shrun, apiwatcher, and argus: three malware analysis tools built with Claude
Excerpt
It has been a while since my last blog post. In this one I'll present my experiment with using build three Rust-based tools that ease my malware analysis workflow
The Malware: Lorem Ipsum
I'll present three tools I built with Claude to analyze the Lorem Ipsum
the malware functionality, since it was already covered in the BlueV
The malware, especially in its latest version, is extremely obfuscated, making static analysis very hard: since IDA is not able to decompile the code, you have to work at the assembly level. I'll show how I was able to extract interesting IOCs from it by using a few d…
The opening of the report, shown for reference. The full report, with its figures and indicators, is published by antonioparata.blogspot.com on antonioparata.blogspot.com.
On the same topics
- Lorem Ipsum Revisited: ClickFix Pivot & Rapid BrigantineBlueVoyant · Added 25 Oct
- From PostCSS Masquerading to Windows RATJFrog · Published 22 Jun
- Showboat Malware: Emerging Threats Targeting Telecom ProvidersLumen Black Lotus Labs · Added 25 Oct
- International law enforcement initiate hunt on malware group SocGholishDutch National Police · Published 18 Jun
