without any watermarks. Messing a bit with hex strings and contributing to #UnprotectProject

I wrote a blog post explaining the process behind the creation of this rule:
https://t.co/YsVu7GMfHz

Find the Yara rule here:
https://t.co/KtzZiqHZHy

3

41

9

14

11K

Jiří Vinopal

@vinopaljiri

almost 3 years ago

How long does it take you to deobfuscate ConfuserEx2 (#ConfuserEx 1.6.0+-)?🤓 Finally got some time to make my ConfuserEx2 string decryptor more robust (switched to #AsmResolver and #Harmony) to handle customized versions...😊💪

4

182

41

67

24K

GovCERT.ch @GovCERT_CH

about 4 years ago

We published a tech paper on the #ConfuserEx obfuscation mechanism of a Ginzo .NET sample. This class of obfuscator is known as code flatteners. We describe how it can be dealt with using a Python script + IDA Pro Blog: 👉https://t.co/wabQ5iu6HY Paper: 👉https://t.co/wsMCSSclwC

GovCERT_CH's tweet photo. We published a tech paper on the #ConfuserEx obfuscation mechanism of a Ginzo .NET sample. This class of obfuscator is known as code flatteners. We describe how it can be dealt with using a Python script + IDA Pro

Blog:
👉https://t.co/wabQ5iu6HY

Paper:
👉https://t.co/wsMCSSclwC https://t.co/VwLgqCuzyQ

1

286

114

61

0

PwnLab.Me @PwnlabMe

about 5 years ago

[EN] ConfuserEx Deep Analysis ~ AntiTamper Our new article published! We look forward to our article written by; @HereJeez #confuserex #ReverseEngineering #malwareanalysis #CyberSecurity

PwnlabMe's tweet photo. [EN] ConfuserEx Deep Analysis ~ AntiTamper

Our new article published! We look forward to our article written by;

@HereJeez

#confuserex #ReverseEngineering #malwareanalysis #CyberSecurity https://t.co/zNvftwVkuQ

0

9

0

MalwareLab @malwarelab_eu

over 5 years ago

#MalwareLabDaily 0x55 Collection of @dotnet deobfuscators for lot of known #Dotnet obfuscators often used for packing the malware samples. #Confuser #ConfuserEx #Themida #Agile #Phoenix #Obfuscation #MalwareAnalysis https://t.co/39Qk23hZ5R

0

7

3

1

0

Albert Zsigovits

@albertzsigovits

over 6 years ago

Interesting #twitch bot. Source is obfuscated with #ConfuserEx #NETReactor. Opens threads through a list of proxies to boost viewer stat. Login is checked via licensefile through rubot[.]ovh/applications/nexus/interface/licenses/?info #SupremeBOT @Twitch @malwrhunterteam @JayTHL

albertzsigovits's tweet photo. Interesting #twitch bot. Source is obfuscated with #ConfuserEx #NETReactor. Opens threads through a list of proxies to boost viewer stat. Login is checked via licensefile through rubot[.]ovh/applications/nexus/interface/licenses/?info
#SupremeBOT @Twitch @malwrhunterteam @JayTHL https://t.co/Q4OOQEHF8q

1

5

0

NI@FI@70 @ni_fi_70

over 6 years ago

@James_inthe_box @casual_malware @JAMESWT_MHT @JayTHL @wwp96 it needs .Net 3.5 to run, but anyway currently i'm also not able to run it. Related: #ConfuserEx and # KurdishCoderProducts https://t.co/biGIDgKioj

1

3

1

0

J.A.R.V.I.S @peppermalware

over 7 years ago

Analysis of .Net Deucalion IrcBot Sample Obfuscated with ConfuserEx+KoiVM https://t.co/rQKEvevylk In the article is described how to use WinDbg sos debugging extension to reach malware deobfuscated data #MALWARE #DOTNET #CONFUSEREX #KOIVM #WINDBG #IRCBOT