Trojan Archives - /dev/random

[SANS ISC] PowerShell Dropper Delivering Formbook

November 19, 2020 Malware, SANS Internet Storm Center, Security Leave a comment

I published the following diary on isc.sans.edu: “PowerShell Dropper Delivering Formbook“: Here is an interesting PowerShell dropper that is nicely obfuscated and has anti-VM detection. I spotted this file yesterday, called ‘ad.jpg’ (SHA256:b243e807ed22359a3940ab16539ba59910714f051034a8a155cc2aff28a85088). Of course, it’s not a picture but a huge text file with Base64-encoded data. The VT score is therefore

[SANS ISC] Malware Delivered Through MHT Files

September 13, 2018 Malware, SANS Internet Storm Center, Security Leave a comment

I published the following diary on isc.sans.edu: “Malware Delivered Through MHT Files“: What are MHT files? Microsoft is a wonderful source of multipleÂ file formats. MHT files are web page archives. Usually, a web page is based on a piece of HTML code with links to external resources, images and other