M4lcode @M4lcode

Malware researcher exploring malware, APT groups, and their campaigns across the wild. | Threat Researcher @dexpose_io | Blog Author @anyrun_app & @cyber5w m4lcode.github.io Egypt Joined February 2023

Tweets

172
Followers

626
Following

305
Likes

978

ANY.RUN @anyrun_app

a month ago

🚨#ANYRUN’s TI Feeds now offer a connector for Microsoft Sentinel Get fresh, filtered #IOCs from the latest attacks worldwide, updated every 2 hours and enriched with sandbox analyses Expand incident monitoring, boost detection rate, and slash MTTR 👇 any.run/cybersecurity-…

0 5 12 3K 1

Muhammad Hasan Ali @muha2xmad

2 months ago

As-salamu Alaykum I wrote 3 #yara rules about #RedLine stealer , #ArrowRAT, and #MilleniumRat. RedLine:github.com/muha2xmad/yara… ArrowRAT:github.com/muha2xmad/yara… MilleniumRat:github.com/muha2xmad/yara…

1 3 10 3K 1

M4lcode @M4lcode

2 months ago

PureLogs is live. A new challenge created by me. good luck

Gameel Ali 🤘 @MalGamy12

2 months ago

PureLogs is live. A new challenge created by me. good luck

3 14 65 7K 18

Download Image

0 0 15 3K 2

Mohamed Sultan @mSult4n

3 months ago

Just published a new blog post on how Microsoft’s “Mouse Without Borders” can be abused for data exfiltration & lateral movement. Features KAPE Target, C# scripts, and a BOF as a poc: 0xsultan.github.io/dfir/Exfiltrat…

2 11 25 6K 13

M4lcode @M4lcode

3 months ago

Open directory spotted: 20.243.255[.]185 Hosting multiple suspicious files, including: shell_le: Metasploit ELF payload - recently submitted to VirusTotal. true.png: PNG file with embedded VBScript (1/61 on VT) - recently submitted to VirusTotal main_mips: ELF binary flagged…

2 10 42 7K 16

Download Image

M4lcode @M4lcode

3 months ago

#clickfix #booking #fakecaptcha bokparthub[.]click → (Under Construction) apartmenr-di16[.]click → PowerShell (files.catbox.moe/09fd7c[.]txt) → LightYellow4.zip → LightYellow4.pfx Hex-based ZIP reconstructed → payload cleaned → executed via regsvr32.exe abuse (LOLBins)

0 3 16 3K 6

Download Image

Gameel Ali 🤘 @MalGamy12

4 months ago

We’re excited to announce the launch of malops.io , a platform built by analysts, for analysts and it’s completely free. You can join and enjoin with our frist challenge about RokRat Loader.

11 54 173 17K 103

Download Image

M4lcode @M4lcode

5 months ago

Lately, I've been working on analyzing several stealers and a PE injector. Take a look 😃 Fileless pe injector uses reflective loading : blog.dexpose.io/analysis-of-ar… Purelogger: blog.dexpose.io/purelogger-dee… Salat Stealer: blog.dexpose.io/understanding-… Flesh Stealer: blog.dexpose.io/flesh-stealer-…

2 32 111 4K 62

Download Image

vx-underground @vxunderground

5 months ago

37 241 3K 117K 114

Download Image

M4lcode @M4lcode

6 months ago

FExcited to share that ANY.RUN now supports Android OS inside its interactive sandbox! You can analyze APK behavior in real time, right in the cloud. 🔥 Available for ALL plans (yes, even free!). 📷 Let’s check it out together! app.any.run/?utm_source=x_…

1 1 14 451 4

Download Image

M4lcode @M4lcode

8 months ago

Fake job interviews are a growing attack vector One example here is InvisibleFerret, a malware from North Korea, that targets tech professionals See detailed analysis of its code and collect IOCs to avoid infection by @MauroEldritch any.run/cybersecurity-… @anyrun_app

1 1 16 676 8

M4lcode @M4lcode

9 months ago

Check out my latest report on ANY.RUN's blog🤠

ANY.RUN @anyrun_app

9 months ago

Check out my latest report on ANY.RUN's blog🤠

1 5 21 2K 9

0 1 5 745 0

M4lcode @M4lcode

9 months ago

Check out @anyrun_app 's Black Friday specials 🚀 🎁Get up to 3 sandbox licenses for your team as a gift 🔎Double your search limit in TI Lookup — #ANYRUN's threat intelligence database — for FREE Secure your deal before Dec 8 👉 app.any.run/plans

0 0 2 329 0

Download Image

M4lcode @M4lcode

9 months ago

🚀 Big news @anyrun_app 's sandbox now auto-detonates multi-stage attacks It can open URLs in QRs, solve CAPTCHA, and run #malware in archives Check out video with auto-analysis of a #phishing pdf and try this feature yourself 📷 any.run/cybersecurity-…