Malwrologist

@DissectMalware

Senior Security Engineer @Amazon. Ex Assistant Professor. Opinions are mine; not my employer's. DM is open. Author of xlmdeobfuscator and yaradbg.dev

github.com/DissectMalware…

Joined February 2018

Replies Reposts Media

Pinned
Malwrologist
@DissectMalware
Jan 18, 2020
"#ShadowMove: a Stealthy Lateral Movement Strategy" is now available to read Read if interested to see a new practical lateral movement usenix.org/conference/use… Demo (TDS (MS SQL) & FTP): uofi.app.box.com/folder/9302340… Prototype will be released soon @MITREattack @USENIXSecurity
2
Malwrologist
@DissectMalware
Jan 28, 2024
Years ago I did something creative with fonts... never released it just demoed it to a few..
Ange
@angealbertini
Jan 28, 2024
Fonts are multi-dimensional rabbit holes for me: format-wise, security-wise, design-wise and retro-wise. Send help?
Malwrologist
@DissectMalware
Jan 23, 2024
Lesser known feature of #YaraDbg: you can drag/drop a pass-protected zip file to analyze the file inside. The pass must be "infected" The decompressed file will be in the memory not on the local filesystem github.com/DissectMalware… live: yaradbg.dev #100DaysOfYara
GIF
2
Malwrologist
@DissectMalware
Jan 13, 2024
Want to run #YaraDbg locally on your system using #Docker? 1⃣ docker pull dissectmalware/yaradbg:latest 2⃣ docker run -p 7071:7071 -p 8081:80 -d dissectmalware/yaradbg:latest 3⃣ browse http://localhost:8081 Want to build the image yourself?
GitHub - DissectMalware/yaradbg-container: A docker config file to run yaradbg in a container
From github.com
1
Malwrologist
@DissectMalware
Jan 9, 2024
Loved the idea! So, I've donated the entire amount collected since activating the feature to St. Jude Children's Research Hospital, although it wasn't that much. Thank you all who donated : ) stjude.org/donate/donate-…
hasherezade
@hasherezade
Jan 8, 2024
Thanks to all who decide to donate for my open source projects in the past year! The total collected sum will be dedicated to charity.
1