Order of Six Angles
@orderofsixangles
4.64K subscribers
385 photos
27 videos
42 files
1.95K links
Х.Р.А.М Сатаны

www.orderofsixangles.com

Thatskriptkid
Download Telegram
About
Blog
Apps
Platform
Join
Order of Six Angles
4.64K subscribers
Order of Six Angles
Троян

https://play.google.com/store/apps/details?id=com.recover.picctures.appa

*найдено by https://twitter.com/ReBensk
649 viewsedited  
Order of Six Angles
у него там в твиттере кстати куча ссылок на малварь в гугл плей, можете качать/смотреть
640 viewsedited  
Order of Six Angles
rat на го

https://www.intezer.com/blog/research/operation-electrorat-attacker-creates-fake-companies-to-drain-your-crypto-wallets/

качать

https://bazaar.abuse.ch/browse/tag/ElectroRAT/
Intezer
ElectroRAT: Attacker Creates Fake Companies to Drain Crypto Wallets
Wide-spread campaign already with thousands of victims promotes trojanized applications on niche cryptocurrency forums and social media.
2.3K views
Order of Six Angles
Order of Six Angles
rat на го https://www.intezer.com/blog/research/operation-electrorat-attacker-creates-fake-companies-to-drain-your-crypto-wallets/ качать https://bazaar.abuse.ch/browse/tag/ElectroRAT/
Чуть более расширенная инфа

https://twitter.com/AbbyMCH/status/1346470180247937027?s=19
Twitter
Avigayil Mechtinger
[1/7] Operation #ElectroRAT is a new campaign that takes sizable measures to steal crypto wallets. For more information about the operation - https://t.co/CWLnOevKir The following is a technical analysis-> @IntezerLabs
647 views
Order of Six Angles
Таких статей и так много, но я думаю лишним не будет. Лично я стараюсь все руками собрать.

Building a Custom Malware Analysis Lab Environment

https://labs.sentinelone.com/building-a-custom-malware-analysis-lab-environment/
SentinelOne
Building a Custom Malware Analysis Lab Environment - SentinelLabs
Building the right malware analysis lab is the first step for every researcher. Use this guide and download our free custom tools to aid your research.
739 views
Order of Six Angles
NTFS Remote Code Execution (CVE-2020-17096) Analysis

https://blog.zecops.com/vulnerabilities/ntfs-remote-code-execution-cve-2020-17096-analysis/
Jamf
Jamf Threat Labs | Blog
711 views
Order of Six Angles
Order of Six Angles
Таких статей и так много, но я думаю лишним не будет. Лично я стараюсь все руками собрать. Building a Custom Malware Analysis Lab Environment https://labs.sentinelone.com/building-a-custom-malware-analysis-lab-environment/
обычно у меня стоит

dnSpy
ilSpy
de4dot
ssdeep
trid
yara
pebear
pestudio
peview
PPEE(puppy)
impfuzzy/imphash
binary ninja
ida pro
capa
windbg
x64dbg
HxD
process hacker
regshot
api monitor
sysinternals
floss
pe-sieve
resource hacker
wireshark
inetsim
office/foxit reader/chrome
Explorer Suite
+какие-то свои скрипты

Очень минимальный набор, но вроде хватает))
1.1K viewsedited  
Order of Six Angles
и есть еще вот такая мини статья

https://zero2auto.com/2020/06/14/setting-up-a-malware-analysis-environment/
Zero2Automated Blog
Setting Up a Malware Analysis Environment
Inside our Zero2Automated course, we didn’t really cover how to setup a proper malware analysis environment as it is more of an advanced course rather than a beginner course. However, we had …
880 views
Order of Six Angles
еще раньше была локальная cuckoo sandbox, но опять ставить ее просто лень
857 views
Order of Six Angles
A PowerShell script that attempts to help malware analysts hide their VMware Windows VM's from malware that may be trying to evade analysis.

