void m4p() (@voidm4p) header
void m4p() (@voidm4p) profile picture

void m4p()

@voidm4p

Holistic Malware Analyst. Opinions here are my own. Follow me on https://xitter.gq/t.co/HausG5NsWt Contact: [email protected]

 España
blog.voidm4p.xyz
Joined September 2016
  • Tweets353
  • Following219
  • Followers922
95Media
Photo by void m4p() (@voidm4p)Photo by void m4p() (@voidm4p)Photo by void m4p() (@voidm4p)Photo by void m4p() (@voidm4p)Photo by void m4p() (@voidm4p)Photo by void m4p() (@voidm4p)Photo by void m4p() (@voidm4p)Photo by void m4p() (@voidm4p)Photo by void m4p() (@voidm4p)Photo by void m4p() (@voidm4p)
Just released an old python script that I made to extract #Formbook C2 url using @radareorg. Based on work from @netsecurity1 and @tildedennis. github.com/voidm4p/unformboo…
GitHub - voidm4p/unformbook: A python script to extract Formbook trojan C2 using radare2

GitHub - voidm4p/unformbook: A python script to extract Formbook trojan C2 using radare2

A python script to extract Formbook trojan C2 using radare2 - voidm4p/unformbook

github.com
4
1
11
Hey @CapeSandbox can you activate my account? Same user as here :)
1
1
113
Does anyone have a sample of "White Rabbit" ransomware used by RansomHouse that can share with me? I only found a hash on a TrendMicro analysis but it's not even published on VT so I can't download it. @malwrhunterteam @JAMESWT_MHT @demonslay335
2
1
3
3,953
Analizando el troyano bancario brasileño #Numando y ampliando la información compartida por @ESET @ESET_ES security-garage.com/index.ph… #reversing #IDAPro @InnotecSecurity
2
Hey @LloydLabs! Check DM 🙏🏻
1
1
Replying to @CapeSandbox
@CapeSandbox Hi, is it possible to activate my username so I can access? (Same handle I'm using here)
Image from void m4p() (@voidm4p)
1
Nos vemos en un momentito en las #XIVJornadasCCNCERT. Estaré hablando sobre InnoPurple, una herramienta que desarrollé este año para Adversary Emulation como parte de un proyecto en @InnotecSecurity
This Post is from an account that no longer exists. Learn more
1
1
Here's an adapted version of our @rootedcon talk about reversing Go binaries. Very useful to analyze samples like this #EKANS #Ransomware virustotal.com/gui/file/edef…
This Post is from an account that no longer exists. Learn more
🔥 🔥 🔥
CAPE Sandbox (@CapeSandbox) profile pictureCAPE Sandbox@CapeSandbox17 Apr 2020
capesandbox.com is now running CAPEv2!! A huge thank you to @D00m3dR4v3n for porting CAPE to Python 3! And for the new dark theme... 😎
Image from CAPE Sandbox (@CapeSandbox)
Ya disponible la charla que di junto a mi compañero @r3r0k_ sobre Reversing de binarios GoLang, resolviendo el reto Go go go! de #Atenea @CCNCERT
This Post is from an account that no longer exists. Learn more
1
1
Replying to @github
@github @GHSecurityLab has been blocked in Spain for Movistar users because of a court order. What the hell!? @Nosoynadiemas 😂
This quoted post is unavailable.
Try viewing anyway · View on X
3
Este viernes @r3r0k_ y yo daremos un taller en la sala 18 de @rootedcon. Os contaremos algunos tips para reversear binarios escritos en @golang y lo ilustraremos resolviendo uno de los retos de #Atenea de @CCNCERT de 2019. @InnotecSecurity
This Post is from an account that no longer exists. Learn more
1
5
Hola @CERESfnmt! Vuestra aplicación para solicitar Certificado de Persona Física mediante DNIe no funciona (Mac OS Mojave, Firefox versión 68). ¿Podéis ayudarme?
Image from void m4p() (@voidm4p)
2
1
Many thanks to @FIRSTdotOrg and #basqueindustry40 Organization for this gift! Hope you enjoyed my yesterday talk as much as I enjoyed this couple of days in this beautiful city
Image from void m4p() (@voidm4p)
Image from void m4p() (@voidm4p)
Image from void m4p() (@voidm4p)
1
El próximo día 20 nos vemos en Bilbao para el Technical Colloquia de @FIRSTdotOrg!!
This Post is from an account that no longer exists. Learn more
2
4
Interesting talk by @bquintero at #RoadToGoogle
Image from void m4p() (@voidm4p)
2
Replying to @PepsiCo_ESP
@PepsiCo_ESP #delicioso 🐛
Image from void m4p() (@voidm4p)
1
This is a MSI installer with a VBS script that runs in three stages and ends up downloading a loader and ciphered DLL. Final VBS payload: 39dbbd39d2f7bbfda10c63c48ee283b4 The final stealer DLL targets banks from Bolivia, Chile and Spain. Hash: 0f6c90dc6fc7dc97764f320593680df3
Image from void m4p() (@voidm4p)
Image from void m4p() (@voidm4p)
Image from void m4p() (@voidm4p)
James (@James_inthe_box) profile pictureJames@James_inthe_box19 Jul 2019
Massive #ursa #loader 2nd stage #opendir at: http://18.217.112[.]176/m/ dropping #guildma stealer hash 73cb2c5ffa69123d4257ffebb419a51e on @mal_share cc @FewAtoms @kafeine
Image from James (@James_inthe_box)
Image from James (@James_inthe_box)
Image from James (@James_inthe_box)
Image from James (@James_inthe_box)
1
4
Research article I wrote for the @InnotecSecurity brand new tech blog @Security_Garage (🇪🇸 only)
This Post is from an account that no longer exists. Learn more
7
11
Just released a little python script to help finding all the strings that multiple binaries have in common, usefull in order to create detection rules, for example. gist.github.com/voidm4p/ede9…
Strings Intersection

Strings Intersection

Strings Intersection. GitHub Gist: instantly share code, notes, and snippets.

gist.github.com
3
23
1
52
@James_inthe_box @JAMESWT_MHT @malwrhunterteam @malware_traffic @iCyberFighter @VK_Intel @JR0driguezB @HerbieZimmerman @WDSecurity @Ring0x0 @hexlax @MakFLwana @JayTHL @cocaman @Ledtech3 @_operations6_ @MsftSecIntel
1
6
Load more