mastodon.bida.im is part of the decentralized social network powered by Mastodon.
Un'istanza mastodon antifascista. autogestita, italofona con base a Bologna. Rispettosa di privacy e anonimato.

Server stats:

928
active users

Learn more

#kazakhstan

62 posts20 participants0 posts today

Deobfuscating APT28's HTA Trojan: A Deep Dive into VBE Techniques & Multi-Layer Obfuscation

This analysis delves into APT28's cyber espionage campaign targeting Central Asia and Kazakhstan diplomatic relations, focusing on their HTA Trojan. The malware employs advanced obfuscation techniques, including VBE (VBScript Encoded) and multi-layer obfuscation. The investigation uses x32dbg debugging to decode the obfuscated code, revealing a custom map algorithm for character deobfuscation. The process involves decoding strings using embedded characters from Windows vbscript.dll. The analysis identifies the use of Microsoft's Windows Script Encoder (screnc.exe) to create VBE files. By employing various deobfuscation techniques, including a Python script, the final malware sample is extracted and analyzed, showcasing APT28's evolving tactics in cyber espionage.

Pulse ID: 67efc6e712b49d46c1423ca9
Pulse Link: otx.alienvault.com/pulse/67efc
Pulse Author: AlienVault
Created: 2025-04-04 11:47:51

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

LevelBlue Open Threat ExchangeLevelBlue - Open Threat ExchangeLearn about the latest cyber threats. Research, collaborate, and share threat intelligence in real time. Protect yourself and the community against today's emerging threats.

North Macedonia has potential to serve as transit route for Azerbaijani gas to other European markets – minister (Exclusive interview) byteseu.com/893548/ #analytics #Azerbaijan'sNews #BreakingNews #BusinessNews #CaspianNews #CentralAsia #CompanyNews #economy #FinancialNews #Georgia'sNews #Iran'sNews #Kazakhstan'sNews #NorthMacedonia #OilAndGasNews #Politics #TheCaspianSea #TheCISNews #Turkey'sNews #Turkmenistan'sNews #Uzbekistan'sNews #WorldNews

Replied to CelloMom On Cars

"Agriculture contributes 5-24% of GDP for the countries affected by the #heatwave, and up to 50% of the workforce. Extreme heat affects agricultural workers disproportionately, reducing labor capacity, with over 230 million hours lost in #Uzbekistan in 2023. The extreme temperatures this year also coincided with the flowering of key export fruit crops and sowing of spring wheat in #Kazakhstan, which may impact yields. "

worldweatherattribution.org/ex