Rhadamanthys and the 40 thieves - the nuts, bolts, and lineage of a multimodular stealer

Funky Malware Formats

pesieve_bluehat.pdf

PE-sieve – Detecting Hooking and Code Implants

WarCon 2018 - Building a Malwarestein. Adapting and repurposing existing malware into new projects

Security Case Study 2017: Petya/NotPetya – the analysis of the mysterious malware which has attacked Ukraine

Wicked malware persistence methods

Virus Bulletin 2016: Challenges and Approaches of Cracking Ransomware

Security Case Study 2016: Petya - taking ransomware to the low level

Virus Bulletin 2015: Anonymizing VPN Services as a Botnet Monetization Strategy - Analyzing The Bunitu Botnet