FAUTLReports

Automating String Decoding in Malware: Analysing StealC V1 with IDAPython

2025-06-04

file_types:python file_types:elf file_types:so file_types:c techniques:encryption techniques:obfuscation techniques:anti-analysis techniques:string obfuscation debugger:pdb

One ClickFix and LummaStealer reCAPTCHA’s Our Attention - Part 1

2025-01-30

RevEng.AI

file_types:dll techniques:phishing file_types:powershell malware_types:loader file_types:html file_types:python malware_types:virus file_types:javascript techniques:sandbox file_types:iso

The Mac Malware of 2024

2025-01-01

Objective-See

Author: Patrick Wardle

malware_types:ransomware file_types:rar architecture:arm malware_types:loader architecture:x86_64 file_types:python file_types:javascript file_types:mach-o techniques:malware analysis tools file_types:rtf

This Meeting Should Have Been an Email

2024-07-15

Objective-See

Author: Patrick Wardle

file_types:zip file_types:exe file_types:html architecture:x86_64 file_types:python malware_types:downloader malware_types:backdoor file_types:javascript platforms:macos file_types:mach-o

Latrodectus Affiliate Resumes Operations Using Brute Ratel C4 Post Operation Endgame

2024-06-24

RevEng.AI

malware_types:ransomware file_types:dll file_types:pdf malware_types:loader file_types:python file_types:javascript techniques:sandbox platforms:windows server techniques:string obfuscation file_types:msi

Identifying x86_64 ELF Symbols in Stripped Binaries using AI

2024-05-02

RevEng.AI

file_types:pdf file_types:bin architecture:x86_64 file_types:python file_types:elf file_types:c platforms:debian disassembler:ghidra

The Mac Malware of 2023

2024-01-01

Objective-See

Author: Patrick Wardle

malware_types:ransomware file_types:ruby file_types:zip platforms:linux file_types:dat architecture:x86_64 file_types:python techniques:sandbox file_types:mach-o techniques:malware analysis tools

The LockBit ransomware (kinda) comes for macOS

2023-04-16

Objective-See

Author: Patrick Wardle

malware_types:ransomware file_types:dll file_types:zip platforms:linux file_types:txt file_types:dat architecture:arm file_types:python file_types:json file_types:mach-o

The Mac Malware of 2022

2023-01-01

Objective-See

Author: Patrick Wardle

malware_types:ransomware file_types:zip platforms:linux malware_types:loader architecture:x86_64 file_types:python file_types:javascript file_types:mach-o techniques:malware analysis tools cve:cve-2019-8526

How Shlayer Hides its Configuration

2022-12-27

Objective-See

Author: Taha Karim

file_types:html file_types:python file_types:macho malware_types:downloader file_types:bash malware_types:trojan file_types:xml platforms:macos file_types:mach-o malware_types:adware

The Mac Malware of 2021

2022-01-01

Objective-See

Author: Patrick Wardle

file_types:zip platforms:linux architecture:arm architecture:x86_64 file_types:python file_types:javascript file_types:mach-o techniques:malware analysis tools malware_types:password stealer cve:cve-2021-1789

Made in China: OSX.ZuRu

2021-09-14

Objective-See

Author: Patrick Wardle

file_types:zip file_types:txt file_types:bin malware_types:loader architecture:x86_64 file_types:python file_types:sh file_types:so file_types:php file_types:mach-o

OSX.Hydromac

2021-06-04

Objective-See

Author: Taha Karim

architecture:arm malware_types:loader file_types:python techniques:honeypot file_types:so malware_types:downloader techniques:persistence disassembler:ida pro platforms:macos malware_types:adware

All Your Macs Are Belong To Us

2021-04-26

Objective-See

Author: Patrick Wardle

file_types:zip file_types:pdf file_types:bin architecture:x86_64 file_types:python file_types:sh file_types:so file_types:mach-o file_types:objective-c cve:cve-2021-30657

Discharging ElectroRAT

2021-01-05

Objective-See

Author: Patrick Wardle

platforms:linux file_types:bin architecture:x86_64 file_types:python file_types:javascript malware_types:keylogger file_types:css file_types:json file_types:mach-o malware_types:password stealer

The Mac Malware of 2020

2021-01-01

Objective-See

Author: Patrick Wardle

malware_types:ransomware platforms:linux file_types:dat architecture:arm architecture:x86_64 file_types:python file_types:javascript file_types:mach-o techniques:malware analysis tools techniques:kernel-mode rootkit

Adventures in Anti-Gravity (Part II)

2020-11-27

Objective-See

Author: Patrick Wardle

platforms:linux file_types:html architecture:x86_64 file_types:python file_types:php file_types:javascript cloud_environments:vmware file_types:css platforms:macos file_types:mach-o

Adventures in Anti-Gravity (Part I)

2020-11-03

Objective-See

Author: Patrick Wardle

malware_types:ransomware platforms:linux file_types:bin architecture:x86_64 file_types:python file_types:php techniques:persistence malware_types:spyware platforms:macos file_types:mach-o

FinFisher Filleted

2020-09-26

Objective-See

Author: Patrick Wardle

file_types:zip platforms:linux file_types:bin file_types:dat architecture:x86_64 file_types:python techniques:privilege escalation file_types:mach-o file_types:objective-c techniques:kernel-mode rootkit

Office Drama on macOS

2020-08-04

Objective-See

Author: Patrick Wardle

file_types:zip file_types:bin file_types:dat file_types:python file_types:so platforms:windows techniques:sandbox file_types:doc file_types:swift cve:cve-2019-1457

Malware Analysis Reports