Malchanic (@MalwareMechanic) header
Malchanic (@MalwareMechanic) profile picture

Malchanic

@MalwareMechanic

Malware and stuff

Joined March 2009
  • Tweets136
  • Following427
  • Followers2.2K
27Media
Photo by Malchanic (@MalwareMechanic)Photo by Malchanic (@MalwareMechanic)Photo by Malchanic (@MalwareMechanic)Photo by Malchanic (@MalwareMechanic)Photo by Malchanic (@MalwareMechanic)Photo by Malchanic (@MalwareMechanic)Photo by Malchanic (@MalwareMechanic)Photo by Malchanic (@MalwareMechanic)Photo by Malchanic (@MalwareMechanic)Photo by Malchanic (@MalwareMechanic)
The #flareon10 countdown is now live at flare-on.com. Clear your weekend plans for Sept. 30th.
7
82
19
255
59,405
capa explorer integrates capa’s automated capabilities detection seamlessly with IDA Pro. The plugin aims to focus your reverse engineering efforts, especially when analyzing malware. Check it out and let us know what you think!
Hex-Rays SA (@HexRaysSA) profile pictureHex-Rays SA
@HexRaysSA21 Feb 2023
Ready for a new #PluginFocus blog post? @mehunhoff, @m_r_tz and @williballenthin from the @Mandiant FLARE Team talk about the latest version of their #capaexplorer plugin, an entry in our 2020 plugin contest 🌐 hex-rays.com/blog/plugin-foc… #IDAPro #IDAPython #IDAPlugin
Plugin Focus - capa explorer

ALT Plugin Focus - capa explorer

1
7
26
4,264
🚨 capa v5 release is out! Great improvements with big additions for .NET binary analysis. Did you know that capa displays the method token + instruction offset for each .NET match? You can use this info to find the matched location in dnSpy helping focus your analysis!
Image from Mike Hunhoff (@mehunhoff)
Moritz (@m_r_tz) profile pictureMoritz@m_r_tz8 Feb 2023
capa v5.0.0 is out: major improvements for .NET binary analysis, 150 new/updated rules, caching to improve performance standalone and in the IDA Pro plugin, better ELF OS detection, and a lot more. github.com/mandiant/capa/rel… VirusTotal integration updates are next!
Release v5.0.0 · mandiant/capa

Release v5.0.0 · mandiant/capa

This capa version comes with major improvements and additions to better handle .NET binaries. To showcase this we've updated and added over 30 .NET rules. Additionally, capa now caches its rule...

github.com
1
27
80
13,093
What better way to finish off the year than a fresh release of FLARE VM?! 🥳 This release focuses on empowering community contributions and automation. Get it while its hot 🔥🔥🔥mandiant.com/resources/blog/…
Mandiant Cybersecurity Consulting

Mandiant Cybersecurity Consulting

Transform cyber defense with Mandiant. Engage frontline experts for incident response, threat intelligence services, and cyber risk management.

cloud.google.com
4
60
1
135
Remember to sleep! #flareon9
nickharbour (@nickharbour) profile picturenickharbour@nickharbour29 Sep 2022
#flareon9 Pre-registration is now live! flare-on9.ctfd.io/
2
9
Get pumped!
Mandiant (part of Google Cloud) (@Mandiant) profile pictureMandiant (part of Google Cloud)
@Mandiant28 Sep 2022
Don't miss the next installment of the Mandiant FLARE team's webinar series, The Sample. This week, Principal Reverse Engineer Blaine Stancill will explain the inner workings of a dropper from the #WHITEDAGGER malware family. Register now! mndt.info/3UJAUGj
Image from Mandiant (part of Google Cloud) (@Mandiant)
2
9
#flareon9 is happening. Let your family know you'll miss them. mandiant.com/resources/annou…
Mandiant Cybersecurity Consulting

Mandiant Cybersecurity Consulting

Transform cyber defense with Mandiant. Engage frontline experts for incident response, threat intelligence services, and cyber risk management.

