This repository contains resources related to the analysis made on HexaLocker and available on this blog post: https://www.synacktiv.com/publications/lapsus-is-dead-long-live-hexalocker.html.
- a YARA rule to detect other HexaLocker samples.
- a list of HexaLocker hashes and domain.
2024 - Théo Letailleur, Synacktiv
The contents of this repository is available under AGPL License
- Théo Letailleur: [email protected]
- CSIRT Synacktiv: [email protected]