#IPfuscation - Twitter Hashtag

about 4 years ago

Built a new tool, based on older poc i made, #hellshell can generate ipv4/ ipv6 / mac addresses arrays to replace your shellcode, in a automated way, with the code needed to decode, take a look here: https://t.co/TADBOBQgfr #hellshell #ipfuscation #macfuscation

4

155

52

32

0

Pistus @jorgemieres

about 4 years ago

📢 #IPfuscation by #Hive #ransomware 🔃 "#Threat analysts have discovered a new obfuscation technique used by the #HiveRansomware gang, which involves IPv4 addresses and a series of conversions that eventually lead to downloading a #CobaltStrike beacon." https://t.co/WPYU0vaSTo

0

2

3

1

0

Migo

@MigoKed

about 4 years ago

A packer is used to execute shellcode for downloading a #cobaltstrike Beacon, found by @malwaredisciple and friends on an IR engagement. The sample leverage an interesting obfuscation technique that we have dubbed “#IPfuscation.” https://t.co/L7xxQl0pY6

0

7

2

1

0

c7m @0xc7m

about 4 years ago

New #IPfuscation trick to hide payload. Obfuscation technique used by the Hive #ransomware gang, which involves IPv4 addresses and a series of conversions that eventually lead to downloading a #Cobalt Strike beacon #infosec #redteam #blueteam https://t.co/dHQWPzhu8u

0

5

3

0

Nicola Vanin @nicolarsr

about 4 years ago

Una nuova tecnica di #IPfuscation utilizzata dalla banda di #ransomware #Hive, che coinvolge indirizzi IPv4 e una serie di conversioni alla fine portano al #download di un beacon #CobaltStrike. Il #payload stesso è offuscato assumendo la forma di un array di indirizzi ASCII IPv4

nicolarsr's tweet photo. Una nuova tecnica di #IPfuscation utilizzata dalla banda di #ransomware #Hive, che coinvolge indirizzi IPv4 e una serie di conversioni alla fine portano al #download di un beacon #CobaltStrike.
Il #payload stesso è offuscato assumendo la forma di un array di indirizzi ASCII IPv4 https://t.co/SAdC6SSG0u

1

4

2

1

0

NULL

@NUL0x4C

about 4 years ago

released #hive's IPfuscation Tech, in which the shellcode is converted to an array of ip addresses to evade detection, u can try it out here: #shellcode #IPfuscation https://t.co/LsQJV9nj4G

4

127

56

30

0

Alfon 🎸 Seguridad y Redes @seguridadyredes

about 8 years ago

#IPFuscation was a technique that we just named on Twitter after @LucaBongiorni demanded a name! It's a technique that allows for IP addresses to be represented in hexadecimal, octal, or a combination, instead of the decimal encoding that we are used to. https://t.co/Qfk8XJ2410