cloud.google.com
9
135
18
324
🚨 Today we're excited to release Ghidrathon, a Ghidra extension that adds modern Python 3 scripting (including Python 3.10) to Ghidra! Blog 👉 mandiant.com/resources/blog/… GitHub 👉 github.com/mandiant/Ghidrath…
5
216
16
548
Replying to @c3rb3ru5d3d53c
For people learning malware evasion techniques, the #UnprotectProject can often provide you the answer 😊 #infosec #malware cf: @DarkCoderSc unprotect.it/technique/ntset…
1
4
30
Replying to @vinopaljiri @MalGamy12
[2/2] you got last native loader which will be hosting .NET to be able to load "redline" code which is written in .NET. If you want to process the unpacking of these sh*t loading .NET payload really quickly use DNSpy. Load the original native sample, set module breakpoint - bam
Image from Jiří Vinopal (@vinopaljiri)
Image from Jiří Vinopal (@vinopaljiri)
Image from Jiří Vinopal (@vinopaljiri)
Image from Jiří Vinopal (@vinopaljiri)
1
1
1
16
FLOSS v2.0 just dropped!! This release is packed full of updates and deobfuscates even more strings! mandiant.com/resources/floss…
Mandiant Cybersecurity Consulting

Mandiant Cybersecurity Consulting

Transform cyber defense with Mandiant. Engage frontline experts for incident response, threat intelligence services, and cyber risk management.

cloud.google.com
1
46
152
Malchanic retweeted
rivitna (@rivitna2) profile picture
rivitna@rivitna222 Feb 2022
For #APT #PlugX lovers ;-) github.com/rivitna/APT/tree/…
Image from rivitna (@rivitna2)
2
43
1
118
#flareon8 Pre-registration is live for all you speed-runners out there: 2021.flare-on.com
4
45
5
95
Do you hear that?... It's almost here!! Get ready to: - 🍴Eat - 😴Sleep - 👾Reverse - ♾Repeat 👾🥳👾 #FLAREOn8 👾🥳👾
Mandiant (part of Google Cloud) (@Mandiant) profile pictureMandiant (part of Google Cloud)
@Mandiant6 Sep 2021
Get excited! #FLAREOn8 kicks off this Friday 8PM ET/5 PM PT at flare-on[dot]com. This year’s contest will consist of 10 challenges and feature a variety of formats, including Windows, Linux, and JavaScript. Learn more: feye.io/3zIuwnG
6
30
Malchanic retweeted
Adrien B (@Int2e_) profile picture
Adrien B@Int2e_1 Sep 2021
Malware using CLFS logs to hide a payload? Check out this analysis by myself and @MalwareMechanic on some tricky malware we named PRIVATELOG and a related utility/installer called STASHLOG. fireeye.com/blog/threat-rese…
1
72
7
152
The FLARE Team & @Mandiant now have Summer 2022 #internships open! The FLARE Team is specifically looking for the following roles: 🔸Malware Reverse Engineer: jobs.smartrecruiters.com/Fir… 🔸Research Engineer: jobs.smartrecruiters.com/Fir… 🔸Vulnerability Engineer: jobs.smartrecruiters.com/Fir…
4
41
3
70
after months of development, capa v2.0 is released! new features make it easier than ever to contribute rules that describe capabilities seen in malware. particular thanks to @m_r_tz @mehunhoff @anamma_06 and @_re_fox for dozens of features & rules each fireeye.com/blog/threat-rese…
2
115
12
251
Where will you be tonight?! 🧐 Don't. Miss. Out! 🥳 🎉 Preview the hype: soundcloud.com/jordanaoffici…
Jordana

Jordana

email: [email protected] Jordana LeSesne is a musician, DJ, and producer born in Pittsburgh, PA. As both a DJ and Producer she has toured the world and played alongside many of the top DJs in the wo

soundcloud.com
𝕸𝓎𝖐𝖎𝖑𝖑 ☠️ (@mykill) profile picture𝕸𝓎𝖐𝖎𝖑𝖑 ☠️@mykill25 Jun 2021
TODAY! Celebrate LGBTQIA Pride with us, as @jordanalesesne throws down a 90-minute DJ set of swung #UKG + blistering #DnB with novel visualizations by @djjulia 🤟🌈🌴 Friday June 25th 7 PM PT / 9 CT / 10 ET m.mixcloud.com/live/FireEyeC…
FireEyeCyberSecurity on Mixcloud Live

FireEyeCyberSecurity on Mixcloud Live

Broadcast live to your community of fans and tune in direct to creators from every genre

mixcloud.com
1
Load more