FAUTLReports

MMD-0067-2021 - Recent talks on Linux process injection and shellcode analysis series (ROOTCON-2020, R2CON-2020 ++)

2021-03-03

Author: unixfreaxjp

platforms:linux malware_types:fileless architecture:arm debugger:gdb malware_types:loader architecture:mips file_types:html disassembler:objdump disassembler:die techniques:code injection

ROOTCON 2020 - Deeper diving into shellcode (advanced users)

2021-03-03

MalwareMustDie

Author: unixfreaxjp

platforms:linux malware_types:fileless architecture:arm debugger:gdb malware_types:loader architecture:mips file_types:html disassembler:objdump disassembler:die techniques:code injection

R2CON 2020 - So you don't like shellcode too? (for r2 RE beginners)

2021-03-03

MalwareMustDie

Author: unixfreaxjp

platforms:linux malware_types:fileless architecture:arm debugger:gdb malware_types:loader architecture:mips file_types:html disassembler:objdump disassembler:die techniques:code injection

OceanLotus: Extending Cyber Espionage Operations Through Fake Websites

2020-11-06

VOLEXITY

Author: Steven Adair, Thomas Lancaster, Volexity Threat Research

disassembler:die

Low-Level Process Hunting on macOS

2020-07-19

Objective-See

Author: Jaron Bradely

file_types:bin techniques:system calls disassembler:die file_types:sh file_types:so file_types:go file_types:bash platforms:macos file_types:ksh file_types:zsh

MMD-0065-2020 - Linux/Mirai-Fbot's new encryption explained

2020-01-15

MalwareMustDie

Author: unixfreaxjp

platforms:linux techniques:system calls architecture:arm architecture:mips disassembler:die architecture:x86_64 file_types:sh file_types:elf malware_types:botnet file_types:so

High Sierra's 'Secure Kernel Extension Loading' is Broken

2017-09-05

Objective-See

disassembler:die file_types:sh file_types:so platforms:windows platforms:macos

MMD-0035-2015 - Linux/.IptabLex or .IptabLes on Shellshock(by: ChinaZ)

2015-07-01

MalwareMustDie

Author: unixfreaxjp

file_types:zip platforms:linux file_types:txt file_types:bin disassembler:die file_types:elf file_types:bash malware_types:virus platforms:linux server architecture:x64

Targeted attack of "Operation Torpedo"

2014-08-11

MalwareMustDie

Author: unixfreaxjp

file_types:html disassembler:die file_types:so file_types:go file_types:c file_types:javascript cve:cve-2013-1690

MMD-0016-2014 - The JackPOS Behind the Screen

2014-02-13

MalwareMustDie

Author: unixfreaxjp

file_types:bin disassembler:die file_types:so file_types:go malware_types:virus file_types:c techniques:persistence

Malware Analysis Reports