#Malcat version 0.9.11 has been released, with support for ARM and Mach-O program analysis. More details below: malcat.fr/blog/0911-is...

#Malcat tip #10: analysing backdoored clean software can be hard. A quick win is to pivot around known constants, thanks to Malcat's 400k+ constants DB (here a #Tropidoor dlder):

Tomorrow at BSides Edmonton! 🔥

Updated #Kesakode to 1.0.39: * New malware entries: HybridPetya, MostereRAT, PhantomStealer, SatanLockV2 and Yurei * Updated malware entries: 38 * 3285 new library objects seen * 2622 new clean programs whitelisted * 905652 new unique functions * 1330028 new unique strings

First steps with #malcat? Here is a tutorial video, courtesy of @invokereversing.bsky.social : www.youtube.com/watch?v=gqES...

Updated #kesakode to 1.0.38: Malware signatures: * New malware entries: 20 new families * 564116 new unique functions * 197608 new unique strings * 27 new unique constant fingerprints

Sometimes it looks like #malware, smells like #malware but it's just ... weird: malcat.fr/blog/get-you...

TL;DR I am launching my #startup and we are going to change how to evaluate,cluster and reason about #malware, delivering accurate,contextual intelligence on samples. Say Hi to RationalEdge @rationaledge.bsky.social rationaledge.io #threatintel #threathunting #cti #reverseengineering #detection 1/9

We've uploaded our stream from July 28th where we triaged an Emotet infection chain with Renaud from @malcat4ever.bsky.social Enjoy! www.youtube.com/watch?v=xJof...

#Kesakode DB has been updated to 1.0.36 ! * 9 new malware families * 70 extended malware signatures * 37 new malicious samples in database * 11440 new library objects seen * 120k new clean programs whitelisted * 17M new unique functions * 3M new unique strings

#Kesakode has been updated to 1.0.34! * 34 new malware entries * 249 extended malware signatures * 50 new malicious samples in database * 58950 new clean programs whitelisted * 5459056 new unique functions * 1862336 new unique strings

Does someone know this #malware, since this is definitely NOT latrodectus. Looks like some Discord-backed infostealer: bazaar.abuse.ch/sample/85f8c...

You can now check your strings in #malcat against an online library of #Malpedia FLOSSed strings. Just copy this plugin: github.com/malpedia/mal...

🚀 Malcat is a powerful binary file dissector that's essential for Windows and Linux IT-security professionals. As both a feature-rich hexadecimal editor and a disassembler, Malcat offers a comprehensive toolkit for in-depth binary analysis. Check it out 👇 www.youtube.com/live/yzC_539...

#Malcat 0.9.10 is out! State-of-the-art CFG recovery, MIPS disassembler & decompiler and many UI improvements; malcat.fr/blog/0910-is...

#Malcat 0.9.10 is out! State-of-the-art CFG recovery, MIPS disassembler & decompiler and many UI improvements; malcat.fr/blog/0910-is...

Why might you want to read up on EFF's guide to border searches right now, you wonder? This is why.

Malcat version 0.9.9 is out! Check out the new offline version of Kesakode for blazing-fast (unpacked) #malware identification across 2000+ families. Also python 3.13 support (& disassembler), new file parsers & improved UI: malcat.fr/blog/099-is-...

Malcat version 0.9.9 is out! Check out the new offline version of Kesakode for blazing-fast (unpacked) #malware identification across 2000+ families. Also python 3.13 support (& disassembler), new file parsers & improved UI: malcat.fr/blog/099-is-...

Malcat tip #9: So you have found this nice #malware hash in a report, but no sample? "File>Download from hash" will retrieve the hash for you from: ● Triage ● MalwareBazaar ● VirusShare ● MWDB ● FileScanIO NB: some of these sources require (free) API keys.

In the next version of #malcat, we will include an _offline_ smaller #kesakode database which will only contain conflict-free malware signatures. This will be fast and run with every analysis. You can always get the full deal (clean + lib) afterwards with an online query.

You'll soon be able to export #Malcat views to files: ● Summary report as HTML+ SVG ● Proximity & call graph views as SVG or PNG ● Struct/hex/disasm views as HTML ● Strings, symbols, intel, kesakode and other views as CSV

Malcat 0.9.8 is out! You'll find a lot of QoL improvements, improved API and more doc. More infos: malcat.fr/blog/098-is-...