![How To Use Ghidra For Malware Analysis - Identifying, Decoding and Fixing Encrypted Strings](/content/images/size/w600/2024/05/6-1.jpg)
Malware Analysis Tutorials
How To Use Ghidra For Malware Analysis - Identifying, Decoding and Fixing Encrypted Strings
Manual identification, decryption and fixing of encrypted strings using Ghidra and x32dbg.
Malware Analysis Tutorials
Manual identification, decryption and fixing of encrypted strings using Ghidra and x32dbg.
Threat Intelligence Guides
Catching 83 Qakbot Servers using Regular Expressions.
Threat Intelligence Guides
Creating Regex Signatures on TLS Certificates with Censys.
Malware Analysis Tutorials
Leveraging Ghidra to establish context and intent behind imported functions.
Threat Intelligence Guides
Refining Queries and Identifying Suspicious servers using Censys.
Malware Analysis Tutorials
Leveraging Ghidra to establish context and intent behind suspicious strings.
Malware Analysis Tutorials
Manually Reversing a decryption function using Ghidra, ChatGPT and CyberChef.
Threat Intelligence Guides
More interesting and practical queries for identifying malware infrastructure.
Threat Intelligence Guides
Identifying Malware infrastructure by combining weak pivot points.
Malware Analysis Tutorials
Extracting C2 configuration using the Garbageman .NET analysis tool
Threat Intelligence Guides
Identifying Simple pivot points in RisePro Stealer Infrastructure using Censys.
Ghidra Tutorials
Unpacking a simple Cobalt Strike loader using Debuggers and Hardware breakpoints.