Blog on Malware Research and Reverse Engineering by @push_pnx.

Joined September 2014
[blog post] Upgraded MCRIT Feature: IDA Plugin danielplohmann.github.io/blo…
8
1
34
6,169
[blog post] Knowledge Fragment: Hardening Win10 x64 on VirtualBox for Malware Analysis danielplohmann.github.io/blo…
1
13
1
50
10,112
[blog post] MCRIT: The MinHash-based Code Relationship & Investigation Toolkit danielplohmann.github.io/blo…
5
1
17
5,680
[blog post] Casting Sandbox Necromancy on DADSTACHE danielplohmann.github.io/blo…
7
1
16
[blog post] I updated "The Big Zeus Family Similarity Showdown", now with almost twice the samples and 4 new zeus-like families! byte-atlas.blogspot.com/2018…
[blog post] Upgrading ApiScout: Introducing ApiVectors. byte-atlas.blogspot.de/2018/…
1
10
2
19
[blog post] The Big Zeus Family Similarity Showdown. byte-atlas.blogspot.de/2018/…
3
27
3
32
[blog post] Quick analysis / identification of the "link" function between the Lazarus and WannaCry sample: byte-atlas.blogspot.com/2017…
[blog post / tool] ApiScout: Painless Windows API information recovery. byte-atlas.blogspot.com/2017…
[blog post] Hardening Win7 x64 on VirtualBox for Malware Analysis byte-atlas.blogspot.com/2017…
3
148
5
241
[blog post] Fobber Inline String Decryption byte-atlas.blogspot.com/2015…
15
24
[blog post] Bruteforcing Andromeda C&C configurations. byte-atlas.blogspot.de/2015/…
1
20
14
Regex to check you web server access logs for CVE-2014-6271 Shell Shock exploitation (v2 egrep compatible) \(\)\s\{.*;\s*\};
3
13
9
cursory static analysis of DingleElite DDoS bot: zerobin.net/?4126dd143e52126…
1