Topic
#Loader
2 articles
Lu0bot - An unknown NodeJS malware using UDP
An analysis of Lu0bot, a lightweight and previously unknown Node.js malware seen in early 2021 that talks to its server over UDP.
Read teardown
Overview of Proton Bot, another loader in the wild!
An overview of Proton Bot, a malware loader seen in the wild in 2019: how it works and what it can do.
Read teardown
No articles match that filter.
More from the research archive
Hack Yourself: Reversing the Program That Came Without a Manual
An interactive essay on reading the world, and myself, the way I read a malware sample: a program with no manual, a malware report on that program with six findings (Fun included), a triage window, a trace log, a breakpoint and a git history. The skills I thought were obsolete still transfer, once I learn to export them.
Read essay
You're Not the Worst One Here
A personal essay on keeping up with AI: the daily flood of new models and confident takes, and the feeling of being left behind.
Read essay
Anatomy of a simple and popular packer
A walkthrough of a simple, widely used packer: its architecture, the PE stub and the shellcode stages that unpack the final payload.
Read teardown
Let's play (again) with Predator the thief
A second look at Predator the Thief, focused on how a newer version of the stealer was built and what changed in its code.
Read teardown