How To Use CyberChef
Decoding a Cobalt Strike Downloader Script With CyberChef
Decoding a Cobalt Strike script with CyberChef and VsCode.
How To Use CyberChef
Malware Analysis Guides
Latrodectus Malware Analysis - Decoding Obfuscated Malware By Removing Junk Comments
Identifying and Removing Obfuscation in a Self-Referencing Latrodectus Loader
Malware Analysis Guides
Advanced CyberChef Techniques For Malware Analysis - Detailed Walkthrough and Examples
Advanced CyberChef techniques using Registers, Regex and Flow Control
Malware Analysis Guides
Beginner Ghidra Guide - Manual Shellcode Decryption
Manually Reversing a decryption function using Ghidra, ChatGPT and CyberChef.
Malware Analysis Guides
Remcos Downloader Analysis - Manual Deobfuscation of Visual Basic and Powershell
Decoding a Remcos Loader, leveraging regex, python and Cyberchef to identify IOCs.
Malware Analysis Guides
Cobalt Strike .VBS Loader - Decoding with Advanced CyberChef and Emulation
Manually decoding a Cobalt Strike .vbs Loader utilising advanced CyberChef and Shellcode Emulation.
Malware Analysis Guides
Cobalt Strike Malware Analysis With CyberChef and Emulation - .HTA Loader Example
Decoding a .hta script with CyberChef and analysing Shellcode with the SpeakEasy Emulator.
Malware Analysis Guides
Dcrat Malware Analysis - How to Manually Decode a 3-Stage Malware Sample
Manual analysis and deobfuscation of a .NET based Dcrat. Touching on Custom Python Scripts, Cyberchef and .NET analysis with Dnspy.