Malware Analysis Guides
How To Use Ghidra For Malware Analysis - Identifying, Decoding and Fixing Encrypted Strings
Manual identification, decryption and fixing of encrypted strings using Ghidra and x32dbg.
How To Use Ghidra
Malware Analysis Guides
How To Use Ghidra For Malware Analysis - Establishing Context on Imported Functions
Leveraging Ghidra to establish context and intent behind imported functions.
Malware Analysis Guides
Beginner Ghidra Guide - Manual Shellcode Decryption
Manually Reversing a decryption function using Ghidra, ChatGPT and CyberChef.
Malware Analysis Guides
Understanding and Improving The Ghidra UI for Malware Analysis
Improving Malware Analysis Workflows by Modifying the default Ghidra UI.
Malware Analysis Guides
Ghidra Tutorial - Using Entropy To Locate Cobalt Strike Decryption Functions
Using Ghidra Entropy Analysis to Identify a decryption function.
Detection Engineering
How To Write Yara Rules For Malware - Practical Examples
Practical examples and breakdowns of indicators that can be used to produce effective yara rules.
Malware Analysis Guides
AgentTesla Malware Analysis - How To Resolve API Hashes With Conditional Breakpoints
Analysis of a Multi-Stage Loader for AgentTesla. Covering Ghidra, Dnspy, X32dbg, API Hashing and more!
Malware Analysis Guides
Amadey Bot Malware Analysis - Static Analysis and C2 Extraction With Ghidra and x64Dbg
Using manual analysis to extract Amadey C2 information with Ghidra and x32dbg