Tag: reverse engineering

4 Attack Reports | 0 Vulnerabilities

Attack reports

Leveraging Generative AI to Reverse Engineer XLoader

This report details how generative AI was used to accelerate the reverse engineering of XLoader malware. The researchers employed a combination of cloud-based static analysis using exported IDA data and occasional dynamic checks via MCP to rapidly unpack encrypted code, deobfuscate API calls, and d…

malware analysis

reverse engineering

Published: November 3, 2025

Downloadable IOCs: 16

A Mega Malware Analysis Tutorial Featuring Donut-Generated Shellcode

This tutorial provides an in-depth analysis of a malware infection chain using shellcode generated by the Donut tool. It covers various stages of the attack, including initial download, trace concealment, and final payload delivery. The tutorial aims to familiarize readers with common analysis tool…

malware analysis

reverse engineering

static analysis

dynamic analysis

Published: August 14, 2025

Downloadable IOCs: 1

Reborn in Rust: Attempt to thwart malware analysis

AsyncRAT, a remote access trojan known since 2019, has been rewritten in Rust, marking a shift from its original C# implementation. This change aims to complicate reverse engineering efforts due to limited analysis tool support for Rust. The malware retains its core functionality, including plugin …

command and control

remote access trojan

reverse engineering

system information

Published: May 26, 2025

Downloadable IOCs: 4

Writing a BugSleep C2 server and detecting its traffic with Snort

This analysis focuses on the BugSleep implant, also known as MuddyRot, a remote access tool that provides reverse shell and file I/O capabilities. The article details the process of reverse engineering BugSleep's protocol, creating a functional C2 server, and developing Snort rules for traffic dete…

reverse engineering

snort detection

Published: October 30, 2024

Downloadable IOCs: 0

Click here to see more Attack Reports