cosa-nostra

Cosa Nostra Cosa Nostra é um kit de ferramentas de clusterização de software de código aberto com foco em análise de malware. Ele pode criar árvores filogenéticas de amostras binárias de malware que são estruturalmente semelhantes. Foi lançado inicialmente durante o SyScan360 Shanghai 2016...

Clustering Malware at Scale: A First Full-Benchmark Study

Recent years have shown that malware attacks still happen with high frequency. Malware experts seek to categorize and classify incoming samples to confirm their trustworthiness or prove their maliciousness. One of the ways in which groups of malware samples can be identified is through malware...

fn_fuzzy: Fast Multiple Binary Diffing Triage with IDA

Summary This week at HITBSecConf, Takahiro Haruyama, a Senior Threat Researcher for the CB Threat Analysis Unit TAU, presented his work on fnfuzzy, a tool which aims to help researchers and reverse engineers triage samples quicker. This blog post details the motivation for and current standing of...