Excerpt
Introduction
The aim of this blog is to be an educational resource, documenting how an analyst can perform malware analysis techniques such as unpacking. This blog will demonstrate the malware analysis process against well-known malware, in this case SnappyBee.
SnappyBee (also known as Deed RAT) is a modular backdoor that has been previously attributed to China-linked cyber espionage group Salt Typhoon, also known as Earth Estries [1] [2]. The malware was first publicly documented by TrendMicro in November 2024 as part of their investigation into long running campaigns targeting va…
The opening of the report, shown for reference. The full report, with its figures and indicators, is published by Darktrace on darktrace.com.
Mentioned in the excerpt
More from Darktrace2
- Inside ZionSiphon: Darktrace’s Analysis of OT Malware Targeting Israeli Water SystemsDarktrace · Published 16 Apr
- Tracking & Detecting GhostSocks MalwareDarktrace · Published 26 Mar
On the same topics
- Retrohunting APT37: North Korean APT used VBA self decode technique to inject RokRatMalwarebytes · Published 5 Jan 2021
- Kazuar (Malware Family)Malpedia · Added 18 Oct
- Animal Farm APT and the Shadow of French IntelligenceInfosec Institute · Published 8 Jul 2015
- Star Blizzard refines phishing and malware delivery with the RedFlick techniqueMicrosoft · Published 29 Sep
