insomniacs

Analysis Walkthrough: APT32’s {79828CC5–8979–43C0–9299–8E155B397281}.dll

CDRThief 新变种/New CDRThief Variant!

Exploring the new CDRThief Variant

It’s a BEE! It’s a… no, it’s ShadowPad.

Analysis walkthrough of ShadowPad variant 2020/2021 that…

Aria-Body Loader? Is that you?

Hello! This is my first time writing a blog on a loader which I had gotten hold of. So, I am a new…

Quarians, Turians and…QuickHeal

I was expecting to find an Asari or Salarian variant of this malware…

Volatility 3 — Downloading Windows Symbols for Volatility 3 on Air-gapped Machines

A Look into SUNBURST’s DGA

My attempt at a script that decodes all of SUNBURST’s DGA strings :)

Do you want to bake a donut? Come on, let’s go update~ Go away, Maria.

Journal: FlareOn7 (Part 3)

This is the last part of the series :)