Labs Home

Author

Jason Reaves

  • Anchor Project for Trickbot Adds ICMP

    Anchor Project for Trickbot Adds ICMP

  • Enter the Maze: Demystifying an Affiliate Involved in Maze (SNOW)

    Enter the Maze: Demystifying an Affiliate Involved in Maze (SNOW)

  • Breaking EvilQuest | Reversing A Custom macOS Ransomware File Encryption Routine

    Breaking EvilQuest | Reversing A Custom macOS Ransomware File Encryption Routine

  • Valak Malware and the Connection to Gozi Loader ConfCrew

    Valak Malware and the Connection to Gozi Loader ConfCrew

  • Sarwent Malware Continues to Evolve With Updated Command Functions

    Sarwent Malware Continues to Evolve With Updated Command Functions

  • Deep Dive Into TrickBot Executor Module “mexec”: Reversing the Dropper Variant

    Deep Dive Into TrickBot Executor Module “mexec”: Reversing the Dropper Variant

  • Deep Dive Into TrickBot Executor Module “mexec”: Hidden “Anchor” Bot Nexus Operations

    Deep Dive Into TrickBot Executor Module “mexec”: Hidden “Anchor” Bot Nexus Operations

  • Breaking TA505’s Crypter with an SMT Solver

    Breaking TA505’s Crypter with an SMT Solver

  • Revealing the Trick | A Deep Dive into TrickLoader Obfuscation

    Revealing the Trick | A Deep Dive into TrickLoader Obfuscation