Reverse Engineering

Analysis Walkthrough: APT32’s {79828CC5–8979–43C0–9299–8E155B397281}.dll

It’s a BEE! It’s a… no, it’s ShadowPad.

Analysis walkthrough of ShadowPad variant 2020/2021 that…

Quarians, Turians and…QuickHeal

I was expecting to find an Asari or Salarian variant of this malware…

A Look into SUNBURST’s DGA

My attempt at a script that decodes all of SUNBURST’s DGA strings :)

Do you want to bake a donut? Come on, let’s go update~ Go away, Maria.

Journal: FlareOn7 (Part 3)

This is the last part of the series :)

Journal: FlareOn7 (Part 2)

Continue walking with me on levels 7–9…

Journal: FlareOn7 (Part 1)

Walk with me through my approach to the challenges in FlareOn7 :)

What happened between the BigBadWolf and the Tiger?

Shadows with a chance of BlackNix

A long post on analysis of a variant of BlackNix RATs, which are…