Findcrypt3 IDA Plugin
Tags
attack-pattern: Data Botnet - T1583.005 Botnet - T1584.005 Credentials - T1589.001 Ip Addresses - T1590.005 Keylogging - T1056.001 Keylogging - T1417.001 Malware - T1587.001 Malware - T1588.001 Python - T1059.006 Tool - T1588.002
Show in Graph
Common Information
Type Value
UUID 8371bcb4-4c7a-4136-a755-e66bf3eba0d3
Fingerprint d8741d7badd9fe9a
Analysis status DONE
Considered CTI value 0
Text language
Published Dec. 21, 2024, 6:24 p.m.
Added to db Dec. 21, 2024, 7:54 p.m.
Last updated Dec. 22, 2024, 6:33 p.m.
Headline Findcrypt3 IDA Plugin
Title Findcrypt3 IDA Plugin
Detected Hints/Tags/Attributes 42/1/11
Source URLs
Redirection Url
Details Source https://medium.com/@VampireXRay/findcrypt3-ida-plugin-0e91ea37eaa2?source=rss------malware-5
Details Source https://medium.com/@VampireXRay/findcrypt3-ida-plugin-0e91ea37eaa2?source=rss------cybersecurity-5
URL Provider
Details Provider Source level domain
Details medium.com medium.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 167 ✔ Cybersecurity on Medium https://medium.com/feed/tag/cybersecurity 2024-08-30 22:08
Details 171 ✔ Malware on Medium https://medium.com/feed/tag/malware 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 4689 
github.com
Details Domain 1 
findcrypt3.py
Details Domain 18 
python.org
Details File 1 
findcrypt3.py
Details File 1 
c:\program files\ida pro\plugins\findcrypt3.py
Details File 1 
idapyswitch.exe
Details File 1 
idapython3.dll
Details File 1 
c:\program files\ida pro\plugins\idapython3.dll
Details File 1 
test_crypto.exe
Details Github username 2 
polymorf
Details Url 1 
https://github.com/polymorf/findcrypt3.git