https://github.com/d4rksystem/VMwareCloak
GitHub
GitHub - d4rksystem/VMwareCloak: A PowerShell script that attempts to help malware analysts hide their VMware Windows VM's from…
A PowerShell script that attempts to help malware analysts hide their VMware Windows VM's from malware that may be trying to evade analysis. - d4rksystem/VMwareCloak
862 views
Order of Six Angles
Order of Six Angles
Охуенная ваще табличка, да и самого автора знаю, тоже охуенный чел)) Это он кстати недавно линукс вирус выкладывал (https://t.me/OrderOfSixAngles/855) И блог у него классный https://www.guitmz.com/
Этот чувак также публиковал в своем блоге, который я скидывал, статью про криптор

https://www.guitmz.com/linux-elf-runtime-crypter/

И теперь его тулзу используют апт

https://www.bleepingcomputer.com/news/security/linux-malware-authors-use-ezuri-golang-crypter-for-zero-detection/amp/?__twitter_impression=true
Guitmz
Linux ELF Runtime Crypter
Ezuri: A Simple Linux ELF Runtime Crypter Using memfd_create Syscall
964 viewsedited  
Order of Six Angles
введение в yara

https://tryhackme.com/room/yara
TryHackMe
Yara
Learn the applications and language that is Yara for everything threat intelligence, forensics, and threat hunting!
7.71K views
Order of Six Angles
zeppelin ransomware скачать

https://bazaar.abuse.ch/sample/442bf867c8738c7231ff09db0715ec79d0ae15c050fbd46946c45b76a040d024/
bazaar.abuse.ch
MalwareBazaar - Buran (Zeppelin)
Buran has been detected as Zeppelin by MalwareBazaar
815 viewsedited  
Order of Six Angles
Order of Six Angles
zeppelin ransomware скачать https://bazaar.abuse.ch/sample/442bf867c8738c7231ff09db0715ec79d0ae15c050fbd46946c45b76a040d024/
A Golang wrapper around MalwareBazaar's public API

https://github.com/LloydLabs/go-malwarebazaar
GitHub
GitHub - LloydLabs/go-malwarebazaar: MalwareBazaar public API bindings for Go
MalwareBazaar public API bindings for Go. Contribute to LloydLabs/go-malwarebazaar development by creating an account on GitHub.
765 views
Order of Six Angles
Order of Six Angles
Этот чувак также публиковал в своем блоге, который я скидывал, статью про криптор https://www.guitmz.com/linux-elf-runtime-crypter/ И теперь его тулзу используют апт https://www.bleepingcomputer.com/news/security/linux-malware-authors-use-ezuri-golang-crypter…
еще по теме

https://blog.aquasec.com/fileless-malware-container-security?hs_amp=true

https://mobile.twitter.com/TheHackersNews/status/1347552871860948994

https://cybersecurity.att.com/blogs/labs-research/malware-using-new-ezuri-memory-loader

https://twitter.com/ESETresearch/status/1321246274570620929?s=19
715 viewsedited  
Order of Six Angles
How You Can Start Learning Malware Analysis


https://zeltser.com/start-learning-malware-analysis/
Lenny Zeltser
How You Can Start Learning Malware Analysis
Malware analysis combines skills from incident response, forensics, and engineering, making it an accessible field for many security professionals. A practical approach to learning involves understanding where current skills fit into the analysis process…
734 views
Order of Six Angles
The malware analyst’s guide to aPLib decompression

https://0xc0decafe.com/malware-analysts-guide-to-aplib-decompression/
0Xc0Decafe
The malware analyst’s guide to aPLib decompression
From l0w to h1gh level - full stack cyber!
690 views
Order of Six Angles
Order of Six Angles
Weaponizing Nim for implant development and general offensive operations https://github.com/byt3bl33d3r/OffensiveNim
еще по теме

Bypassing Windows protection mechanisms & Playing with OffensiveNim

https://s3cur3th1ssh1t.github.io/Playing-with-OffensiveNim/

Open-Source PE Packer

https://github.com/phra/PEzor
s3cur3th1ssh1t.github.io
Bypassing Windows protection mechanisms & Playing with OffensiveNim | S3cur3Th1sSh1t
In this post I’m telling a short story from an environment I faced some time ago and how to handle the situation bypassing Constrained Language Mode and Appl...
704 views
Order of Six Angles
Хочется жрать
655 views
Order of Six Angles
💀 Под конец прошлого года я поучаствовал в записи подкаста, надеюсь он когда-нибудь отредактируется и выйдет )) 💀
633 views
Order of Six Angles
Воркшоп по Advanced Binary Analysis (Ghidra)

https://gosecure.github.io/presentations/2020-05-15-advanced-binary-analysis/#0
gosecure.github.io
Advanced Binary Analysis
Hands-on tutorial on reverse engineering. It includes exercises on obfuscation and packers.
765 viewsedited