Malware Analysis Tutorials
Demonstrating three additional methods for obtaining unpacked malware samples. Using Process Hacker, Pe-sieve, Hxd and Pe-bear.
Malware Analysis Tutorials
Unpacking an Asyncrat loader using Process Hacker and Dnspy
Detection Engineering
How to develop Yara rules for .NET Malware. Utilising IL instructions and associated bytecodes.
Malware Analysis Tutorials
Introduction to dotnet configuration extraction. Leveraging RevengeRat and Python.
Threat Intelligence Guides
Extraction of Quasar C2 configuration via Dnspy, and using this information to pivot to additional servers utilising Shodan and Censys.
Malware Analysis Tutorials
Manual analysis and deobfuscation of a .NET based Dcrat. Touching on Custom Python Scripts, Cyberchef and .NET analysis with Dnspy.