Linkedin Github

👋./Malfav.asm
- 🕸️Malfav Agenda
🕷️Malware Introduction
🐁OS Internal's
- 🍩Suspicious API's
🪟Windows Internal
- 📡Windows Internal
  - 🦐Why Windows Internal ?
    🏵️Process
    🧵Thread
    🪭Handle
    🌐Memory
    ☢️Ram
    🤖ROM
👁️‍🗨️Malware Technique
⚔️Malware Resources
- 👻Malware Resources
- 🎇Malware Sample Resources
Malware Analysis Toolkit
Books and Guidelines
- 🔋Books and Guidelines for Malware Analysis .
📋Malware Analysis Tips
- 🖇️Malware Analysis Tips
🧽Incident Response
- 🐳What is Incident Response
  - Incident Response Tools
  - Incident Response Toolkit
Technical Analysis Report
- 🦎Technical Analysis Report
  - 🧲Stuxnet Memory Analysis
🚨Rootkit Removal
- 🤖Rootkit Removal
🗜️Antivirus Artifact
- 〽️Antivirus Artifact
  - 🀄Antivirus Process Name
🧠Malware Author Mindset
- 💽Malware Author Mindset
  - 🍫How Malware Author Terminate Antivirus Process during runtime ?

Powered by GitBook

On this page

🕷️Malware Introduction

🏞️Advanced Persistence Threat - APT

🥠APT Groups

🇷🇺Wizard Spider

Wizard Spider is a Russia-based financially motivated threat group originally known for the creation and deployment of TrickBot since at least 2016. Wizard Spider possesses a diverse aresenal of tools and has conducted ransomware campaigns against a variety of organizations, ranging from major corporations to hospitals.[1][2][3]

PreviousWIRTE NextZIRCONIUM

Last updated 7 months ago

Page cover image