Skip to main content

Fatah Hashim | VX-Cookies | 发达奇拉

Search This Blog

FLAWEDAMMYY RAT MALWARE ANALYSIS

on October 27, 2024

Get link
Facebook
X
Pinterest
Email
Other Apps

Web PDF View: https://vx-cookies.github.io/data/02-FlawedAmmyy-RAT.pdf

Malware Analysts

Get link
Facebook
X
Pinterest
Email
Other Apps

Popular Posts

[Video] RE:HACK 2023 - Reverse Engineering and Binary Exploitation: Intel x86/x86-x64 Assembly (Part: 1, 2, 3)

This is the workshop series "Reverse Engineering and Binary Exploitation: Intel x86/x86-x64 Assembly" by Fatah Hashim Reverse Engineering and Binary Exploitation: Intel x86/x86-x64 Assembly (Part: 1) Reverse Engineering and Binary Exploitation: Intel x86/x86-x64 Assembly (Part: 2) Reverse Engineering and Binary Exploitation: Intel x86/x86-x64 Assembly (Part: 3) Workshop series links : Part 1: https://www.youtube.com/watch?v=8dGDYRWwawQ Part 2: https://www.youtube.com/watch?v=vWOSPK8p1wE Part 3: https://www.youtube.com/watch?v=xx62TN7NFIY The slide is available at: https://speakerdeck.com/x86fatah/x86-x64-assembly This workshop content draws upon valuable resources from a variety of contributors. Their expertise and insights are gratefully acknowledged

[Record] A Live Malware Analysis

Popular Threat Label SHA-256 Hash File Type Analysis trojan.zusy/locky 4114cddd96be7c7ea07f918da0c3662d8f9bb87aaeb16e416cfbf1383a16d149 PE32 trojan.rozena/powershell 858f567340cee8755dbd745b6afd9adc78a998bf2cbfda85e6302197994c577c PS trojan.intesofti/egjmm 5f251ed33fb1b6960b4d5641b44b44f67277765aa69649977a27ec79cb6153da PE32

History for Training, Speakers, and Conferences

Conference & History Roles Topic MCC2024 Trainer Assistance Reverse Engineering Class + Speedhack Challenge SherpaCTF 2024 Challenge Creator SherpaCTF 2024: Hackathon-Style Jeopardy CTF in Malaysia [2024] Universiti Teknologi MARA (UiTM) Speaker Workshop x86 Disassembly and Advanced Static Analysis [2024] SherpaSec Speaker Antivirus Engine Bypass: Static / Dynamic Evasion [2024] RE:HACK Speaker Workshop Reverse Engineering and Binary Exploitation: Intel x86/x86-x64 Assembly [2023] UTeM & GMI Speaker Assembly Language Programming Windows X86/x64 Crash Course [2023] Siber Siaga Technical Labs Session KLCC Malaysia Attendee Firmware Emulation with Qiling Framework ...

Spear-Phishing Stealer Targeting Malaysian: HSBC E-Mail Analysis

At 1:52 AM on Monday, September 25, 2023, A recent malicious spear-phishing campaign attack that appears to be targeting Malaysians. This blog post recounts a real-life encounter with a suspicious HTML email targeting Fatah's personal account. The threat actor delivered HTML fake microsoft login that can steal user and password data from devices that install the attachment. The attachment was distributed to victim via email, with a message asking victim to install it to view a deposit slip from HSBC Bank. Fatah had not made any recent deposits with HSBC Bank, so the email raised red flags. This blog post may be useful for security researchers, and security analysts who want to stay up-to-date on current cybersecurity issues, specifically spear-phishing threats and Malaysia cybersecurity news. By the end of this blog post, readers will have a better understanding of the tactics and techniques used in spear-phishing attacks. Non-Technical Summary In this malicious campaign, the thre...

Powered by Blogger