Análise de ameaças abrangente, IOCs e relatórios de pesquisa sobre RAT, Infostealer, Backdoor e outras famílias de malware.
CobaltStrike2 775KB file.exe. @config @connect @unsupported method @key not found at isareti hata formati. CreateMutexW. rpc.me potansiyel C2.
QuasarRAT3 920KB prick.exe saldirgan isim. SysNtQuerySystemInformation2 SysNtQueryInformationProcess2 direkt syscall ntdll hook bypass. F2173046D565A390 64 karakter hex 256-bit anahtar.
LummaC2 1.1MB Maxonic.exe sahte marka taklidi. mjjjC2 c2=66 C2v|Bd fbc2& c2/d bes c2 substring. incompatible version rtlgetversion surüm kontrol.
XWorm2 728KB Contract.exe is sozlesmesi lurü. RecargarPanels Ispanyolca yeniden yükle panel UI string. panelActions panel eylemler. Aggregate modül tipi.
NovaStealer version 3.6.19 4MB Request_For_Quotation_9505ADC.jse JSE lurü. config loaded C2 olay dinleyici. v1788 sayisal obfuscation. HACK check module exports yorumu.
LaplasClipper 8KB minimal. clipper.guru C2 domain. ApiKey konfigürasyon alani. _runMutex mutex. f0cd0c3938331a84425c6e784f577ccd87bb667cfdb44cc24 hash kimlik.
SectopRAT 1MB GARDEN.ps1 PowerShell. locationPhysicians4230.su Sovyet .su C2. NeckImport lt 3 yeniden deneme dongusu. 80 karakter kimlik dogrulama tokeni.
Trigona 535KB build.exe gelistirici build ismi. xigcgabbzkswmicmkatl 20 karakter rastgele mutex. GetTickCount64 GetTickCount cift anti-debug.
BlackSuit 20MB macOSx_merged.zip python311.dll Python 3.11 gömülü runtime. cannot calculate path configuration without GIL mesaji. amauryfa gmail CPython gelistirici.
DCRat2 sostener1.vbs Ispanyolca VBScript. base64 powershell ExecutionPolicy Bypass File MMemu. geutqmonpmjthuux DGA rastgele C2 domain.
Akira2 1MB w.exe. akiralkzxzq2dsrzsrvbr2xgbbu2wgsmxryd4csgfameg52n7efvr2id.onion 4323440794 kurban yolu. .akira uzantisi. akira_readme.txt. arika yazim hatasi.
Matanbuchus 1.2MB DLL. Session key sent b oturum anahtari log mesaji özel kripto el sikisma. CreateMutexW mutex. no malloc support C runtime gonullu mesaj.
Gootloader 83MB Legal_Case_Management_Guide_2025.zip SEO zehirleme hukuki belge lurü. OpenMutexW CreateMutexW mutex cift kontrol. GetTickCount anti-debug.
GuLoader2 815KB recibo4747.exe Ispanyolca makbuz lurü. DEFAULT Control Panel International ResourceLocale cift locale tespiti. RegDeleteKeyW registry silme.
Pandora 509KB. .pandora sifreli dosya uzantisi. passwordPASSWORDpassword cok dilli uygulama sifre brute force pattern. OpenMutexA CreateMutexA mutex.
WhisperGate 544KB. emitnuR.me eroC.me gnidaerhT.me ters .NET namespace obfuscation tespiti atlama. Ukrayna Ocak 2022 siber savas silici.
ZLoader2 527KB HexaPort.dll. INJECTDATA web enjeksiyon sablon degiskeni bankaci site HTML degistirme. GetTickCount64 IsDebuggerPresent anti-debug.
HiddenTear 937KB FlatWare.exe. endyou.xn--6frz82g listen.php Japonca Punycode C2. C Users Loli FlatChestWare PDB. encryptAES bytesToBeEncrypted SendPassword CreatePassword.
HermeticWiper 122KB DLL. WNetAddConnection2W WNetCancelConnection2W ag surucusu baglanip silme. Ukrayna 2022 siber savas silici.
SilenceRAT 756KB DLL. SSL_CTX_config OpenSSL TLS sifreli C2 kanali. C21kyy b654c2 4c26 c2 MCC2UQ bes c2 substring. portuguese-brazilian Brezilya yerel.