Tag: packxor

1 Attack Reports | 0 Vulnerabilities

Attack reports

Unpacking the unpleasant FIN7 gift: PackXOR

This analysis delves into PackXOR, a private packer associated with FIN7's AvNeutralizer tool. PackXOR employs a two-section structure with XOR encryption and LZNT1 compression. The packer utilizes Run-Time Dynamic Linking and encrypts API function names. Notably, PackXOR has been observed packing …
avneutralizer
2024-09-17
r77 rootkit
packxor
Published: September 17, 2024
Downloadable IOCs: 12
Click here to see more Attack Reports