#GhidraScript - Twitter Hashtag

over 5 years ago

Updated the #MustangPanda / #RedDelta #PlugX config extractor to account for the changes see in https://t.co/qGVJCV0yRs #ghidrascript can be found here: https://t.co/HpuvHfbyk1 #ghidra

avallach (@[email protected]) @xorhex

over 5 years ago

#RedDelta "version" of #PlugX 43.254.217.165:110 43.254.217.165:80 https://t.co/3Xn1OIJU4Q Different/New: -The encrypted .dat file is decrypted with a 17 byte key versus a 10 byte key -The embedded config contains an additional field https://t.co/x8c5G77xqU #MustangPanda 1/2

xorhex's tweet photo. #RedDelta "version" of #PlugX

43.254.217.165:110
43.254.217.165:80

https://t.co/3Xn1OIJU4Q

Different/New:
-The encrypted .dat file is decrypted with a 17 byte key versus a 10 byte key
-The embedded config contains an additional field

https://t.co/x8c5G77xqU

#MustangPanda 1/2 https://t.co/g7reIudXFI

2

42

9

2

0

10

1

0

avallach (@[email protected]) @xorhex

over 5 years ago

Released a #ghidrascript to extract out the embedded config in the #SLOTHFULMEDIA RAT component. Script: https://t.co/wlZh7HgBFA Samples tested against (see associated Incidents): https://t.co/t3U2Ik24CZ Recording: https://t.co/oGpanCojnK #QueenOfClubs #PowerPool #ghidra

xorhex's tweet photo. Released a #ghidrascript to extract out the embedded config in the #SLOTHFULMEDIA RAT component.

Script: https://t.co/wlZh7HgBFA

Samples tested against (see associated Incidents): https://t.co/t3U2Ik24CZ

Recording: https://t.co/oGpanCojnK

#QueenOfClubs #PowerPool #ghidra https://t.co/JFmO3lJzhe

1

12

7

1

0

Karsten Hahn @struppigel

about 6 years ago

"ZLoader String Obfuscation" (by @freiteiler) ➡️Ghidra script to deobfuscate strings automatically ➡️deobfuscation script provided here: https://t.co/dDsTf7FAYm #Ghidra #Blog #ZLoader #GhidraScript https://t.co/umD2Nta62n

struppigel's tweet photo. "ZLoader String Obfuscation"
(by @freiteiler)

➡️Ghidra script to deobfuscate strings automatically
➡️deobfuscation script provided here: https://t.co/dDsTf7FAYm

#Ghidra #Blog #ZLoader #GhidraScript
https://t.co/umD2Nta62n https://t.co/Oi2W0hWAvT

0

22

2

0

Top Tweets for #GhidraScript

Last Seen Hashtags on Sotwe

Trends for you

Most Popular Users