Order of Six Angles

Dealing with obfuscated RTF files

https://isc.sans.edu/forums/diary/Dealing+with+obfuscated+RTF+files/23169/

1.28K views09:13

Transacted Hollowing - a PE injection technique. A hybrid between Process Hollowing and Process Doppelgänging.

https://github.com/hasherezade/transacted_hollowing

GitHub

GitHub - hasherezade/transacted_hollowing: Transacted Hollowing - a PE injection technique, hybrid between ProcessHollowing and…

Transacted Hollowing - a PE injection technique, hybrid between ProcessHollowing and ProcessDoppelgänging - hasherezade/transacted_hollowing

1.39K views10:24

Order of Six Angles

Funky malware formats

https://speakerdeck.com/hshrzd/funky-malware-formats

Speaker Deck

Funky Malware Formats

Presented at SAS 2019: https://sas.kaspersky.com/#wednesday-april-10-2019-conference-day-2-sas
Video #1: https://www.youtube.com/watch?v=0ndK-Az0RO4
V…

1.43K views07:53

Order of Six Angles

ёбаный питон

1.41K views09:03

Order of Six Angles

malware/monero

1.22K views10:41

Order of Six Angles

Transacted Hollowing - a PE injection technique. A hybrid between Process Hollowing and Process Doppelgänging. https://github.com/hasherezade/transacted_hollowing

Process Ghosting

https://github.com/hasherezade/process_ghosting

GitHub

GitHub - hasherezade/process_ghosting: Process Ghosting - a PE injection technique, similar to Process Doppelgänging, but using…

Process Ghosting - a PE injection technique, similar to Process Doppelgänging, but using a delete-pending file instead of a transacted file - hasherezade/process_ghosting

1.26K views10:43

Order of Six Angles

malware/monero

этот кусок я нашел в redline stealer кстати (не тот что из этой статьи, а просто рандомный)

https://therecord.media/nft-creators-tricked-into-installing-malware-in-highly-targeted-attack/

The Record

NFT creators tricked into installing malware in highly targeted attack

Multiple digital artists and creators of non-fungible tokens (NFT) were at the center of a highly targeted malware campaign last week during which a threat actor tried to swipe their hard-earned profits.

1.27K viewsedited 12:29

Order of Six Angles

malware/monero

Но образец по всей видимости тестовый. Закриптованные строки должны содержать C2, но не декриптятся в валидный адрес хз пачиму

1.27K views12:32

Order of Six Angles

на то что он тестовый также указывает вывод MessageBox с результатом декрипта

1.36K views12:37

Order of Six Angles

The purpose of BinLex is to extract basic blocks and functions as traits from binaries then compare these traits amonst other trait sets using genetic programming.

https://github.com/c3rb3ru5d3d53c/binlex

GitHub

GitHub - c3rb3ru5d3d53c/binlex: A Binary Genetic Traits Lexer Framework

A Binary Genetic Traits Lexer Framework. Contribute to c3rb3ru5d3d53c/binlex development by creating an account on GitHub.

1.75K views13:30

Order of Six Angles

malware/monero

Способен извлекать пароли Хрома версией выше 80. Исходники можно найти тут и тут

@OrderOfSixAngles

119K viewsedited 13:41

Order of Six Angles

В дополнение достает данные карт из хрома, чего нет в вышеупомянутых репозиториях

2.01K views13:45

Order of Six Angles