FAUTLReports

Malware stories: Deworming the XWorm

2023-10-24

CERT.PL

Author: Jarosław Jedynak

malware_types:rat malware_types:dropper source_tag:analysis source_tag:xworm source_tag:malwarestory source_tag:malware

Unpacking what's packed: DotRunPeX analysis

2023-09-18

CERT.PL

Author: Jarosław Jedynak

techniques:phishing techniques:unpacking malware_types:dropper source_tag:analysis source_tag:malware source_tag:agenttesla source_tag:dotrunpex

Malspam campaign delivering PowerDash – a tiny PowerShell backdoor

2023-05-09

CERT.PL

Author: Michał Praszmo

file_types:powershell malware_types:backdoor source_tag:analysis source_tag:malware

A tale of Phobos - how we almost cracked a ransomware using CUDA

2023-02-23

CERT.PL

Author: Jarosław Jedynak

malware_types:ransomware file_types:so techniques:decryptor source_tag:analysis source_tag:malware

Vidar stealer campaign targeting Baltic region and NATO entities

2021-10-27

CERT.PL

Author: CERT Polska

source_tag:analysis source_tag:malware source_tag:vidar source_tag:stealer

Keeping an eye on CloudEyE (GuLoader) - Reverse engineering the loader

2021-04-13

CERT.PL

Author: Michał Praszmo

malware_types:loader malware_types:downloader source_tag:analysis source_tag:malware source_tag:guloader source_tag:cloudeye

What’s up Emotet?

2020-02-18

CERT.PL

Author: Michał Praszmo

source_tag:analysis source_tag:malware malware_families:emotet

Brushaloader gaining new layers like a pro

2019-11-19

CERT.PL

Author: Michał Praszmo

malware_types:loader file_types:so malware_types:dropper source_tag:analysis source_tag:malware source_tag:brushaloader file_types:xls

Dissecting Smoke Loader

2018-07-18

CERT.PL

Author: Michał Praszmo

malware_types:loader source_tag:analysis source_tag:malware source_tag:smokeloader

Backswap malware analysis

2018-06-19

CERT.PL

Author: Hubert Barc

source_tag:analysis source_tag:malware source_tag:e-banking source_tag:bank source_tag:banker

Ostap malware analysis (Backswap dropper)

2018-06-01

CERT.PL

Author: Paweł Srokosz

malware_types:botnet file_types:js malware_types:dropper source_tag:analysis source_tag:malware source_tag:banker

Analysis of a Polish BankBot

2018-01-16

CERT.PL

Author: Agnieszka Bielec

malware_types:botnet malware_types:trojan platforms:android source_tag:analysis source_tag:malware malware_types:bankbot

A deeper look at Tofsee modules

2017-10-19

CERT.PL

Author: Jarosław Jedynak

source_tag:analysis source_tag:malware source_tag:tofsee

Ramnit – in-depth analysis

2017-09-29

CERT.PL

Author: Michał Praszmo

file_types:html source_tag:analysis source_tag:malware source_tag:ramnit

Mole ransomware: analysis and decryptor

2017-05-30

CERT.PL

Author: Jarosław Jedynak

malware_types:ransomware file_types:so techniques:encryption techniques:decryptor source_tag:analysis source_tag:malware source_tag:tools

Analysis of Emotet v4

2017-05-24

CERT.PL

Author: Paweł Srokosz

malware_types:botnet malware_types:trojan malware_families:dridex source_tag:analysis source_tag:malware malware_families:emotet source_tag:dhl

Evil: A poor man’s ransomware in JavaScript

2017-01-18

CERT.PL

Author: Jarosław Jedynak

malware_types:ransomware file_types:javascript source_tag:analysis source_tag:malware source_tag:evil

Technical analysis of CryptoMix/CryptFile2 ransomware

2017-01-04

CERT.PL

Author: Jarosław Jedynak

malware_types:ransomware source_tag:analysis source_tag:malware source_tag:cryptfile2 source_tag:cryptomix

Tofsee – modular spambot

2016-09-16

CERT.PL

Author: Adam Krasuski

malware_types:botnet source_tag:analysis source_tag:malware source_tag:tofsee

Necurs – hybrid spam botnet

2016-09-02

CERT.PL

Author: Adam Krasuski

malware_types:botnet source_tag:analysis source_tag:malware source_tag:necurs

Malware Analysis Reports