FAUTLReports

MMD-0069-2024 - An old ELF Ransomware pivoted crypto (OpenSSL to PolarSSL) Linux/Encoder.1-2

2024-06-19

Author: unixfreaxjp

file_types:apk malware_types:ransomware file_types:rar file_types:dll file_types:ruby file_types:zip platforms:linux file_types:txt architecture:x86 file_types:pdf

DISGOMOJI Malware Used to Target Indian Government

2024-06-13

VOLEXITY

Author: Volexity Threat Research

platforms:linux

The Mac Malware of 2023

2024-01-01

Objective-See

Author: Patrick Wardle

malware_types:ransomware file_types:ruby file_types:zip platforms:linux file_types:dat architecture:x86_64 file_types:python techniques:sandbox file_types:mach-o techniques:malware analysis tools

It's Turtles All The Way Down

2023-11-30

Objective-See

Author: Patrick Wardle

malware_types:ransomware file_types:zip platforms:linux file_types:txt architecture:arm architecture:x86_64 file_types:so malware_types:trojan architecture:arm64 file_types:mach-o

The LockBit ransomware (kinda) comes for macOS

2023-04-16

Objective-See

Author: Patrick Wardle

malware_types:ransomware file_types:dll file_types:zip platforms:linux file_types:txt file_types:dat architecture:arm file_types:python file_types:json file_types:mach-o

The Mac Malware of 2022

2023-01-01

Objective-See

Author: Patrick Wardle

malware_types:ransomware file_types:zip platforms:linux malware_types:loader architecture:x86_64 file_types:python file_types:javascript file_types:mach-o techniques:malware analysis tools cve:cve-2019-8526

SysJoker, the first (macOS) malware of 2022!

2022-01-11

Objective-See

Author: Patrick Wardle

file_types:zip platforms:linux file_types:txt file_types:bin architecture:x86_64 file_types:sh file_types:so platforms:windows architecture:arm64 file_types:mach-o

The Mac Malware of 2021

2022-01-01

Objective-See

Author: Patrick Wardle

file_types:zip platforms:linux architecture:arm architecture:x86_64 file_types:python file_types:javascript file_types:mach-o techniques:malware analysis tools malware_types:password stealer cve:cve-2021-1789

MMD-0067-2021 - Recent talks on Linux process injection and shellcode analysis series (ROOTCON-2020, R2CON-2020 ++)

2021-03-03

MalwareMustDie

Author: unixfreaxjp

platforms:linux malware_types:fileless architecture:arm debugger:gdb malware_types:loader architecture:mips file_types:html disassembler:objdump disassembler:die techniques:code injection

ROOTCON 2020 - Deeper diving into shellcode (advanced users)

2021-03-03

MalwareMustDie

Author: unixfreaxjp

platforms:linux malware_types:fileless architecture:arm debugger:gdb malware_types:loader architecture:mips file_types:html disassembler:objdump disassembler:die techniques:code injection

R2CON 2020 - So you don't like shellcode too? (for r2 RE beginners)

2021-03-03

MalwareMustDie

Author: unixfreaxjp

platforms:linux malware_types:fileless architecture:arm debugger:gdb malware_types:loader architecture:mips file_types:html disassembler:objdump disassembler:die techniques:code injection

Discharging ElectroRAT

2021-01-05

Objective-See

Author: Patrick Wardle

platforms:linux file_types:bin architecture:x86_64 file_types:python file_types:javascript malware_types:keylogger file_types:css file_types:json file_types:mach-o malware_types:password stealer

The Mac Malware of 2020

2021-01-01

Objective-See

Author: Patrick Wardle

malware_types:ransomware platforms:linux file_types:dat architecture:arm architecture:x86_64 file_types:python file_types:javascript file_types:mach-o techniques:malware analysis tools techniques:kernel-mode rootkit

Detecting SSH Activity via Process Monitoring

2020-12-10

Objective-See

Author: Jaron Bradley

platforms:linux file_types:bin file_types:sh file_types:so file_types:bash file_types:xml platforms:macos techniques:living off the land file_types:ksh file_types:zsh

Adventures in Anti-Gravity (Part II)

2020-11-27

Objective-See

Author: Patrick Wardle

platforms:linux file_types:html architecture:x86_64 file_types:python file_types:php file_types:javascript cloud_environments:vmware file_types:css platforms:macos file_types:mach-o

Adventures in Anti-Gravity (Part I)

2020-11-03

Objective-See

Author: Patrick Wardle

malware_types:ransomware platforms:linux file_types:bin architecture:x86_64 file_types:python file_types:php techniques:persistence malware_types:spyware platforms:macos file_types:mach-o

FinFisher Filleted

2020-09-26

Objective-See

Author: Patrick Wardle

file_types:zip platforms:linux file_types:bin file_types:dat architecture:x86_64 file_types:python techniques:privilege escalation file_types:mach-o file_types:objective-c techniques:kernel-mode rootkit

The Dacls RAT ...now on macOS!

2020-05-05

Objective-See

Author: Patrick Wardle

platforms:linux file_types:bin architecture:x86_64 file_types:so platforms:windows file_types:iso file_types:swift file_types:mach-o techniques:anti-disassembly cve:cve-2019-3396

MMD-0066-2020 - Linux/Mirai-Fbot - A re-emerged IoT threat

2020-02-24

MalwareMustDie

Author: unixfreaxjp

platforms:linux architecture:x86 file_types:pdf file_types:bin architecture:arm malware_types:loader architecture:x86_64 file_types:python techniques:unpacking techniques:honeypot

MMD-0065-2020 - Linux/Mirai-Fbot's new encryption explained

2020-01-15

MalwareMustDie

Author: unixfreaxjp

platforms:linux techniques:system calls architecture:arm architecture:mips disassembler:die architecture:x86_64 file_types:sh file_types:elf malware_types:botnet file_types:so

Malware Analysis Reports