Hacker News with Generative AI: Malware Analysis

GhidraMCP: Now AI can reverse malware [video] (youtube.com)
Cybersecurity, Artificial Intelligence, Malware Analysis, Reverse Engineering
41 points by surprisetalk 32 days ago | 1 comments
GoStringUngarbler: Deobfuscating Strings in Garbled Binaries (cloud.google.com)
In our day-to-day work, the FLARE team often encounters malware written in Go that is protected using garble. While recent advancements in Go analysis from tools like IDA Pro have simplified the analysis process, garble presents a set of unique challenges, including stripped binaries, function name mangling, and encrypted strings.
Security, Malware Analysis, Go Programming, Reverse Engineering, Deobfuscation
37 points by threat_analyst 52 days ago | 29 comments
ScatterBrain: Unmasking the shadow of PoisonPlug's obfuscator (cloud.google.com)
Since 2022, Google Threat Intelligence Group (GTIG) has been tracking multiple cyber espionage operations conducted by China-nexus actors utilizing POISONPLUG.SHADOW. These operations employ a custom obfuscating compiler that we refer to as "ScatterBrain," facilitating attacks against various entities across Europe and the Asia Pacific (APAC) region. ScatterBrain appears to be a substantial evolution of ScatterBee, an obfuscating compiler previously analyzed by PWC.
Cybersecurity, Obfuscation, Malware Analysis, China
88 points by tux3 83 days ago | 17 comments
Show HN: Another ELF Analysis Toolkit (github.com/M3rcuryLake)
Nyxelf is a powerful tool for analyzing malicious Linux ELF binaries, offering both static and dynamic analysis.
Security, Linux, Malware Analysis, Tools
62 points by M3rcurylake 102 days ago | 2 comments
Hiding messages in x86 binaries using semantic duals (2020) (yossarian.net)
Security, Computer Science, Malware Analysis, Binary Analysis
38 points by woodruffw 264 days ago | 4 comments
YARA is dead, long live YARA-X (virustotal.github.io)
Security, Malware Analysis, Tools
132 points by serhack_ 343 days ago | 22 comments