Hey Hey people, DA here. Prolific shitposter, Network Security Monitoring nerd. Through a dear friend™, I have been convinced to come over to blue sky.

I don't know if we hashtag around here, but my job involes #NSM #Snort #Suricata #EmergingThreats #Malware_Analysis #pcaps_or_gtfo

Has anyone else seen this before? Shellcode written in CGo that bootstraps a Go environment. I'm struggling to reverse the loader because I'm not very well versed in Go reversing. And before you ask, GoReSym is failing too! #malware #malware_analysis

DFIR-LABS: a GitHub repo of CTF-style challenges for Digital Forensics, Incident Response, and Malware Analysis. First release focuses on Windows. Contains simulated ransomware, trojans, stealers, C2. Use isolated VM. #dfir #malware_analysis #tool https://github.com/Azr43lKn1ght/DFIR-LABS

I have no idea how efficient or inefficient this rule is, but YARA doesn't yell at me!
references:

https://github.com/telekom-security/malware_analysis/blob/main/plugx/plugx_mustang_panda.yar
https://unit42.paloaltonetworks.com/thor-plugx-variant/

ADEX Unveils Startling Findings on XCSSET Malware and Its Silent Infections#Cyprus#Limassol#ADEX#XCSSET#Malware_Analysis