vb[.]netDomain
Reported by 2 independent sources · first reported by Sekoia.io · last reported
Last reported 10 days ago
What the reports say
2 reports, newest first · the exact sentence from each-
KGB RAT: A Fully Undetectable Windows Trojan Built to Spy, Steal, and Terrorize“…jority of samples Group-IB detected are x86 PE executables implemented in .NET, compiled with the Microsoft Linker (version 11.0), using VB[.]NET as the primary language.”
-
Advent of Configuration Extraction, Part 2: QuasarRAT Config“High-level source (C#, VB[.]NET, etc.) compiles into IL, which the Common Language Runtime(CLR) then JIT-compiles into native machine code.”
Indicators reported together
named in the same reports- instr.opcode[.]namein 1 report
- instr.operand[.]namein 1 report
- main.test[.]namein 1 report
- field[.]namein 1 report
- 4ef44bf6815e7860…912c38ac9639in 1 report
- mtype[.]namein 1 report
Copy these 6 indicators · defanged
Thanks — we review every report.