Malware Research

19 Sep 2024 08:38

User Gennadiy has 1/3 warnings; be careful!
Reason:
English only and stay on topic. COVID is not malware

Malware Research

18 Sep 2024 20:29

Cyber Threat Intelligence & Threat Hunting
/channel/cyberthreat_intel

Malware Research

18 Sep 2024 19:23

User 0x876008c67af has 2/3 warnings; be careful!
Reason:
no advertising and stay on topic

Malware Research

18 Sep 2024 17:29

https://securityintelligence.com/x-force/hunting-evidence-dll-side-loading-powershell-sysmon/

Malware Research

17 Sep 2024 21:05

Blog alert!

In this one, I go into great detail about how malware walks the Process Environment Block (PEB) to find particular DLLs and parses their export table to find address of functions. I also walk through a real-world implementation of this technique in Phobos ransomware.

Blog link: https://nikhilh-20.github.io/blog/peb_phobos_ransomware/

While this technique has been around for a while, I think people getting into malware analysis (or veterans who might need a refresher) can use this info to quickly understand this obfuscation technique. There's lots of WinDbg and PEB internals info in there!

#windows #malware #analysis #obfuscation

Malware Research

17 Sep 2024 11:46

https://youtu.be/ttZ48hu6xjQ?si=VW0eSCwKVmx0nrv0

Malware Research

17 Sep 2024 07:02

hey very nice bud! i noticed you mainly focus on windows binaries, will you be doing any series that are android focused?

Malware Research

16 Sep 2024 15:50

it is .NET based .. dll file and usually with 2 classes .. 1 used to register and un register COM objects.. the other is heavily obfuscated .. i tried with de4dot but failed

Malware Research

16 Sep 2024 15:47

or how it is generated?

Malware Research

16 Sep 2024 15:36

My latest malware analysis video is up! 🔥 ⚔
Enjoy!

https://youtu.be/i791bZiJC7M

#cybersecurity #malwareanalysis

Malware Research

16 Sep 2024 02:21

I have a malicious byte array that is injected into a process. Anybody good at reverse engineering malware that would be interested in helping? I got stuck when I noticed in the disassembly that there is XOR encryption. I don't have any background or previous experience in malware analysis

Malware Research

15 Sep 2024 21:13

maybe I should call Yoshi

Malware Research

15 Sep 2024 21:11

I wanna learn botnet

Malware Research

15 Sep 2024 11:29

Hello @Pomipom, welcome to the Malware Research group! Please read the pinned message before you post!

Malware Research

14 Sep 2024 22:14

Reported Camaron [ LOOK BIO ] [5680038758] to admins.​​​​​​​

Malware Research

18 Sep 2024 21:55

New FedBan
Fed: Libra's Empire
FedAdmin: Libra
User: 0x876008c67af
User ID: 1119116383
Reason: spam

Malware Research

18 Sep 2024 19:58

New FedBan
Fed: Libra's Empire
FedAdmin: ❤🦦
User: AbuAli Abutaleb
User ID: 828726653
Reason: illegal activity and cracks

Malware Research

18 Sep 2024 18:02

@m3t4m0rph0515, hi

Malware Research

18 Sep 2024 17:22

Any one worked on detecting dll side loading? Or any blog you could share?

Malware Research

17 Sep 2024 14:36

Hello @Bilben0503, welcome to the Malware Research group! Please read the pinned message before you post!

Malware Research

17 Sep 2024 11:44

Thanks and yes maybe in the future

Malware Research

17 Sep 2024 00:50

Hello @dub314, welcome to the Malware Research group! Please read the pinned message before you post!

Malware Research

16 Sep 2024 15:48

sample: d4e4c4e495d9462dc8a283e87406c908bbe4504957b64a18ba3406c818a640e1

https://www.virustotal.com/gui/file/d4e4c4e495d9462dc8a283e87406c908bbe4504957b64a18ba3406c818a640e1

Malware Research

16 Sep 2024 15:47

Guys anyone heared about Jalapeno trojan and analysed it?

Malware Research

16 Sep 2024 12:53

https://gchq.github.io/CyberChef/#recipe=XOR(%7B'option':'Hex','string':''%7D,'Standard',false)

try to decrypt the XOR encryption?

Malware Research

15 Sep 2024 21:15

before it hammers you, you better behave

Malware Research

15 Sep 2024 21:13

https://chatgpt.com/share/66e731bb-c064-8003-8895-978f3aa3c6d4

Malware Research

15 Sep 2024 20:45

Hello @AlePer55Pet, welcome to the Malware Research group! Please read the pinned message before you post!

Malware Research

14 Sep 2024 22:44

New FedBan
Fed: Libra's Empire
FedAdmin: Libra
User: Camaron [ LOOK BIO ]
User ID: 5680038758
Reason: no spam

Malware Research

14 Sep 2024 20:55

Hey there, recently I wrote a browser extension which aims to block basic HTML smuggling attacks. If you have any feedback please create a PR directly, this is a beta version though which works on Chrome/Edge on Windows/Mac OS. Thanks!

https://x.com/RandomDhiraj/status/1834693580276793824