Tag: c2 traffic

2 Attack Reports | 0 Vulnerabilities

Attack reports

Detecting PureLogs traffic with CapLoader

CapLoader's Port Independent Protocol Identification feature can now detect the C2 protocol used by PureLogs Stealer malware without relying on port numbers. This capability was added in the recent 2.0 release. The blog post demonstrates this functionality using a PCAP file from malware-traffic-ana…
purelogs
purelogs stealer
c2 traffic
2025-06-10
caploader
pipi
stealer malware
protocol identification
network forensics
Published: June 10, 2025
Downloadable IOCs: 3

Technical Analysis of Xloader Versions 6 and 7 P2

The latest versions of the Xloader malware, known as Formbook, use advanced obfuscation techniques to mask critical parts of its code and data, as part of a two-part technical analysis.
c2 server
formbook
base64
xloader
2025-02-14
c2 traffic
dword xor
dwords
decoy c2
pushdo
Published: February 14, 2025
Downloadable IOCs: 261
Click here to see more Attack Reports