Baco
baco.sk
Information Security
Threat Intelligence
Cybersecurity
As featured in
Claim pageClaim
Follow
Overview
News
Salaries
Products
People
Growth
Offices
Financials
Overview
Contact Twitter: @ladislav_b @malwarelab_eu Mastodon: @[email protected] Nostr: npub1ksxp2k6449prsqz6e3uq4k87hzw64v6c6u7zqdw9u99ev2y7gfpsnh07l5 LinkedIn: ladislav-baco Author Ladislav Baco is a Senior Security Consultant, Malware Analyst and Network Analyst, with more than 10 years of experience in computer security, computer science and education.
News
Koske miner - Panda images and malware generated by AI
Recently I noticed the news about AI-generated malware which was hidden in images with pandas. While the main purpose of the malware is "only" cryptomining, it uses several interesting techniques which are not so common for coinminers. It uses nicely form
Read more
Report
SMB Decryption - TryHackMe
Recent TryHackMe room called "Block" inspired me to create this write-up. The task is to decrypt SMB3-encrypted communication. It turned out that sometimes we only need the captured network traffic to fulfill this task, while otherwise we need some additi
Read more
Report
XWorm RAT and Steganography
When I looked on recent public submissions on Any.Run this week, my attention was attracted by XWorm samples with tags "stegocampaign". Quick review of analysis reports reveal simple, yet interesting infection chain. It contains Visual Basic script, Power
Read more
Report
Ekoparty CTF 2023 - Kaspersky write-up
Between 1st-3rd November 2023, there was another CTF event - EKOPARTY CTF. It was a part of the EKOPARTY Security Conference in Buenos Aires, but the CTF was also available online. It was in real Retro theme with IRC and Gopher server. One challenge by Ka
Read more
Report
Huntress CTF 2023 - Write-ups
During the October 2023, I participated in the Huntress Capture the Flag contest. It started with couple of warmups challenges on the first day. Then they published two or one challenge every day. There were various categories, such as Warmups, Malware, F
Read more
Report
Decryption of AsyncRAT config strings with CyberChef
Yesterday, as a part of a challenge in one CTF competition, I had to analyze a modified sample of AsyncRAT. I will try to avoid any spoilers, however, I wanted to decode and decrypt strings from AsyncRAT configuration settings. AsyncRAT is written in C#,
Read more
Report
Log4shell vulnerability in Minecraft
Last month I had two lectures about cyber attacks at Gamefair 2023 conference. And what could be a better practical demonstration than exploitation of a very famous game, which would lead to an encryption of a game server with ransomware? I decided to lev
Read more
Report
Nástroje na analýzu malvéru, Časť 2
Poznámka: tento môj článok pôvodne vyšiel na blogu firmy IstroSec V druhej častí nášho prehľadu prinášame pokračovanie výberu z najpoužívanejších a najužitočnejších nástrojov na analýzu malvéru, ktoré sú navyše k dispozícii bezplatne. Tentoraz sa zameriam
Read more
Report
Malware Analysis Tools, Part 2
Note: my article was originally published on IstroSec blog In the second part of our overview we continue with the selection of the most used and most usable malware analysis tools. Moreover, we select the tools which are freely available. This time, we f
Read more
Report
Show more news