Entry Point I go after the entry point of the malware and right away we can see that there’s only three main functions. This makes it easier for us to analyze the malware. I’m not sure why the auth...

Here’s the file that will be analyzed in this article. Feel free to follow along or just read. SHA256 hash: 027cc450ef5f8c5f653329641ec1fed91f694e0d229928963b30f6b0d7d3a745 SHA3-384 hash: 0a0f81...

Some details Everyone knows and has heard about the WannaCry ransomware. One of the biggests and most well known attacks to ever happen in cybersecurity, the range was so big that even people outsi...

This challenge was done by Ploxied. You can find it here, please give a try. Thanks to Ploxied for creating the challenge. Weird functions I found these interesting, I had to use Intel’s documenta...

Someone sent me this website to analyze, I instantly recognized that this is a phishing website. I spent around 5 minutes just messing around with the website, and then I realized I could access th...

In this post I will try to explain how I reverse engineered the challenge to get the master key from the binary. Here’s the challenge (thanks to sally1337 for the challenge) if you want to try for ...

Here’s the challenge. Thanks to RAZKOM for the challenge :) This will be considered solved when we get the key that decrypts that secrect message. There’s a few setup functions that are used fo...

Now. This is an amazing challenge for a beginner. I will explain in detail the steps I take and why. Crackmes This is a website were you can upload/download software that is meant to be reversed e...

This is from a phishing email, where the attacked sent a malicious URL to the service desk. I checked the link in VirusTotal and it appears to be malicious : hXXps://www[.]google[.]com/url?q=http...