Throwing LOLBIN a tar ball May 2, 2021 in Living off the land, LOLBins... 2021-05-02 22:42:11 | 阅读: 171 | 收藏 | www.hexacorn.com compress bzip2 lolbin grzip xz

Gup \o/ bin Gup \o/ binMay 2, 2021 in Living off the lan... 2021-05-02 22:39:03 | 阅读: 176 | 收藏 | www.hexacorn.com gup unzipto updater windows download

FTP.EXE Lolbin v2 May 2, 2021 in Living off the land, LOLBins... 2021-05-02 20:38:04 | 阅读: 174 | 收藏 | www.hexacorn.com lolbin comspec living lolbins 0gtweet

Playing CAPAeira with Yara rules April 20, 2021 in Yara sigs... 2021-04-21 06:46:39 | 阅读: 171 | 收藏 | www.hexacorn.com capa cr fm machine sigs

Yara & maldoc pics April 7, 2021 in Yara sigs... 2021-04-08 07:06:06 | 阅读: 164 | 收藏 | www.hexacorn.com spot sig malicious sigs 6a

ELF sections stats March 13, 2021 in Clustering, linux... 2021-03-14 08:02:01 | 阅读: 250 | 收藏 | www.hexacorn.com ksymtab mode2 gpl eh rodata

Beyond good ol’ Run key, Part 133 March 5, 2021 in Anti-Forensics, Autostart (... 2021-03-06 08:18:20 | 阅读: 261 | 收藏 | www.hexacorn.com software javasoft launch4j development malicious

Event ID 7039 – out…pid a pid February 26, 2021 in Compromise Detection, S... 2021-02-27 04:18:16 | 阅读: 211 | 收藏 | www.hexacorn.com sysmon scm processes badly liberty

Beyond good ol’ Run key, Part 132 February 24, 2021 in Anti-Forensics, Autosta... 2021-02-25 08:19:41 | 阅读: 215 | 收藏 | www.hexacorn.com specifies loaded autostart poor documenting

DownLOLoloaders DownLOLoloadersFebruary 19, 2021 in Anti-For... 2021-02-19 09:00:17 | 阅读: 209 | 收藏 | www.hexacorn.com attractive download retrieved combing handy

Yet another secret of hosts file February 18, 2021 in Anti-*, Anti-Forensics,... 2021-02-19 08:41:52 | 阅读: 242 | 收藏 | www.hexacorn.com windows unicode16 dnsrslvr hostss

Misre-presentation host February 8, 2021 in Living off the land, LOL... 2021-02-09 08:34:12 | 阅读: 221 | 收藏 | www.hexacorn.com iexplore clickonce

Beyond good ol’ Run key, Part 131 February 6, 2021 in Anti-Forensics, Autostar... 2021-02-07 06:44:08 | 阅读: 251 | 收藏 | www.hexacorn.com microsoft software editorhklm mhtml editorhkcu

Desperate downloader lolbin February 5, 2021 in LOLBins... 2021-02-06 08:41:33 | 阅读: 263 | 收藏 | www.hexacorn.com msoxmled verb inetcache proxy download

Mitre Domin&trix Mitre Domin&trixFebruary 3, 2021 in Mitre At... 2021-02-04 07:56:07 | 阅读: 341 | 收藏 | www.hexacorn.com domin trix forth utopian promoted

Recoll – a perfect tool for Threat Intelligence Analysts and other Report Readers February 1, 2021 in Productivity... 2021-02-02 04:10:08 | 阅读: 235 | 收藏 | www.hexacorn.com caught docfetcher searchable hoarder tones

aMus(ing)Notification January 3, 2021 in Archaeology, LOLBins, Und... 2021-01-04 08:31:56 | 阅读: 252 | 收藏 | www.hexacorn.com dialog invocations toast

handle..ing SHAllocShared December 25, 2020 in Code Injection... 2020-12-26 08:53:14 | 阅读: 276 | 收藏 | www.hexacorn.com memory shlwapi relies

Beyond Fear Beyond FearDecember 22, 2020 in Preaching... 2020-12-22 09:50:25 | 阅读: 273 | 收藏 | www.hexacorn.com fear programmers genius

Propagate, Ribbonate December 22, 2020 in Anti-Forensics, Code In... 2020-12-22 09:09:18 | 阅读: 298 | 收藏 | www.hexacorn.com hwnd windows analysis injection