Blog | Stuart Rankin

Blog Index


Currently a WIP

IPv4 Obfuscation of Shellcode: A Technique Used by Groups like Hive

Groups such as Hive ransomware operators have leveraged novel techniques to obfuscate their malicious payloads. One such technique involves encoding shellcode as IPv4 addresses, making detection and analysis more challenging. This blog post explores the concept of IPv4 shellcode obfuscation, its use by threat actors like Hive, and walks through the development of a tool that implements this technique.