string[.]toDomain
Reported by 1 independent source · first reported by Zscaler ThreatLabz · last reported
Last reported 1 month ago
What the reports say
1 report, newest first · the exact sentence from each-
Vidar Adds Virtual Machine and Custom Stream Ciphers For String Obfuscation“…sample.Vidar’s VM is used in two different ways:For direct deobfuscation: The bytecode is interpreted to create the final deobfuscated string[.]To decrypt a key and nonce for a string encrypted with a custom stream cipher (described later): For Vidar versions 2.0 and 2.1, the first…”
Indicators reported together
named in the same reports- build[.]inin 1 report
Copy this indicator · defanged
Thanks — we review every report.