How to build a hook syscall detector
Windows API calls are often hooked by AV and EDR systems by using inline patching approaches to find strange behaviors or malicious artifacts.
Etiqueta: reverse
MalLocker Android ransomware analysis
Malware is persistent presence in our life. In the past few months, several pieces of different malware families were identified as affecting mobile devices. This…
Malware analysis: Details on LockBit ransomware
Introduction LockBit is a data encryption malware in operation since September 2019 and a recent Ransomware-as-a-Service (RaaS), in which developers are in charge of the payment site…