009 - Decoding XWorm: Lateral Movement
In this article, we explore how XWorm uses USBs to spread to other machines.
008 - Decoding XWorm: Defense Evasion and Persistence
In this article, we explore how XWorm evades defenses and establish persistence.
007 - Decoding XWorm: Initial Exploration and Anti-Analysis Techniques
In this article, we explore how XWorm employs obfuscation, encryption, and anti-analysis techniques to evade detection.
006 - Decoding XWorm: Introduction
In this first article of the XWorm series, we explore the basics of analyzing this RAT (Remote Access Trojan). We identify the type of binary, analyze managed vs unmanaged code, and introduce the key tools for its analysis.
005 - Analyzing a C2 agent - Part 3: the agent - Dynamic analysis
In this article we will dynamically analyze the C2 agent we previously obtained and evaluate ways to interact with it in order to understand how it works.