Latest Solutions

Cutting corners against a Dridex downloader (part #1)
Cutting corners against a Dridex downloader (part #1)

6f8f1b26324ea0f3f566fbdcb4a61eb92d054ccf0300c52b3549c774056b8f02

medium

malcat • Jan 04, 2026 • Blog

Exploit, steganography and Delphi: unpacking DBatLoader (part #2)
Exploit, steganography and Delphi: unpacking DBatLoader (part #2)

3045902d7104e67ca88ca54360d9ef5bfe5bec8b575580bc28205ca67eeba96d

advanced

malcat • Jan 04, 2026 • Blog

Exploit, steganography and Delphi: unpacking DBatLoader (part #1)
Exploit, steganography and Delphi: unpacking DBatLoader (part #1)

13063a496da7e490f35ebb4f24a138db4551d48a1d82c0c876906a03b8e83e05

easy

malcat • Jan 04, 2026 • Blog

Statically unpacking a simple .NET dropper
Statically unpacking a simple .NET dropper

15180ee9f6a8682b24a0d5cb0491bb4e09d457bfab5a24ec1fcb077dab59773b

easy

malcat • Jan 04, 2026 • Blog

JS to PowerShell to XWorm with Binary Refinery
JS to PowerShell to XWorm with Binary Refinery

cb21368467bdf0ca8a4cd458f54d684e10da2d43a9c7285e094d39bdc410fb10

medium

struppigel • Jan 04, 2026 • Video

JS to PowerShell to XWorm with Binary Refinery
JS to PowerShell to XWorm with Binary Refinery

5bc8b1a067ec4b487e88c2bb93728158633f4fdf22b111d5562cbb4ad3426d30

medium

struppigel • Jan 04, 2026 • Video