Posts Tagged "malware"

Dridex - Technical Malware Analysis

One of the most famous banking Trojans back in 2014.

Qbot Technical Analysis

In this article, we take a look at how Qbot dynamically decrypts strings, creates API structs, and decrypts payloads. Then, we discuss about dealing with them using Binary Ninja and Binary Refinery.

Z2A Custom Sample Part 2

Here we come to the next part of my write-up for Z2A custom sample. I will analyze the stage 2 of this sample, and also extract the final stage.

Malware Unpacking Notes

Unpacking is well-known as a method for malware to hide its actual payload. Understanding this concept is fundamental for malware analysis.