Building a Malware Pre-Triage Pipeline with TrID, Capa, and Shannon Entropy
How a simple entropy-based malware detector evolved into a multi-signal analysis...
Tag archive
How a simple entropy-based malware detector evolved into a multi-signal analysis...

Originally published at norvik.tech Introduction Dive into the technical implications...
RatHat is getting labeled “AI-powered,” but the real story is the Android stealer kill chain: accessibility abuse, permission traps, and noisy C2 loops you can actually detect.
A junior SOC analyst pulls up a ticket: an email attachment got flagged by a multi-engine scan,...
A phishing attachment gets caught by the mail gateway too late, someone already opened it, and now...
It's an hour before shift change and a low-severity alert lands: a workstation process making an...
Explore reverse engineering and malware analysis to enhance your cybersecurity skills and protect digital systems.
Introduction In Part 1, I analyzed the structure and permissions of ThaiCamera.apk. In this pmost, I...
A few weeks ago I spent a full lab session doing something that sounds simple on paper and is...
Malware authors don't make our job easy. Every time we think we've figured out their tricks, they...
I've been digging into malware analysis lately, and one thing became clear pretty fast: before you...
After working through the conceptual side of malware analysis — classification, the four analysis...