Submissions by MalwareMustDie

MalwareMustDie's new repository of open-shared codes and tools

4-Minutes ARM RE crash course to grab FBOT's pushed hexstring payloads

Easy 1minute tutorial to dissect any pushed hexstrings IoT malware loader URL

A new way of China/PRC adversaries mining our machines with bash-base64 ELF

This is how I reverse-engineered a re-emerged IoT threat

Linux/Exaramel (BlackEnergy)- Re of the Backdoor Version of a Russian ICS Threat

Linux/Mirai-Fbot's new encryption explained

HACKLU2019: Linux fileless infection, process injection and post exploitation

A Packed “Cat” in Your IoT – Packed ELF Bot Binary on Embedded Linux

Linux/AirDropBot – With reversing hands-out for ELF MIPS stripped binary on “r2”

Summarized report of three years MalwareMustDie research (Sept 2016-Sept 2019)

Raccoon stealer recent infection in the wild

Dissecting on-memory powershell post exploit beacon encoded binary by radare2

Linux/HelloBot (another ELF bot malware from China actors)

Tutorial on debugging ELF .so malware executed via LD_PRELOAD

The list of Linux malware analysis posts (afer-MalwareMustDie blog)

R2CON (Reversing conference) talk about dissecting ELF custom packers

Reversing an Android RAT and rootkit that targets Honda cars IoT panels

Trojan ELF Go-Lang Miner-Loader by SystemTen Aim Linux via Jenkins/Groovy RCE

Cayosin DDoS Botnet – Evolution of a Combined IoT Botnet Malcodes

Linux/DDoSMan and its C2 toolkit – How this brings old ELF trojan back to action