retefe

Artefacts from various retefe campaigns

Sources

Potential sources for various methods/funtions

QuasarRAT/Client/Core/Recovery/Browsers/Firefox.cs

https://github.com/quasar/QuasarRAT/blob/master/Client/Core/Recovery/Browsers/Firefox.cs

Pastebin: Firefox 37+ Password & Cookie Recovery

http://pastebin.com/Qzctxjet

PowerShell Code Repository: Using Task Sch, wrapper by BattleChicken

http://poshcode.org/5805

Получить handle дочернего окна - C#

http://www.cyberforum.ru/csharp-net/thread656891.html