TeslaCrypt Ransomware Malware Analysis

TeslaCrypt ransomware is an older ransomware family that was shut down in 2016 with the release of a master decryption key. This blog post gives a technical ...

DamCTF 2021 DanceParty Writeup

For this challenge we are provided with a Windows PE binary that is reported as being malicious, the end goal is to identify the embedded configuration file ...

New APT31 Droppers Malware Analysis

The Chinese nation-state group APT31 also known as ZIRCONIUM, JUDGMENT PANDA, and BRONZE VINEWOOD carried out offensive cyber operations against targets in R...

AgentTesla InfoStealer Malware Analysis

Agent Tesla is .NET based malware that is sold as “advanced” keylogger software, Agent Tesla is sold under the description that it is a monitoring and data r...

Cerber Ransomware Malware Analysis

Cerber ransomware is a Windows-based ransomware family that is sold on cybercrime underground markets as Ransomware-As-A-Service (RaaS). This malware family ...