Byte Atlas (@ByteAtlas) profile picture

Byte Atlas

@ByteAtlas

Blog on Malware Research and Reverse Engineering by @push_pnx.

danielplohmann.github.io/
Joined September 2014
  • Tweets21
  • Following97
  • Followers433
13Media
Photo by Byte Atlas (@ByteAtlas)Photo by Byte Atlas (@ByteAtlas)Photo by Byte Atlas (@ByteAtlas)Photo by Byte Atlas (@ByteAtlas)Photo by Byte Atlas (@ByteAtlas)Photo by Byte Atlas (@ByteAtlas)Photo by Byte Atlas (@ByteAtlas)Photo by Byte Atlas (@ByteAtlas)Photo by Byte Atlas (@ByteAtlas)Photo by Byte Atlas (@ByteAtlas)
[blog post] MalpediaFLOSSed danielplohmann.github.io/blo…
Image from Byte Atlas (@ByteAtlas)
2
17
1
43
29,386
[blog post] Upgraded MCRIT Feature: IDA Plugin danielplohmann.github.io/blo…
Image from Byte Atlas (@ByteAtlas)
8
1
34
6,169
[blog post] Knowledge Fragment: Hardening Win10 x64 on VirtualBox for Malware Analysis danielplohmann.github.io/blo…
Image from Byte Atlas (@ByteAtlas)
1
13
1
50
10,113
[blog post] MCRIT: The MinHash-based Code Relationship & Investigation Toolkit danielplohmann.github.io/blo…
Image from Byte Atlas (@ByteAtlas)
5
1
17
5,680
[blog post] Casting Sandbox Necromancy on DADSTACHE danielplohmann.github.io/blo…
Image from Byte Atlas (@ByteAtlas)
7
1
16
[blog post] I updated "The Big Zeus Family Similarity Showdown", now with almost twice the samples and 4 new zeus-like families! byte-atlas.blogspot.com/2018…
Image from Byte Atlas (@ByteAtlas)
7
1
7
[blog post] Upgrading ApiScout: Introducing ApiVectors. byte-atlas.blogspot.de/2018/…
Image from Byte Atlas (@ByteAtlas)
1
10
2
19
[blog post] The Big Zeus Family Similarity Showdown. byte-atlas.blogspot.de/2018/…
Image from Byte Atlas (@ByteAtlas)
3
27
3
32
[blog post] Quick analysis / identification of the "link" function between the Lazarus and WannaCry sample: byte-atlas.blogspot.com/2017…
2
1
4
[blog post / tool] ApiScout: Painless Windows API information recovery. byte-atlas.blogspot.com/2017…
Image from Byte Atlas (@ByteAtlas)
50
3
63
[blog post] Hardening Win7 x64 on VirtualBox for Malware Analysis byte-atlas.blogspot.com/2017…
Image from Byte Atlas (@ByteAtlas)
3
148
5
241
[blog post] Fobber Inline String Decryption byte-atlas.blogspot.com/2015…
Image from Byte Atlas (@ByteAtlas)
15
24
[blog post] Unwrapping Fobber byte-atlas.blogspot.com/2015…
Image from Byte Atlas (@ByteAtlas)
13
16
[blog post] Bruteforcing Andromeda C&C configurations. byte-atlas.blogspot.de/2015/…
Image from Byte Atlas (@ByteAtlas)
1
20
14
Regex to check you web server access logs for CVE-2014-6271 Shell Shock exploitation (v2 egrep compatible) \(\)\s\{.*;\s*\};
3
13
9
Replying to @emgent
@emgent @MalwareMustDie @sawaba @yinettesys @robertgraham @Botconf thx
Replying to @emgent
@emgent @MalwareMustDie @sawaba @yinettesys @robertgraham @Botconf care share + provide context? 8dc64426f9d07587c19e10f1bb3d2799 not on VT.
1
Replying to @_gandolf
@_g3nuin3 all from the binaries is listed here: zerobin.net/?4126dd143e52126… - I didn't run the bot so I don't if they changed servers. :-/
cursory static analysis of DingleElite DDoS bot: zerobin.net/?4126dd143e52126…
1
@MalwareMustDie @sawaba @yinettesys @robertgraham @emgent @Botconf here is a quick static analysis of that bot: zerobin.net/?4126dd143e52126…
1
5
Load more