231K subscribers in the Hacking_Tutorials community. Hacking Tutorials is a sub where Redditors can post various resources that discuss and teach the…

High Octane Triage Analysis. Contribute to binref/refinery development by creating an account on GitHub.

A cryptominer that uses the Invisible Internet protocol, Honkbox variants could still be evading some detection solutions.

Elastic Security Labs is tracking an active intrusion into a Vietnamese organization using a recently discovered triggerable, multi-hop backdoor we are calling PIPEDANCE. This full-featured malware enables stealthy operations through the use of named

Plugin manager for x64dbg. Contribute to horsicq/x64dbg-Plugin-Manager development by creating an account on GitHub.

Cyble analyzes BATLoader - A sophisticated loader being utilized by Threat Actors to deliver several malware families.

In this video, we unpack a packed APK using the Medusa framework and dynamic analysis.

Timestamps:
00:00 Intro
00:38 Opening Sample
02:04 Recap writing custom decryptor
03:24 Medusa Framework
05:22 Finding DexClassLoader in code
06:52 Running Medusa in a…

Export Hashing (”exphash”), inspired by Mandiant’s imphash, is a SHA-256 hash of ordinal-ordered export names in PEs. Tracking DLLs which are used in search-order hijacking can sometimes be tricky. They may have a partial Export Address Table compromising…

Read about a unique implementation of call stack spoofing, which defenders have started to leverage valid call stacks to detect malicious behavior.