Skip to content

Didier Stevens Videos

Search for:

Home
About
count.py

Didier Stevens Videos RSS

RSS - Posts

Search for:

Recent Posts

Reversing A Network Protocol
Extracting Information From “logfmt” Files With CyberChef
PNG + mimikatz.exe
PNG Analysis
Analysis of a Malicious HTML File (QBot)

Recent Comments

	Mike Michalko on James Webb JPEG With Malw…
	isodump.py \| Didier… on The Security Toolsmith (NVISO…
	Overview of Content… on Maldoc Analysis With Cybe…
	ZIP(EICAR File), Mem… on EICAR File, Memorized
	Overview of Content… on AutoCAD & VBA

Archives

Categories

howto
malware
my software
Networking
Science
technology
Uncategorized
video

Meta

Create account
Log in
Entries feed
Comments feed
WordPress.com

An Obfuscated Beacon – Extra XOR Layer

Tools: 1768.py, xor-kpa.py, pecheck.py, translate.py, strings.py

Diary entry: Analysis of an Encoded Cobalt Strike Beacon

Sample: e652ee076aded6b2c8b4e3e8ee83ed9423019d0a9aacbd38837d251191972bef

Share this:

X
Facebook

Related

September 6, 2022 Didier Stevens

Post navigation

← VBA Maldoc & UTF7 (APT-C-35)

Analyzing Obfuscated VBS with CyberChef →

Leave a comment Cancel reply

Δ

Blog at WordPress.com.

Comment
Subscribe Subscribed
- Didier Stevens Videos
- Already have a WordPress.com account? Log in now.