Malware Headliners: Dridex
Dridex is a banking trojan that has plagued the cyberverse for years. Check out this post for some initial malware analysis.
Cybersecurity Research
Welcome to Atomic Matryoshka, a cybersecurity blog dedicated to malware reversing, digital forensics, incident response, and offensive security. Check out the latest content and feel free to share with the greater community.
Explore
Search
z3r0day_504
- Jan 2
- 6 min
"Cracking Open the Malware Piñata" Series: Intro to Dynamic Analysis with RedLineStealer
Dynamic analysis involves running a binary and observing its behavior in a controlled environment. This can be of significant benefit...
131 views0 comments
z3r0day_504
- Dec 27, 2021
- 7 min
"Cracking Open the Malware Piñata" Series: Intro to Static Analysis with Kazy Trojan
Static analysis, put concisely, is getting information from a specimen without actually executing/detonating it. While it is less...
33 views0 comments
z3r0day_504
- Dec 20, 2021
- 5 min
"Cracking Open the Malware Piñata" Series: Analysis Environment Setup
In recent weeks I've spent a good amount of time delving into a topic that truly fascinates me, and that's malware reverse engineering....
20 views0 comments
z3r0day_504
- Oct 21, 2021
- 4 min
AutoRun Malware: Why your computer is summoning dark lords after you plugged in that parking lot USB
For the last three weeks you've overheard your coworkers go on and on about the MMORPG they've been playing online. Curiosity starts...
27 views0 comments
z3r0day_504
- Aug 22, 2021
- 4 min
Pesky Persistence: How "Turning It Off and On Again" May Not Solve Your Problem
Anyone that uses a computer has heard the old "have you tried turning it off and on again" as a solution to experiencing issues;...
9 views0 comments
z3r0day_504
- Aug 9, 2021
- 4 min
Hacking the Brain: The Psychology of Phishing and Social Engineering
We hear it regularly in workplace trainings and general reporting: watch out for phishing emails and don't click on those links! Some...
14 views0 comments
z3r0day_504
- Jul 27, 2021
- 4 min
Process Injection: Malware Lurking in the Shadows of Legitimate Programs (Part 2)
In part 1 of this series, we delved into a basic understanding of what process injection is and the different mechanisms by which it can...
7 views0 comments
z3r0day_504
- Jul 11, 2021
- 4 min
Process Injection: Malware Lurking in the Shadows of Legitimate Programs (Part 1)
It's a Saturday afternoon, you're tinkering with your computer, and a random curiosity happens to pique your interest. You start taking a...
10 views0 comments
z3r0day_504
- Jul 5, 2021
- 4 min
Malicious C2 Domains: How to stomp a moving target
It's rare to find single-stage malware that is powerful, tailored, and effective on a particular target. How do attackers retain control...
60 views0 comments
z3r0day_504
- Jun 26, 2021
- 3 min
Web Shells: The Hacker's Pearl in a Sea of Networked Environments
In this blog post, we break down what a web shell is and why it poses a risk to a digital environment, review a recent event involving...
10 views0 comments
z3r0day_504
- Jun 17, 2021
- 4 min
Windows Authentication Bypass via Accessibility Binaries
We've probably all encountered the frustrating moment of trying to login to your computer after a brief hiatus from work or school, to ...
25 views0 comments
z3r0day_504
- Jun 2, 2021
- 5 min
RANSOMWARE: WHAT IS IT AND WHY HAS IT TAKEN CYBERSPACE BY STORM?
Unfortunately there is no rarity in daily news reporting on a new corporate victim of ransomware. The general population is most privy to...
1 view0 comments
z3r0day_504
- May 28, 2021
- 4 min
BASIC SECURITY LOG ANALYSIS ON WINDOWS
Security log analysis is helpful and effective on Windows when it comes to characterizing activity involving user accounts, remote access...
12 views0 comments
CONTACT
