lunedì 26 febbraio 2018

Analyzing the nasty .NET protection of the Ploutus.D malware.

›
Twitter: @s4tan EDIT: The source code is now online: https://github.com/enkomio/Conferences/tree/master/HackInBo2018 Recently the ATM ma...
domenica 12 novembre 2017

Shed - Inspect .NET malware like a Sir

›
When I start to analyze a new malware, there are some initial tasks that provide a lot of useful information to speedup the analysis. Two ...
sabato 16 settembre 2017

Using a Mealy automata for string obfuscation

›
Obfuscating string is a very important aspect if you want to protect sensitive information. In the following post I'll present an alter...
domenica 14 maggio 2017

Hiding PHP Webshell in an effective way

›
There are many reason why you want to hide your PHP Webshell, for example not being caught by the system administrator during a penetration ...
sabato 13 agosto 2016

Analyzing a malicious word document was never so easy

›
As a Threat Analyst I'm often involved in analyzing malicious MS Word documents. This task involve, among the other things, the extracti...
sabato 16 luglio 2016

New Fluent interface in Fslog

›
Fslog is a simple yet powerful library that can be used to log messages in your program. It was implemented with a semantic approach in min...
mercoledì 16 settembre 2015

CryptoPHP Vs Tempesta

›
I have recently published a new static analysis tool ( Tempesta ), useful to analyze PHP source code in order to identify a possible malicio...