Ghidra training slides with notes: ghidra.re/online-courses/

[VIDEO] Unpacking #Baldr stealer: youtube.com/watch?v=E2V4kB… #MalwareUnpacking #malware

Don't approach malware analysis saying "I need to examine every line of code" Instead, start by asking: - What network connections does this make - What files does it writes to disk - Does it have persistence You can further explore with meaningful focus, in digestible chunks.

New blog post "Quickpost: Decrypting Cobalt Strike Traffic" blog.didierstevens.com/2021/04/26/qui…

哈哈，找到了IoC 46.249.35.180 94.198.40.19 mp.weixin.qq.com/s/gH6cWCn8PswJ…

Detecting & Hunting Ransomware Operator Tools: It Is Easier Than You Think! youtu.be/oMAvSpq9fYY?si…

Chris Duggan BODY_SHA1-IP: a78dda24e41edb22c214a4d5db1caf2671b5dff7 5.255.119[.]183 5.255.119[.]195 5.255.114[.]16 5.255.99[.]169 5.255.121[.]218 5.255.122[.]118 5.255.101[.]146