Malware Research

01 Jul 2024 17:07

Is this Xylitol from twitter?

Malware Research

01 Jul 2024 14:09

Hello dear friends, can anyone please help me to download this sample?
37214b37345bfbeeacf7b83ecb4e1ce0044acc2066d14e7ef9a87fd56a3b5975

Malware Research

28 Jun 2024 14:30

Hello @ShadowWraith0, welcome to the Malware Research group! Please read the pinned message before you post!

Malware Research

28 Jun 2024 08:41

If not you can join /channel/RSTReportHub this channel and look for ransomware reports and try analyzing them

Malware Research

28 Jun 2024 08:36

You can start with using something like this http://www.dcs.fmph.uniba.sk/zri/6.prednaska/tools/PEiD/plugins/kanal.htm ? Maybe ? Try to figure out the some key common artefacts im ransomware sample like anti analysis, shadowcopy deletion , and all of that, try to read writeups related to technical analysis of ransomware samples

Malware Research

27 Jun 2024 23:32

I have knowledge in reverse engineering but want to study ransomware reverse engineering.
Are there any courses specific to this?

I have read the pinned message, but didn’t find any resources attached

Malware Research

27 Jun 2024 12:33

In fact many "legal" malware development companies such as REMCOS (i think) sell it as "surveillance" software

Malware Research

27 Jun 2024 12:15

the language of the chat is English

Malware Research

27 Jun 2024 08:46

New FedBan
Fed: Libra's Empire
FedAdmin: Libra
User: Khandare Bhushan
User ID: 6155433766
Reason: no skids

Malware Research

26 Jun 2024 23:37

I cannot find the paper, but I'm 100% sure I've read that someone did it for a scientific article -- this doesn't imply it's legal, it means that it's "tolerated in science"

Malware Research

26 Jun 2024 14:07

I was sincerely hoping for something plug-n-play!

Malware Research

26 Jun 2024 14:04

Wow thanks, you're a database :)
As a reference:

PowerShell is opensource => Make your own instrumented fork

Malware Research

26 Jun 2024 02:35

Another one that I can think of is due to the PS-Transcript bug, but his code hasn't been updated. Searching for this bug should lead you to something similar created for debugging purposes, likely useful for reversing PS malware

https://github.com/PowerShell/PowerShell/issues/10994

Malware Research

26 Jun 2024 00:02

I tried, and in fact this is not what I was looking for... but it's likely that someone wrote a ps1 wrapper using this PSDebug to dump all the intermediate values

Malware Research

25 Jun 2024 23:27

Before asking here ask chatgpt first 😍

Malware Research

01 Jul 2024 14:09

Reference: https://darkatlas.io/blog/ghostlocker-raas-v2-0

Malware Research

29 Jun 2024 05:39

Hello .​, welcome to the Malware Research group! Please read the pinned message before you post!

Malware Research

28 Jun 2024 11:01

Hello 2, welcome to the Malware Research group! Please read the pinned message before you post!

Malware Research

28 Jun 2024 08:40

https://www.fortinet.com/blog/threat-research/analysis-of-net-thanos-ransomware-supporting-safeboot-with-networking-mode you can start with this @MendelG lmk if you need the sample

Malware Research

28 Jun 2024 08:32

Nvm i missed the "reverse engineering" sorry bud i am kinda single braincell here

Malware Research

27 Jun 2024 16:47

User 0x00 has 1/3 warnings; be careful!
Reason:
English only

Malware Research

27 Jun 2024 12:32

Well in many places is illegal to sell malware so...

Malware Research

27 Jun 2024 08:46

Paying criminals might not be legal, depending on your country

Malware Research

27 Jun 2024 05:11

yes, is it legal as long you don't use it for malicious purposes, obviously

Malware Research

26 Jun 2024 23:25

Would it be legal to buy malware in order to analyse it ?

Malware Research

26 Jun 2024 14:06

I don't think it will ever be fixed, but in doubt I think the PS fork is a great solution!

Malware Research

26 Jun 2024 12:56

New FedBan
Fed: Libra's Empire
FedAdmin: Libra
User: Stake Mines Milllionaire
User ID: 6938205406
Reason: get lost

Malware Research

26 Jun 2024 02:32

Might be from the IR group?

/channel/IncidentResponse/27706

I don't believe his codes are open source though

Malware Research

25 Jun 2024 23:27

Set-PSDebug -Trace 2

Malware Research

25 Jun 2024 23:17

sup is there any russians ?