Malware Research

15 August 2025 22:40

Same here. Pdf exploits have become quite rare

Malware Research

15 August 2025 22:38

Haven't analyzed PDFs in a long time

Malware Research

15 August 2025 21:37

Is PDF analysis still a thing?

Malware Research

15 August 2025 19:41

New FedBan
Fed: Libra's Empire
FedAdmin: ❤🦦
User: HANIA NOOR
User ID: 2108366814
Reason: illegal activity

Malware Research

15 August 2025 10:54

i think this is the file i need bluejay-sd2a.220601.003-factory-96c1bea8.zip

Malware Research

15 August 2025 10:38

https://archive.org/details/20250720_20250720_1751

Malware Research

15 August 2025 08:56

hello sir, would this also work on a pixel 4a?

Malware Research

15 August 2025 04:32

relax people i will delete it if u are to good to be real

Malware Research

14 August 2025 18:15

New FedBan
Fed: Libra's Empire
FedAdmin: alex 27
User: Yonamás
User ID: 329313396
Reason: spma

Malware Research

12 August 2025 16:48

hi there, as a part of our ai malware paper, we shared a challenge to test it
open for both human and ai reverse engineer
https://x.com/kaganisildak/status/1955279718254629238

Malware Research

12 August 2025 01:24

New FedBan
Fed: Libra's Empire
FedAdmin: alex 27
User: Dhara~Prisha
User ID: 7907408687
Reason: spam

Malware Research

11 August 2025 18:02

no 🤔

the "Get Sample" button isn't there, and in reviewing their support articles, I don't think I can download it if it's not available in public or shared

and by the way, it's not on Virustotal, so...

Malware Research

11 August 2025 13:50

This doesn't work. The reports I see are analysing the execution of msiexec /package url so there's no direct sample to download. I can see and download some artifacts, but I need the msi file. It seems that the msi package accepts different public properties and installs different things depending on their values. The report is only for specific property values (it may also be that the server provides different msi packages "at random" which would be funny too, but I doubt it :) ). There is also a pcap file but the traffic is over tls and I doubt there's a way to decrypt it.

Malware Research

11 August 2025 02:53

Hi guys, how is everyone?
Thank you for letting me join

Malware Research

10 August 2025 16:27

Which language is it written in ?

Malware Research

15 August 2025 22:39

These days, I see it abused in phishing, like putting QR code inside the PDF or phishing links

Malware Research

15 August 2025 21:50

I noticed that remnux is basically the goto os for analyzing these types of files

Malware Research

15 August 2025 21:15

would you happen to have a zip of this?

Malware Research

15 August 2025 12:49

just to confirm that my working badspin setup is on TP1A.220624.021.A1
I think I confused between android version but this is exact version running on device

Malware Research

15 August 2025 10:49

I would need a full image and not ota if i want to downgrade, correct?

Malware Research

15 August 2025 10:09

darn google removed all previous roms for pixel 6a

Malware Research

15 August 2025 04:32

u need people like me so u can point ur fucking fingers and say that the bad guy

Malware Research

15 August 2025 04:27

Reported Redvest [5587855301] to admins.​​​​​​​

Malware Research

14 August 2025 16:07

New FedBan
Fed: Libra's Empire
FedAdmin: alex 27
User: Gh
User ID: 8196104983
Reason: spam

Malware Research

12 August 2025 13:09

Hello Alla, welcome to the Malware Research group! Please read the pinned message before you post!

Malware Research

11 August 2025 19:19

Yeah... Thanks anyway. ;)

Malware Research

11 August 2025 15:00

Then you hope for someone who has paid access to it will be able to download it

Malware Research

11 August 2025 09:39

New FedBan
Fed: Libra's Empire
FedAdmin: alex 27
User: Mani
User ID: 1346300233
Reason: spam

Malware Research

10 August 2025 16:37

And gdata too :p btw is “sepi” here, hope you executed in vm or there’s no important files on desktop

Malware Research

10 August 2025 15:58

https://bazaar.abuse.ch/sample/40a87dc07204b2cd9f02afd39b9d0c0b56a579e1a0282fb6c166ccc46cc8ec70/