Emotet DLL Part 2: Dynamic Analysis
Picking up where we left off in the previous post, we're going to start off by executing the DLL. Based on the export function we saw in...
Malware and DFIR Research
Welcome to Atomic Matryoshka, a cybersecurity blog dedicated to malware reversing, digital forensics, and incident response. Check out the latest content and feel free to share with the greater community.
Explore
Search
z3r0day_504
- May 12
- 2 min
Emotet .xls Dropper
Anyone who's been tracking the evolution of prevalent malware families may or may not have heard that the developers behind Emotet...
72 views0 comments
z3r0day_504
- Apr 25
- 2 min
Emotet DLL Part 1: Static Analysis
In a previous post, I covered the file analysis for an Excel file containing malicious code related to Emotet. In this post, we take...
65 views0 comments
z3r0day_504
- Apr 4
- 2 min
Basic Static and Dynamic Analysis of Amadey Loader
In this blog post, I'll cover some basic static and dynamic analysis around Amadey Loader. Amadey is available on Russian-speaking hacker...
88 views0 comments
z3r0day_504
- Mar 14
- 1 min
What is fuzzy hashing?
In a recent conversation with a coworker, the topic of fuzzy hashing came up and how frequently he uses it in his malware analysis...
128 views0 comments
z3r0day_504
- Feb 21
- 2 min
Ousaban MSI Installer Analysis
In this blog post, I'll provide some cursory coverage on Ousaban and its initial stage via a Microsoft Installer (MSI) file. Ousaban is a...
138 views0 comments
z3r0day_504
- Feb 7
- 3 min
Basic PDF Analysis - Formbook Malware
Analysis of Formbook malware delivered via PDF file
154 views0 comments
z3r0day_504
- Jan 28
- 3 min
Malware Headliners: LokiBot
Analysis of LokiBot password stealer
145 views0 comments
z3r0day_504
- Jan 22
- 2 min
Malware Headliners: Emotet
Emotet is a banking trojan that topped the list for most widely seen malware in 2021. Similar to some of my previous posts, Emotet is...
113 views0 comments
z3r0day_504
- Jan 20
- 1 min
Indicators of Compromise (IOCs) List from Analyzed Samples
Living list of IOCs identified for all samples analyzed and published
54 views0 comments
z3r0day_504
- Jan 15
- 3 min
Malware Headliners: Qakbot
Learn how to dissect Qakbot malware as we analyze one of the latest versions found in the wild
154 views0 comments
z3r0day_504
- Jan 9
- 4 min
Malware Headliners: Dridex
Dridex is a banking trojan that has plagued the cyberverse for years. Check out this post for some initial malware analysis.
155 views0 comments
z3r0day_504
- Jan 2
- 6 min
"Cracking Open the Malware Piñata" Series: Intro to Dynamic Analysis with RedLineStealer
Dynamic analysis involves running a binary and observing its behavior in a controlled environment. This can be of significant benefit...
15 views0 comments
z3r0day_504
- Dec 27, 2021
- 7 min
"Cracking Open the Malware Piñata" Series: Intro to Static Analysis with Kazy Trojan
Static analysis, put concisely, is getting information from a specimen without actually executing/detonating it. While it is less...
13 views0 comments
z3r0day_504
- Dec 20, 2021
- 5 min
"Cracking Open the Malware Piñata" Series: Analysis Environment Setup
In recent weeks I've spent a good amount of time delving into a topic that truly fascinates me, and that's malware reverse engineering....
12 views0 comments
z3r0day_504
- Oct 22, 2021
- 4 min
AutoRun Malware: Why your computer is summoning dark lords after you plugged in that parking lot USB
For the last three weeks you've overheard your coworkers go on and on about the MMORPG they've been playing online. Curiosity starts...
11 views0 comments
z3r0day_504
- Aug 23, 2021
- 4 min
Pesky Persistence: How "Turning It Off and On Again" May Not Solve Your Problem
Anyone that uses a computer has heard the old "have you tried turning it off and on again" as a solution to experiencing issues;...
5 views0 comments
z3r0day_504
- Aug 10, 2021
- 4 min
Hacking the Brain: The Psychology of Phishing and Social Engineering
We hear it regularly in workplace trainings and general reporting: watch out for phishing emails and don't click on those links! Some...
7 views0 comments
z3r0day_504
- Jul 28, 2021
- 4 min
Process Injection: Malware Lurking in the Shadows of Legitimate Programs (Part 2)
In part 1 of this series, we delved into a basic understanding of what process injection is and the different mechanisms by which it can...
0 views0 comments
z3r0day_504
- Jul 12, 2021
- 4 min
Process Injection: Malware Lurking in the Shadows of Legitimate Programs (Part 1)
It's a Saturday afternoon, you're tinkering with your computer, and a random curiosity happens to pique your interest. You start taking a...
2 views0 comments
CONTACT
