#MalDuck - Twitter Hashtag

ςεяβεяμs - мαℓωαяε яεsεαяςнεя & мαℓωαяε gεиεтιςιѕт @c3rb3ru5d3d53c

about 3 years ago

We adapted @AnFam17 (RussianPanda's) config extractor for #DynamicRAT to work with #malduck and #mwcfg. Enjoy! 😘 Get it HERE 👇 https://t.co/oKzT94Qoux https://t.co/O26qJEQaLW

c3rb3ru5d3d53c's tweet photo. We adapted @AnFam17 (RussianPanda's) config extractor for #DynamicRAT to work with #malduck and #mwcfg. Enjoy! 😘 Get it HERE 👇

https://t.co/oKzT94Qoux
https://t.co/O26qJEQaLW https://t.co/EmfHSLBqph

PandaRE 🐼 🇺🇦

@PandaRE__

over 3 years ago

Wrote a "quick" configuration extractor for #DynamicRAT mentioned here https://t.co/dJGcxVRGT7 Config extractor: https://t.co/qlUTxMrwzF More payloads found based on the Yara rule: https://t.co/JinVtP4GVK Happy Friday! 🌻

PandaRE__'s tweet photo. Wrote a "quick" configuration extractor for #DynamicRAT mentioned here https://t.co/dJGcxVRGT7

Config extractor: https://t.co/qlUTxMrwzF

More payloads found based on the Yara rule: https://t.co/JinVtP4GVK

Happy Friday! 🌻 https://t.co/CPqgQcsL6x

2

91

25

19

40K

1

54

17

12

13K

Robert Giczewski @lazy_daemon

over 3 years ago

Check out Part II of my blog series about #TrueBot. In this post I explain how I wrote a static unpacker using #python🐍 and #malduck🦆. Next post, I will focus on TrueBot's capabilities before I will then share some details about config extraction.#ta505 https://t.co/zlkx5BwgZc

0

24

8

9

3K

Robert Giczewski @lazy_daemon

over 3 years ago

I have started a blog series about TrueBot. The first post is about how the TrueBot samples I know are packed, how to identify the decryption function and how to unpack. In my next post, I will focus on unpacking with #Python and #malduck #ta505 #truebot https://t.co/KlMxWvnlHm

1

56

20

26

10K

ςεяβεяμs - мαℓωαяε яεsεαяςнεя & мαℓωαяε gεиεтιςιѕт @c3rb3ru5d3d53c

about 4 years ago

I adapted @jaydinbas's #knotweed #jumplump #malware config extractor to work with #malduck and #mwcfg. It also comes with #yara signature created with the help of #binlex. Enjoy! 😘 https://t.co/O26qJEQaLW

c3rb3ru5d3d53c's tweet photo. I adapted @jaydinbas's #knotweed #jumplump #malware config extractor to work with #malduck and #mwcfg. It also comes with #yara signature created with the help of #binlex.

Enjoy! 😘

https://t.co/O26qJEQaLW https://t.co/ovEOw28ai8

Johann Aydinbas @jaydinbas

about 4 years ago

I wrote a config extractor for #Jumplump samples from the #Knotweed report. Requires pefile and Capstone to work. Samples from the report all contain the same config though, so no surprises there Grab it here: https://t.co/O35oRzAIha

jaydinbas's tweet photo. I wrote a config extractor for #Jumplump samples from the #Knotweed report. Requires pefile and Capstone to work.
Samples from the report all contain the same config though, so no surprises there

Grab it here:
https://t.co/O35oRzAIha https://t.co/T4LyTXYl6j

1

77

24

13

0

41

11

7

0

Jiří Vinopal

@vinopaljiri

about 4 years ago

We almost all know about one of the best and helpful Python plugin for reversing #Malduck @CERT_Polska_en but did you know you can actually work via Malduck with IDA memory layout right from #IDAPython ?? ONLY 172 Github stars😠😡😁 #reversing #IDA https://t.co/zlWzEbNnL7

vinopaljiri's tweet photo. We almost all know about one of the best and helpful Python plugin for reversing #Malduck @CERT_Polska_en but did you know you can actually work via Malduck with IDA memory layout right from #IDAPython ?? ONLY 172 Github stars😠😡😁 #reversing #IDA

https://t.co/zlWzEbNnL7 https://t.co/tW8xdZOmYh

2

85

17

0

Jiří Vinopal

@vinopaljiri

over 4 years ago

The most helpful python modules for MA and RE. Add also excellent #Malduck plugin 👌

Thomas Roccia 🤘

@fr0gger_

over 4 years ago

I published a blogpost that presents ten useful python libraries that I use for malware analysis and reversing (with code examples)! Which one are you using the most? 🐍 #python #malware #cybersecurity #infosec https://t.co/4q7N0ydQJa

5

501

194

173

0

2

22

1

4

0

Frank Boldewin

@r3c0nst

almost 5 years ago

I build a small repository containing Python scripts mainly written for malware research purposes. The intend is to help students to get a better understanding how malware related tasks can be automated. More updates soon. Enjoy! https://t.co/PSdUBhDAx9 #Malduck #Malware #DFIR

r3c0nst's tweet photo. I build a small repository containing Python scripts mainly written for malware research purposes. The intend is to help students to get a better understanding how malware related tasks can be automated. More updates soon. Enjoy! https://t.co/PSdUBhDAx9 #Malduck #Malware #DFIR https://t.co/5rL6t8kTEQ

5

269

95

69

0

CERT Polska

@CERT_Polska

over 5 years ago

Kolejny artykuł w naszej serii o Kartonie. Wyjaśnimy czym jest #malduck🦆 i jak można go użyć do ekstrakcji konfiguracji ze złośliwego oprogramowania. https://t.co/Rsmziiitnt

0

11

4

1

0

ςεяβεяμs - мαℓωαяε яεsεαяςнεя & мαℓωαяε gεиεтιςιѕт @c3rb3ru5d3d53c

over 5 years ago

Introducing #mwcfg, a feature full #MalDuck #malware configuration extractor CLI utility. Feel free to contribute your own modules/extractors. Works with #mwdb #karton #framework. Special thanks to @CERT_Polska! https://t.co/O26qJEQaLW https://t.co/iVYTPSuEmE

c3rb3ru5d3d53c's tweet photo. Introducing #mwcfg, a feature full #MalDuck #malware configuration extractor CLI utility.

Feel free to contribute your own modules/extractors.

Works with #mwdb #karton #framework.

Special thanks to @CERT_Polska!

https://t.co/O26qJEQaLW
https://t.co/iVYTPSuEmE https://t.co/yniEe4kcFy

2

108

36

15

0

Top Tweets for #MalDuck

Last Seen Hashtags on Sotwe

Trends for you

Most Popular Users