Analysis process in a nutshell
Karsten Hahn
@struppigel@infosec.exchange
- 450 Followers
- 53 Following
- 65 Posts
Malware Analyst at G DATA. Ransomware hunter. he/him 🦔🌈🏳️⚧️
Taxonomy of Auto Start Extensibility Points and examples
(by Daniel Uroz, Ricardo J. Rodríguez)
(by Daniel Uroz, Ricardo J. Rodríguez)
Tfw you take a malware analysis course and give a bad rating because of malware files. o.O
Gallery of bloated and obfuscated Batch malware downloaders.
When dealing with huge malware text files, visualization can help to find the culprit.
E.g. Here is a disruption that shows up in blue. That's the actual malware code.
File is described here https://www.netskope.com/blog/asyncrat-using-fully-undetected-downloader
First found by @malwrhunterteam
PortexAnalyzerGUI release 0.12.9
➡️ alternate row colors for better visibility
➡️ tabs for different debug entries
➡️ toolbar settings are saved
https://github.com/struppigel/PortexAnalyzerGUI/releases/tag/0.12.9
PortexAnalyzerGUI v0.12.7 released
➡️System theme support
➡️Content preview panel on the right side (press the 2nd button in the toolbar)
https://github.com/struppigel/PortexAnalyzerGUI/releases/tag/0.12.7
#PortexAnalyzerGUI
➡️System theme support
➡️Content preview panel on the right side (press the 2nd button in the toolbar)
https://github.com/struppigel/PortexAnalyzerGUI/releases/tag/0.12.7
#PortexAnalyzerGUI
PortexAnalyzer support for Yara signature scans released.
