TLDR InfoSec · STRATEGIES & TACTICS

004 - ANALYZING A C2 AGENT - PART 2: THE AGENT

threatanatomy.io8 min read

Summary from the TLDR InfoSec newsletter

This article is the second part of a series analyzing a C2 agent. In this part, the author focuses on the static analysis of the binary to understand its workings, determine if it corresponds to a C2 agent, and identify indicators of compromise. They use tools like PEStudio and dnSpy to analyze the binary and determine that it is a C2 agent binary.