|
Zpaq to .NET Downloader to Injector DLL Unpacking
|
struppigel
|
c2c466e178b39577912c9ce989cf8a975c574d5febe15ae11a91bbb985ca8d2e
|
medium
|
|
|
27 Jan 2026
|
|
[Samplepedia Solution] Unveiling the Layers: Analyzing a Multi-Stage APT-Style Loader
|
m4n0w4r
|
5544e6c66cbf6503cddef2797acbff4fb81ededaef2334a596e6484cfaa0b8e8
|
medium
|
|
|
19 Jan 2026
|
|
.NETReactor Deobfuscation and Configuration Extraction of AgentTesla
|
struppigel
|
45dc4518fbf43bf4611446159f72cdbc37641707bb924bd2a52644a3af5bab76
|
medium
|
|
|
16 Jan 2026
|
|
API Hashing in the Zloader malware
|
larsborn
|
4029f9fcba1c53d86f2c59f07d5657930bd5ee64cca4c5929cbd3142484e815a
|
medium
|
|
|
13 Jan 2026
|
|
Zloader String Obfuscation
|
larsborn
|
4029f9fcba1c53d86f2c59f07d5657930bd5ee64cca4c5929cbd3142484e815a
|
medium
|
|
|
13 Jan 2026
|
|
Use Ghidra to decrypt strings of KpotStealer malware
|
larsborn
|
67f8302a2fd28d15f62d6d20d748bfe350334e5353cbdef112bd1f8231b5599d
|
medium
|
|
|
13 Jan 2026
|
|
C2 Extractor for Turla's Kopiluwak Using Binary Refinery
|
struppigel
|
2299ff9c7e5995333691f3e68373ebbb036aa619acd61cbea6c5210490699bb6
|
medium
|
|
|
11 Jan 2026
|
|
Unpacking AutoIt Stub with Large Obfuscated Script
|
struppigel
|
ee69b74d0f0dd59fcd87304863626efb727ad6255bc29a7d48b7a441390dff1a
|
medium
|
|
|
11 Jan 2026
|
|
JPHP Malware Analysis - "Soft-Activator"
|
xusheng
|
e7cf02ad880e8ebb37134c5370189bd2620ce1bf60794aa8776db6ccc4d4f0f7
|
medium
|
|
|
10 Jan 2026
|
|
D3f@ck Loader from Inno Setup to JPHP
|
struppigel
|
e7cf02ad880e8ebb37134c5370189bd2620ce1bf60794aa8776db6ccc4d4f0f7
|
medium
|
|
|
09 Jan 2026
|
|
D3f@ck Loader from Inno Setup to JPHP
|
struppigel
|
7409250e8be3bdcdaa756faff2150b13677ae066e42cefa52844c87451f6f60d
|
medium
|
|
|
09 Jan 2026
|
|
Defeating Sodinokibi/REvil String-Obfuscation in Ghidra
|
larsborn
|
5f56d5748940e4039053f85978074bde16d64bd5ba97f6f0026ba8172cb29e93
|
medium
|
|
|
07 Jan 2026
|
|
JScript Loader Analysis
|
0xdeluks
|
5bc8b1a067ec4b487e88c2bb93728158633f4fdf22b111d5562cbb4ad3426d30
|
medium
|
|
|
05 Jan 2026
|
|
Programmatically NOP the Current Selection in Ghidra
|
larsborn
|
0b38ca277bbb042d43bd1f17c4e424e167020883526eb2527ba929b2f0990a8f
|
medium
|
|
|
05 Jan 2026
|
|
Dissecting a fresh BlankGrabber sample
|
humpty_tony
|
94237eac80fd2a20880180cab19b94e8760f0d1f06715ff42a6f60aef84f4adf
|
medium
|
|
|
04 Jan 2026
|
|
Install Linters, Get Malware - DevSecOps Speedrun Edition
|
humpty_tony
|
5bed39728e404838ecd679df65048abcb443f8c7a9484702a2ded60104b8c4a9
|
medium
|
|
|
04 Jan 2026
|
|
Supper is served
|
humpty_tony
|
61f8224108602eb1f74cb525731c9937c2ffd9a7654cb0257624507c0fdb5610
|
medium
|
|
|
04 Jan 2026
|