Welcome

This Blog is for Malware Researching, Reverse Engineering and System Programming
Showing posts with label Malware. Show all posts
Showing posts with label Malware. Show all posts

Stuxnet Malware Analysis Paper - on CodeProject

Posted by AmrThabet on 9:45 PM
Hello Everyone

Today ... I'm celebrating the release of My article "Stuxnet Malware Analysis Paper"

I finished this article at the middle of june 2011 but due to some problems I published it today at this link
http://www.codeproject.com/KB/web-security/StuxnetMalware.aspx

I hope you enjoy it

Amr Thabet






MrxCls - Stuxnet Loader Driver

Posted by AmrThabet on 12:33 PM
Hello Everyone

Today I want to announce the release of a new article named "MrxCls - Stuxnet Loader Driver"

it's the first time I contribute to http://www.infospyware.net/

I hope you like the article

English Version: http://www.infospyware.net/blog/mrxcls-–-malicious-driver-and-primary-attack-of-stuxnet/
Spanish Version: http://www.infospyware.com/blog/mrxcls-driver-malicioso-ataque-principal-de-stuxnet/

The IDA Pro Database (mrxcls.idb) and related files:
http://www.megaupload.com/?d=FBPYU0T0

Thanks

Amr Thabet

Reversing Stuxnet's Rootkit (MRxNet) Into C++

Posted by AmrThabet on 6:53 PM
Hello Again


This is the first time I reverse a rootkit. I choose Stuxnet Rootkit (as it's a famous virus) and begin reversing..

Finally now I convert it into C++ code with a commented IDA Pro v.5.1 Database for it.

at this link

http://www.woodmann.com/collaborative/knowledge/images/Bin_Stuxnet's_Rootkit_(MRxNet)_into_C%2B%2B_2011-2-6_13.54_MRxNet.rar






have a nice day

Amr Thabet

Win32/Virut.A Malware Analysis Paper

Posted by AmrThabet on 3:00 PM
Hi again

This time I write my first malware analysis paper with the dumped source full commented .I also add a Detection and Disinfection utility that capable of detecting the infected file with Virut.A containing the signature of the virus

The link to it is here :

Virut.A.rar