dfir it!

responding to incidents with candied bacon

RSS

Blog
Archives

Category: Dridex

2015

Analyst’s Handbook - Analyzing Weaponized Documents

Jun 17 2015

posted in apt, dridex, remnux

Recent Posts

The Supreme Backdoor Factory
Down the rabbit hole with packaged PowerShell scripts
TekDefense Network Challenge 001 - Walkthrough
Webshells: Rise of the Defenders (Part 4)
Webshells - Every Time the Same Story…(Part 3)

GitHub Repos

unsapien
Python script to extract embedded data from binaries generated by SAPIEN Script Packager
supreme-backdoor-factory
This repository contains additional files mentioned in the blog post

@dfir-it on GitHub

Tweets

Tweets by @dfir_it

Copyright © 2019 - dfir.it! - Powered by Octopress - Theme by Gehaxelt and IT Solutions Neef