Malchanic

Malware and stuff

[nickharbour @nickharbour]

The #flareon10 countdown is now live at https://t.co/M60cCMcxkX. Clear your weekend plans for Sept. 30th.

[Malchanic @MalwareMechanic]

@mrexodia @GoogleOSS @stevemk14ebr Congrats!! Love the tool! Well deserved ❤️

[Mike Hunhoff @mehunhoff]

capa explorer integrates capa’s automated capabilities detection seamlessly with IDA Pro. The plugin aims to focus your reverse engineering efforts, especially when analyzing malware. Check it out and let us know what you think!

[Mike Hunhoff @mehunhoff]

🚨 capa v5 release is out! Great improvements with big additions for .NET binary analysis. Did you know that capa displays the method token + instruction offset for each .NET match? You can use this info to find the matched location in dnSpy helping focus your analysis!

[Malchanic @MalwareMechanic]

What better way to finish off the year than a fresh release of FLARE VM?! 🥳 This release focuses on empowering community contributions and automation. Get it while its hot 🔥🔥🔥https://t.co/ZXd7bPr8v1

[Malchanic @MalwareMechanic]

@vinopaljiri Yasss! This has been badly needed!

[Malchanic @MalwareMechanic]

@th3cyF0x @DanielStepanic @_devonkerr_ Maybe some extra credit? 😂

[Malchanic @MalwareMechanic]

@fancy_4n6 @grumpy4n6 Yep, we haven’t forgotten! It’s been really busy as of late. Keep an eye out in the coming weeks 😀

[Malchanic @MalwareMechanic]

Remember to sleep! #flareon9

[nickharbour @nickharbour]

#flareon9 Pre-registration is now live! https://t.co/b0uJiVMBMi

[Malchanic @MalwareMechanic]

Get pumped!

[Mandiant (part of Google Cloud) @Mandiant]

Don't miss the next installment of the Mandiant FLARE team's webinar series, The Sample. This week, Principal Reverse Engineer Blaine Stancill will explain the inner workings of a dropper from the #WHITEDAGGER malware family. Register now! https://t.co/ocDKpqnOLA

[nickharbour @nickharbour]

#flareon9 is happening. Let your family know you'll miss them. https://t.co/ymB08dVnjh

[Malchanic @MalwareMechanic]

@SeanTheGeek Yep, we’re in the works of refreshing it! Main goal is open sourcing the packages for community support, ease of package creation, and automation via GitHub actions. It’s been slow going but we are working on it. Trying to target a new release later this year

[Mike Hunhoff @mehunhoff]

🚨 Today we're excited to release Ghidrathon, a Ghidra extension that adds modern Python 3 scripting (including Python 3.10) to Ghidra!

Blog 👉 https://t.co/oA1aY813R0
GitHub 👉 https://t.co/8wy30NmNoN

[Malchanic @MalwareMechanic]

@vinopaljiri Thanks for this! Another fun tool to have in your arsenal: https://t.co/4ta3sba98g

[Thomas Roccia 🤘 @fr0gger_]

@c3rb3ru5d3d53c For people learning malware evasion techniques, the #UnprotectProject can often provide you the answer 😊

#infosec #malware cf: @DarkCoderSc

https://t.co/oAZUDFyaU7

[Jiří Vinopal @vinopaljiri]

@MalGamy12 [2/2] you got last native loader which will be hosting .NET to be able to load "redline" code which is written in .NET. If you want to process the unpacking of these sh*t loading .NET payload really quickly use DNSpy. Load the original native sample, set module breakpoint - bam

[Malchanic @MalwareMechanic]

FLOSS v2.0 just dropped!! This release is packed full of updates and deobfuscates even more strings! https://t.co/SVb1gMIKXU

[Malchanic @MalwareMechanic]

@th3cyF0x @netspooky @jgeigerm 🤜🤛🥃

[rivitna @rivitna2]

For #APT #PlugX lovers ;-)
https://t.co/zNSUxnUPIE