IDA Pro

Reported Context (4)

Figure 7: IDA Pro snippet showing a typical list of exported functions in a Cruciferra sample. Cruciferra Crypter Uses Extensive Evasion to Deliver RATs and Infostealers
function, "reg_read_str", and the large function, "chromium_extract" discussed in this blog. A separate IDA Pro plugin is also available here, built as a rapidly prototyped alternative for those that prefer that EKZ Stealer Exploits Fortinet EMS Vulnerability and Uses Obfuscated Control Flow
IDA Pro v8.3.230608 JPCERT/CC Publishes Study on Reverse Engineering Rust Binaries
Volexity’s GoStringExtractor is a plugin utility available for IDA Pro and Ghidra that helps search and analyze string data in a Go binary, provided they have not been destroyed by an obfuscation tool, such as Garble’s Volexity Adds Go String and Runtime Type Analysis to Its Golang Tools

CVE (1)

Malware (16)

People (1)

Threat Actors (1)

MITRE ATT&CK (12)

Vendors (2)

Products (8)

Tools (9)

Industries (6)

Countries (3)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.