Extra: "String Obfuscation: Character Pair Reversal" - SANS Internet Storm Center
Tags
attack-pattern: Malware - T1587.001 Malware - T1588.001 Powershell - T1059.001 Python - T1059.006 Tool - T1588.002 Powershell - T1086
Show in Graph
Common Information
Type Value
UUID 890b9bee-5877-4346-80c8-cc2397d8c4e7
Fingerprint 5e51ba17493db729
Analysis status DONE
Considered CTI value 0
Text language
Published March 26, 2023, midnight
Added to db Oct. 24, 2023, 1:28 p.m.
Last updated Nov. 11, 2024, 11:22 a.m.
Headline Internet Storm Center
Title Extra: "String Obfuscation: Character Pair Reversal" - SANS Internet Storm Center
Detected Hints/Tags/Attributes 17/1/9
Source URLs
Redirection Url
Details Source https://isc.sans.edu/diary/Extra+String+Obfuscation+Character+Pair+Reversal/29656
URL Provider
Details Provider Source level domain
Details sans.edu isc.sans.edu
Attributes
Details Type #Events CTI Value
Details Domain 5 
python-per-line.py
Details Domain 2 
numbers-to-strings.py
Details Domain 5 
numbers-to-string.py
Details Domain 74 
blog.didierstevens.com
Details File 5 
python-per-line.py
Details File 2 
numbers-to-strings.py
Details File 5 
numbers-to-string.py
Details sha256 3 
f87246f639ed528fe01ee1fea953470a2997ea586779bf085cb051164586cd76
Details sha256 3 
592f1c8ff241da2e693160175c6fc4aa460388aabe1553b4b0f029977ce4ad27