corpus.blog
42,281 blogs · 5,361,753 posts Claim your blog
Record · corpus.blog/posts/01a0d4b5-15c5-72fb-9ccc-532d8c485e3b

Uncovering .NET Malware Obfuscated by Encryption and Virtualization

Unit 42 · published 3 March 2025

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at unit42.paloaltonetworks.com Wayback capture
0blogs citing
First cited
—
Most recent
—
Rank this month
not ranked
External links
23
Words captured
2,023

Cited by

No blog we hold has cited this post yet.

Links from this post

Link
Host
https://www.paloaltonetworks.com/network-security
paloaltonetworks.com
https://www.paloaltonetworks.com/network-security/advanced-wildfire
paloaltonetworks.com
https://docs.paloaltonetworks.com/advanced-url-filtering/administration
docs.paloaltonetworks.com
https://docs.paloaltonetworks.com/dns-security
docs.paloaltonetworks.com
https://docs-cortex.paloaltonetworks.com/p/XDR
docs-cortex.paloaltonetworks.com
https://docs-cortex.paloaltonetworks.com/p/XSIAM
docs-cortex.paloaltonetworks.com
https://isc.sans.edu/diary/30370
isc.sans.edu
https://isc.sans.edu/diary/31268
isc.sans.edu
https://learn.microsoft.com/en-us/dotnet/fundamentals/reflection/reflection
learn.microsoft.com
https://flaticon.com
flaticon.com
https://medium.com/p/53ad3fb1a8e6
medium.com
https://learn.microsoft.com/en-us/dotnet/api/system.reflection.emit.opcodes.ldstr
learn.microsoft.com
https://en.wikipedia.org/wiki/Block_cipher_mode_of_operation
en.wikipedia.org
https://github.com/yck1509/KoiVM
github.com
https://github.com/yck1509/ConfuserEx
github.com
https://blog.thalium.re/posts/llvm-powered-devirtualization
blog.thalium.re
https://github.com/Washi1337/OldRod
github.com
https://en.wikipedia.org/wiki/Base64
en.wikipedia.org
https://learn.microsoft.com/en-us/dotnet/framework/unmanaged-api/debugging/icordebugmanagedcallback-interface
learn.microsoft.com
https://learn.microsoft.com/en-us/dotnet/api/system.convert.frombase64string
learn.microsoft.com
https://github.com/microsoft/referencesource/blob/master/mscorlib/system/resources/manifestbasedresourcegroveler.cs
github.com
https://docs.paloaltonetworks.com/advanced-wildfire
docs.paloaltonetworks.com
https://fluidattacks.com/blog/amsi-bypass-python
fluidattacks.com
Elsewhere on unit42.paloaltonetworks.com (5)