Reversing SeroXen
Static analysis of a SeroXen sample: the loader chain, the Quasar client and its C2 protocol, registry persistence, the modified r77 rootkit and Windows reset handling. IOCs and removal steps at the end.
Static analysis of a SeroXen sample: the loader chain, the Quasar client and its C2 protocol, registry persistence, the modified r77 rootkit and Windows reset handling. IOCs and removal steps at the end.