Malware behavior analyses, reverse engineering notes, HackTheBox & TryHackMe write-ups, and personal projects.
Latest analyses
- Reversing Agent Tesla : a .NET Windows RAT spyware with credential theft, keylogging, screenshot capture and C2 capabilitiesMay 17, 2026
Static and dynamic analysis of an AgentTesla-style .NET loader that shifts behavior into an injected InstallUtil.exe payload.
- Ghost in the Startup: Unmasking SilentCrypto Miner 💸September 16, 2025
...
- Anatomy of a Fake PDF Editor : How AppSuite's TamperedChef Malware Backdoor Steals Browser Secrets 🔐September 8, 2025
AppSuite's TemperedChef PDF malware is wreaking havoc in the world of PDF editors.