|
Use Ghidra to decrypt strings of KpotStealer malware
|
larsborn
|
67f8302a2fd28d15f62d6d20d748bfe350334e5353cbdef112bd1f8231b5599d
|
medium
|
|
|
13 Jan 2026
|
|
C2 Extractor for Turla's Kopiluwak Using Binary Refinery
|
struppigel
|
2299ff9c7e5995333691f3e68373ebbb036aa619acd61cbea6c5210490699bb6
|
medium
|
|
|
11 Jan 2026
|
|
Unpacking AutoIt Stub with Large Obfuscated Script
|
struppigel
|
ee69b74d0f0dd59fcd87304863626efb727ad6255bc29a7d48b7a441390dff1a
|
medium
|
|
|
11 Jan 2026
|
|
JPHP Malware Analysis - "Soft-Activator"
|
xusheng
|
e7cf02ad880e8ebb37134c5370189bd2620ce1bf60794aa8776db6ccc4d4f0f7
|
medium
|
|
|
10 Jan 2026
|
|
D3f@ck Loader from Inno Setup to JPHP
|
struppigel
|
e7cf02ad880e8ebb37134c5370189bd2620ce1bf60794aa8776db6ccc4d4f0f7
|
medium
|
|
|
09 Jan 2026
|
|
Malware Analysis: Batch2Exe Fake Ransomware/Screenlocker
|
xusheng
|
482a8b7ead1e07ac728e1e2b9bcf90a26af9b98b15969a3786834d6e81d393cd
|
easy
|
|
|
09 Jan 2026
|
|
D3f@ck Loader from Inno Setup to JPHP
|
struppigel
|
7409250e8be3bdcdaa756faff2150b13677ae066e42cefa52844c87451f6f60d
|
medium
|
|
|
09 Jan 2026
|
|
Defeating Sodinokibi/REvil String-Obfuscation in Ghidra
|
larsborn
|
5f56d5748940e4039053f85978074bde16d64bd5ba97f6f0026ba8172cb29e93
|
medium
|
|
|
07 Jan 2026
|
|
Office Dropper
|
0xdeluks
|
9887f1e95b4e11825941bd207400d1cc1580a7d438969f6c8d8c656551d339e2
|
easy
|
|
|
05 Jan 2026
|
|
JScript Loader Analysis
|
0xdeluks
|
5bc8b1a067ec4b487e88c2bb93728158633f4fdf22b111d5562cbb4ad3426d30
|
medium
|
|
|
05 Jan 2026
|
|
AlmondRAT Analysis
|
0xdeluks
|
55901c2d5489d6ac5a0671971d29a31f4cdfa2e03d56e18c1585d78547a26396
|
easy
|
|
|
05 Jan 2026
|
|
Analyzing MS Office Macro Malware with Oletools
|
struppigel
|
9887f1e95b4e11825941bd207400d1cc1580a7d438969f6c8d8c656551d339e2
|
easy
|
|
|
05 Jan 2026
|
|
Programmatically NOP the Current Selection in Ghidra
|
larsborn
|
0b38ca277bbb042d43bd1f17c4e424e167020883526eb2527ba929b2f0990a8f
|
medium
|
|
|
05 Jan 2026
|
|
Dissecting a fresh BlankGrabber sample
|
humpty_tony
|
94237eac80fd2a20880180cab19b94e8760f0d1f06715ff42a6f60aef84f4adf
|
medium
|
|
|
04 Jan 2026
|
|
Install Linters, Get Malware - DevSecOps Speedrun Edition
|
humpty_tony
|
5bed39728e404838ecd679df65048abcb443f8c7a9484702a2ded60104b8c4a9
|
medium
|
|
|
04 Jan 2026
|
|
Supper is served
|
humpty_tony
|
61f8224108602eb1f74cb525731c9937c2ffd9a7654cb0257624507c0fdb5610
|
medium
|
|
|
04 Jan 2026
|
|
Config extraction of a cobalt strike beacon
|
malcat
|
4109d17d439e425d24e9d11956adcc63ff8e24ccfffe21dd8c5431fe969d2783
|
medium
|
|
|
04 Jan 2026
|