While analysing several suspicious DLL files I noticed that some of these files (which were obviously malicious) didn’t perform their malicious activity unless a certain function was triggered. The malware used a registry entry to execute a certain function that is exported by the DLL called „InstallM“. I had to run „rundll32.exe malware.dll,InstallM“ to trigger […]
Archive | Oktober, 2014
Request a THOR Trial
White Papers
 |
APT Scanner THOR White Paper (DE) (PDF 1 MB) |
|
APT Scanner THOR White Paper (EN) (PDF 1 MB) |
|
APT Scanner THOR Slides (EN) (PDF 1.3 MB) |
|
THOR Cheat Sheet (PDF 0.07 MB) |
|
Splunk Übersicht (PDF 0.4 MB) |
|
Flyer der Hackerabwehr Schulung (PDF 0,5 MB) |
