TrueBot Analysis Part I - A short glimpse into packed TrueBot samples : https://malware.love/malware_analysis/reverse_engineering/2023/02/12/analyzing-truebot-packer.html

Part 2 : Static Unpacker : https://malware.love/malware_analysis/reverse_engineering/2023/02/18/analyzing-truebot-static-unpacking.html credits @lazy_daemon
🗣binitamshah


🎖@malwr

Chatting Our Way Into Creating a Polymorphic Malware : https://www.cyberark.com/resources/threat-research-blog/chatting-our-way-into-creating-a-polymorphic-malware
🗣binitamshah


🎖@malwr

Expose Backdoors on the Way : A Feature-Based Efficient Defense against Textual Backdoor Attacks : https://aclanthology.org/2022.findings-emnlp.47.pdf (pdf)
🗣binitamshah


🎖@malwr

New AMSI lifetime bypass, it works by searching for the first byte of each instruction to prevent updates from affecting it, Check it out.
#amsi #redteam #cybersecurity
https://github.com/ZeroMemoryEx/Amsi-Killer
🗣ZeroMemoryEx


🎖@malwr

It's About Time - Timestamp Changes in Windows 11
Good morning,

This episode was originally scheduled for release last month, but the new Windows 11 program execution artifact was a bit more timely and took its place. This episode covers a lot of fundamental Windows timestamp knowledge, plus some important timestamp changes in recent versions of Windows.

Watch Here: https://www.youtube.com/watch?v=c7eUibpy\_XM

For a complete 13Cubed Episode Guide, check out 13cubed.com/episodes.

For even more in-depth content, check out the first official 13Cubed Training Course at **training.13cubed.com**.
🗣13Cubed

Nice!
👤CandidTill6


🎖@malwr

Evasion-Escaper: Evasion Escaper is a project aimed at evading the checks that malicious software performs to detect if it's running in a virtual environment or sandbox, and to pass all such checks successfully.
🗣digicat

An interesting blog from the link you shared. Thanks for posting!
👤LeftOnQuietRoad


🎖@malwr