corpus.blog
41554 blogs · 4,417,066 posts Claim your blog
Record · corpus.blog/posts/01a0d209-20da-73d8-9a47-baadf4ce809e

theZoo: Win32.OnionDuke.B

squiblydoo.blog · published 30 January 2021

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at squiblydoo.blog Wayback capture
0blogs citing
First cited
—
Most recent
—
Rank this month
not ranked
Links from this post
16
Words captured
1,827

Cited by

No blog we hold has cited this post yet.

Links from this post

Link
Host
https://nostarch.com/malware
nostarch.com
https://github.com/horsicq/DIE-engine/releases
github.com
https://docs.microsoft.com/en-us/windows/win32/api/shlobj_core/nf-shlobj_core-shgetfolderpatha
docs.microsoft.com
https://docs.microsoft.com/en-us/windows/win32/com/the-com-library
docs.microsoft.com
https://github.com/fireeye/stringsifter
github.com
https://www.fireeye.com/blog/threat-research/2019/05/learning-to-rank-strings-output-for-speedier-malware-analysis.html
fireeye.com
The CozyDuke APT Read at the source ↗
securelist.com
https://github.com/fireeye/capa
github.com
https://www.hex-rays.com/
hex-rays.com
https://github.com/fireeye/capa/tree/master/capa/ida/plugin
github.com
https://github.com/Sheksa
github.com
https://il.linkedin.com/in/shahak-shalev-ba2a49135
il.linkedin.com
https://archive.f-secure.com/weblog/archives/00002764.html
archive.f-secure.com
https://www.microsoft.com/en-us/wdsi/threats/malware-encyclopedia-description?Name=TrojanDropper%3AWin32%2FOnionDuke.A
microsoft.com
https://blog-assets.f-secure.com/wp-content/uploads/2020/03/18122307/F-Secure_Dukes_Whitepaper.pdf
blog-assets.f-secure.com
https://www.securityweek.com/onionduke-apt-malware-distributed-malicious-tor-exit-node
securityweek.com