PMAT: Ransomware.WannaHusky.exe.malz (and recovery!)
Ep. 4 - Road to PMRP (PJMR)
Feb 22, 20269 min read21
Command Palette
Search for a command to run...
Latest articles
Agentic Reverse Engineering: Build a free, local AI agent to support malware analysis.
Claude Code x Ollama x Ghidra MCP go brrr
Feb 20, 202631 min read78
Malops: Singularity
Analysis of a stealthy and persistent LKM rootkit :3
Jan 12, 202610 min read95
HTB Sherlock: Gatekeeper
Post-compromise analysis of a MacOS
Jan 7, 202612 min read163
HTB Sherlock: APTNightmare2
An investigation into a memory dump which identified the presence of a rootkit dumped from process memory.
Jan 7, 202611 min read10
PMAT: Dropper.Installer.msi.malz
Ep. 3 — Road to PJMR.
Nov 22, 202513 min read44
XINTRA: TechTonik
This incident is an emulation of APT29 following the CISA advisory regarding attacks exploiting JetBrains to target tech companies.
Sep 28, 202518 min read4
Hunting Adversaries: Safely calculating the JARM of C2, without interacting with potentially bad infrastructure
All in the title baby :p
Apr 26, 20253 min read9PMAT: SillyPutty (PuTTY.exe)
Ep. 2 — Road to PJMR.
Mar 29, 20257 min read34