Malware Research

17 Sep 2024 21:05

Blog alert!

In this one, I go into great detail about how malware walks the Process Environment Block (PEB) to find particular DLLs and parses their export table to find address of functions. I also walk through a real-world implementation of this technique in Phobos ransomware.

Blog link: https://nikhilh-20.github.io/blog/peb_phobos_ransomware/

While this technique has been around for a while, I think people getting into malware analysis (or veterans who might need a refresher) can use this info to quickly understand this obfuscation technique. There's lots of WinDbg and PEB internals info in there!

#windows #malware #analysis #obfuscation

Malware Research

17 Sep 2024 11:46

https://youtu.be/ttZ48hu6xjQ?si=VW0eSCwKVmx0nrv0

Malware Research

17 Sep 2024 07:02

hey very nice bud! i noticed you mainly focus on windows binaries, will you be doing any series that are android focused?

Malware Research

16 Sep 2024 15:50

it is .NET based .. dll file and usually with 2 classes .. 1 used to register and un register COM objects.. the other is heavily obfuscated .. i tried with de4dot but failed

Malware Research

16 Sep 2024 15:47

or how it is generated?

Malware Research

16 Sep 2024 15:36

My latest malware analysis video is up! 🔥 ⚔
Enjoy!

https://youtu.be/i791bZiJC7M

#cybersecurity #malwareanalysis

Malware Research

16 Sep 2024 02:21

I have a malicious byte array that is injected into a process. Anybody good at reverse engineering malware that would be interested in helping? I got stuck when I noticed in the disassembly that there is XOR encryption. I don't have any background or previous experience in malware analysis

Malware Research

15 Sep 2024 21:13

maybe I should call Yoshi

Malware Research

15 Sep 2024 21:11

I wanna learn botnet

Malware Research

15 Sep 2024 11:29

Hello @Pomipom, welcome to the Malware Research group! Please read the pinned message before you post!

Malware Research

14 Sep 2024 22:14

Reported Camaron [ LOOK BIO ] [5680038758] to admins.​​​​​​​

Malware Research

14 Sep 2024 20:28

that also wrt to what suits you easier for your work

Malware Research

13 Sep 2024 23:51

I have a quick question what kind of platform do yall use to hack because i am stuck at linux and i want to upgrade

Malware Research

13 Sep 2024 10:56

Reported Мария [5347459189] to admins.​​​​​​​

Malware Research

11 Sep 2024 20:24

and if you are lost... you need to study a lot more

Malware Research

17 Sep 2024 14:36

Hello @Bilben0503, welcome to the Malware Research group! Please read the pinned message before you post!

Malware Research

17 Sep 2024 11:44

Thanks and yes maybe in the future

Malware Research

17 Sep 2024 00:50

Hello @dub314, welcome to the Malware Research group! Please read the pinned message before you post!

Malware Research

16 Sep 2024 15:48

sample: d4e4c4e495d9462dc8a283e87406c908bbe4504957b64a18ba3406c818a640e1

https://www.virustotal.com/gui/file/d4e4c4e495d9462dc8a283e87406c908bbe4504957b64a18ba3406c818a640e1

Malware Research

16 Sep 2024 15:47

Guys anyone heared about Jalapeno trojan and analysed it?

Malware Research

16 Sep 2024 12:53

https://gchq.github.io/CyberChef/#recipe=XOR(%7B'option':'Hex','string':''%7D,'Standard',false)

try to decrypt the XOR encryption?

Malware Research

15 Sep 2024 21:15

before it hammers you, you better behave

Malware Research

15 Sep 2024 21:13

https://chatgpt.com/share/66e731bb-c064-8003-8895-978f3aa3c6d4

Malware Research

15 Sep 2024 20:45

Hello @AlePer55Pet, welcome to the Malware Research group! Please read the pinned message before you post!

Malware Research

14 Sep 2024 22:44

New FedBan
Fed: Libra's Empire
FedAdmin: Libra
User: Camaron [ LOOK BIO ]
User ID: 5680038758
Reason: no spam

Malware Research

14 Sep 2024 20:55

Hey there, recently I wrote a browser extension which aims to block basic HTML smuggling attacks. If you have any feedback please create a PR directly, this is a beta version though which works on Chrome/Edge on Windows/Mac OS. Thanks!

https://x.com/RandomDhiraj/status/1834693580276793824

Malware Research

14 Sep 2024 20:28

I don't think u have to go on updating platform but if u would like to try distributions u must try black arch, kali, tails

Malware Research

13 Sep 2024 10:56

New FedBan
Fed: Libra's Empire
FedAdmin: alex 27
User: Мария
User ID: 5347459189
Reason: None given.

Malware Research

12 Sep 2024 08:53

New FedBan
Fed: Libra's Empire
FedAdmin: Libra
User: A.​B
User ID: 7475824905
Reason: stay on topic next time, this is no place for skid questions

Malware Research

11 Sep 2024 20:22

at its basic, this is how a simple login looks like

source: https://appriver.com/resources/blog/february-2021/token-based-authentication-what-it-and-how-it-works