Tag: avneutralizer

2 Attack Reports | 0 Vulnerabilities

Attack reports

Unpacking the unpleasant FIN7 gift: PackXOR

This analysis delves into PackXOR, a private packer associated with FIN7's AvNeutralizer tool. PackXOR employs a two-section structure with XOR encryption and LZNT1 compression. The packer utilizes Run-Time Dynamic Linking and encrypts API function names. Notably, PackXOR has been observed packing …
avneutralizer
2024-09-17
r77 rootkit
packxor
Published: September 17, 2024
Downloadable IOCs: 12

FIN7 Reboot | Cybercrime Gang Enhances Ops with New EDR Bypasses and Automated Attacks

This report provides an in-depth analysis of the FIN7 cybercrime group's evolving tactics, techniques, and procedures. It highlights the group's adoption of automated SQL injection attacks, the development of specialized tools like AvNeutralizer for evading security solutions, and the use of multip…
2024-07-17
powertrash
diceloader
avneutralizer
Published: July 17, 2024
Linked vulnerabilities : CVE-2021-34473, CVE-2021-31207, CVE-2021-34523
Downloadable IOCs: 99
Click here to see more Attack Reports