MISP
/
misp-galaxy
mirror of https://github.com/MISP/misp-galaxy
2
0
Fork 0
Code Issues Releases Wiki Activity

Merge pull request #602 from snurilov/patch-1 

Add ConfuserEx and Beds Protector .NET packers to tools.json cluster
pull/603/head
Alexandre Dulaunoy 2020-11-12 07:53:43 +01:00 committed by GitHub
parent 7ec73892f9 44e9da1390
commit 5c80582980
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 29 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

29
clusters/tool.json
View File

@ -8175,6 +8175,35 @@
"related": [],
"uuid": "2a838144-b42d-4c12-bf41-4e99de1935e9",
"value": "Vatet"
},
{
"description": "ConfuserEx is a common .NET packer/protector used to obfuscate .NET assemblies and confuse the decompilation process. According to the official site: ConfuserEx is an free, open-source protector for .NET applications. It is the successor of Confuser project. ConfuserEx supports .NET Framework from 2.0 - 4.5 and Mono (and other .NET platforms if enough request!). It supports most of the protections you’ll find in commerical protectors, and some more!",
"meta": {
"refs": [
"https://yck1509.github.io/ConfuserEx/",
"https://blog.talosintelligence.com/2017/12/recam-redux-deconfusing-confuserex.html"
],
"type": [
"Packer"
]
},
"related": [],
"uuid": "1d734fcc-58a2-4176-bfa9-0d96f447799d",
"value": "ConfuserEx"
},
{
"description": "Beds Protector is a common .NET packer/protector. It is a mod of ConfuserEx, which is another common .NET packer/protector. It is commonly used to obfuscate .NET assemblies and confuse the decompilation process. The latest available version is Beds Protector v1.4.1",
"meta": {
"refs": [
"https://github.com/BedTheGod/ConfuserEx-Mod-By-Bed"
],
"type": [
"Packer"
]
},
"related": [],
"uuid": "5ce18513-bd12-4689-a705-634cf727162e",
"value": "Beds Protector"
}
],
"version": 139