Malware Research

28 Jun 2024 08:36

You can start with using something like this http://www.dcs.fmph.uniba.sk/zri/6.prednaska/tools/PEiD/plugins/kanal.htm ? Maybe ? Try to figure out the some key common artefacts im ransomware sample like anti analysis, shadowcopy deletion , and all of that, try to read writeups related to technical analysis of ransomware samples

Malware Research

27 Jun 2024 23:32

I have knowledge in reverse engineering but want to study ransomware reverse engineering.
Are there any courses specific to this?

I have read the pinned message, but didn’t find any resources attached

Malware Research

27 Jun 2024 12:33

In fact many "legal" malware development companies such as REMCOS (i think) sell it as "surveillance" software

Malware Research

27 Jun 2024 12:15

the language of the chat is English

Malware Research

27 Jun 2024 08:46

New FedBan
Fed: Libra's Empire
FedAdmin: Libra
User: Khandare Bhushan
User ID: 6155433766
Reason: no skids

Malware Research

26 Jun 2024 23:37

I cannot find the paper, but I'm 100% sure I've read that someone did it for a scientific article -- this doesn't imply it's legal, it means that it's "tolerated in science"

Malware Research

26 Jun 2024 14:07

I was sincerely hoping for something plug-n-play!

Malware Research

26 Jun 2024 14:04

Wow thanks, you're a database :)
As a reference:

PowerShell is opensource => Make your own instrumented fork

Malware Research

26 Jun 2024 02:35

Another one that I can think of is due to the PS-Transcript bug, but his code hasn't been updated. Searching for this bug should lead you to something similar created for debugging purposes, likely useful for reversing PS malware

https://github.com/PowerShell/PowerShell/issues/10994

Malware Research

26 Jun 2024 00:02

I tried, and in fact this is not what I was looking for... but it's likely that someone wrote a ps1 wrapper using this PSDebug to dump all the intermediate values

Malware Research

25 Jun 2024 23:27

Before asking here ask chatgpt first 😍

Malware Research

25 Jun 2024 19:45

Hello folks!
I remember "some time ago" I read about a trick to "instrument" powershell scripts, so that when you run them you are shown line by line input and output, very useful for reversing ps1 malware... does this ring a bell?
Do you know what I'm talking about?

Malware Research

23 Jun 2024 18:38

What when did I write chinese

Malware Research

23 Jun 2024 18:09

New FedBan
Fed: Libra's Empire
FedAdmin: Libra
User: App developer
User ID: 6550221174
Reason: no spam

Malware Research

23 Jun 2024 14:49

User App developer has 1/3 warnings; be careful!
Reason:
English only

Malware Research

28 Jun 2024 08:32

Nvm i missed the "reverse engineering" sorry bud i am kinda single braincell here

Malware Research

27 Jun 2024 16:47

User 0x00 has 1/3 warnings; be careful!
Reason:
English only

Malware Research

27 Jun 2024 12:32

Well in many places is illegal to sell malware so...

Malware Research

27 Jun 2024 08:46

Paying criminals might not be legal, depending on your country

Malware Research

27 Jun 2024 05:11

yes, is it legal as long you don't use it for malicious purposes, obviously

Malware Research

26 Jun 2024 23:25

Would it be legal to buy malware in order to analyse it ?

Malware Research

26 Jun 2024 14:06

I don't think it will ever be fixed, but in doubt I think the PS fork is a great solution!

Malware Research

26 Jun 2024 12:56

New FedBan
Fed: Libra's Empire
FedAdmin: Libra
User: Stake Mines Milllionaire
User ID: 6938205406
Reason: get lost

Malware Research

26 Jun 2024 02:32

Might be from the IR group?

/channel/IncidentResponse/27706

I don't believe his codes are open source though

Malware Research

25 Jun 2024 23:27

Set-PSDebug -Trace 2

Malware Research

25 Jun 2024 23:17

sup is there any russians ?

Malware Research

24 Jun 2024 16:44

New FedBan
Fed: Libra's Empire
FedAdmin: ❤🦦
User: Byte Hacker
User ID: 5990593070
Reason: illegal activity

Malware Research

23 Jun 2024 18:10

User Tatsuya has 1/3 warnings; be careful!
Reason:
English only in this chat

Malware Research

23 Jun 2024 18:09

New FedBan
Fed: Libra's Empire
FedAdmin: Libra
User: uuuuuu hhhh
User ID: 6240585553
Reason: no skids

Malware Research

23 Jun 2024 13:20

Hello root@​botnet:~#, welcome to the Malware Research group! Please read the pinned message before you post!