Latest Solutions

Exploit, steganography and Delphi: unpacking DBatLoader (part #2)
Exploit, steganography and Delphi: unpacking DBatLoader (part #2)

3045902d7104e67ca88ca54360d9ef5bfe5bec8b575580bc28205ca67eeba96d

advanced

malcat • Jan 04, 2026 • Blog

Exploit, steganography and Delphi: unpacking DBatLoader (part #1)
Exploit, steganography and Delphi: unpacking DBatLoader (part #1)

13063a496da7e490f35ebb4f24a138db4551d48a1d82c0c876906a03b8e83e05

easy

malcat • Jan 04, 2026 • Blog

Statically unpacking a simple .NET dropper
Statically unpacking a simple .NET dropper

15180ee9f6a8682b24a0d5cb0491bb4e09d457bfab5a24ec1fcb077dab59773b

easy

malcat • Jan 04, 2026 • Blog

JS to PowerShell to XWorm with Binary Refinery
JS to PowerShell to XWorm with Binary Refinery

cb21368467bdf0ca8a4cd458f54d684e10da2d43a9c7285e094d39bdc410fb10

medium

struppigel • Jan 04, 2026 • Video

JS to PowerShell to XWorm with Binary Refinery
JS to PowerShell to XWorm with Binary Refinery

5bc8b1a067ec4b487e88c2bb93728158633f4fdf22b111d5562cbb4ad3426d30

medium

struppigel • Jan 04, 2026 • Video

Writing an Unpacker for a 3-Stage Stub with Emulation via Speakeasy
Writing an Unpacker for a 3-Stage Stub with Emulation via Speakeasy

0ad4f87dfa9b814b78e9db2360a89ea7940fb5ad919637bbaacb1222fb44098d

medium

struppigel • Dec 31, 2025 • Video