#malcat — Public Fediverse posts

Learn how to deobfuscate #Latrodectus using #malcat's scripting engine:

https://malcat.fr/blog/malcat-scripting-tutorial-deobfuscating-latrodectus/

Learn how to deobfuscate #Latrodectus using #malcat's scripting engine:

https://malcat.fr/blog/malcat-scripting-tutorial-deobfuscating-latrodectus/

Learn how to deobfuscate #Latrodectus using #malcat's scripting engine:

https://malcat.fr/blog/malcat-scripting-tutorial-deobfuscating-latrodectus/

Learn how to deobfuscate #Latrodectus using #malcat's scripting engine:

https://malcat.fr/blog/malcat-scripting-tutorial-deobfuscating-latrodectus/

Learn how to deobfuscate #Latrodectus using #malcat's scripting engine:

https://malcat.fr/blog/malcat-scripting-tutorial-deobfuscating-latrodectus/

#Malcat tip #10: analysing backdoored clean software can be hard.

A quick win is to pivot around known constants, thanks to Malcat's 400k+ constants DB (here a #Tropidoor dlder):

You can now check your strings in #malcat against an online library of #Malpedia FLOSSed strings. Just copy this plugin:

https://github.com/malpedia/malpedia-flossed?tab=readme-ov-file#plugin-for-malcat

#Malcat version 0.9.5 is out!

You can now unpack & disassemble #InnoSetup installers, download samples from threat intel providers and enjoy an improved user interface.

Last but not least: Debian 12 package!

More info here:

https://malcat.fr/blog/095-is-out-innosetup-new-gui-dialogs-threat-intel-and-more/

#Malcat version 0.9.5 is out!

You can now unpack & disassemble #InnoSetup installers, download samples from threat intel providers and enjoy an improved user interface.

Last but not least: Debian 12 package!

More info here:

https://malcat.fr/blog/095-is-out-innosetup-new-gui-dialogs-threat-intel-and-more/

#Malcat version 0.9.5 is out!

You can now unpack & disassemble #InnoSetup installers, download samples from threat intel providers and enjoy an improved user interface.

Last but not least: Debian 12 package!

More info here:

https://malcat.fr/blog/095-is-out-innosetup-new-gui-dialogs-threat-intel-and-more/

#Malcat version 0.9.5 is out!

You can now unpack & disassemble #InnoSetup installers, download samples from threat intel providers and enjoy an improved user interface.

Last but not least: Debian 12 package!

More info here:

https://malcat.fr/blog/095-is-out-innosetup-new-gui-dialogs-threat-intel-and-more/

#Malcat version 0.9.5 is out!

You can now unpack & disassemble #InnoSetup installers, download samples from threat intel providers and enjoy an improved user interface.

Last but not least: Debian 12 package!

More info here:

https://malcat.fr/blog/095-is-out-innosetup-new-gui-dialogs-threat-intel-and-more/