Malware INFO Blog
Explore threat research, malware education, safer investigation workflows, product tutorials, evidence interpretation, incident-response guidance, and Malware INFO updates.
Follow via RSSLatest writing
Technical Analysis
A practical Crypto Lab walkthrough: identify encoded text, decode Base64 and XOR, recover a real GlobalProtect command with AES, and replay layered decoding with recipes.
Technical Analysis
See how MalwareINFO Pro extracts MSI contents and recovers legacy Word VBA while preserving hashes, provenance, coverage, and non-execution boundaries.
Threat Research
An evidence-led investigation traces a Myanmar pension lure from an encrypted Word attachment to an embedded implant and evaluates its overlap with regional SideWinder reporting.
Cybersecurity Awareness
A source-based guide to ransomware history, hidden data theft, variant-specific recovery opportunities, evidence preservation, and resilient preparation.
Threat Research
Fake GlobalProtect MSI analysis covering a Myanmar guardrail, Cloudflare-delivered Google credentials, Sheets tasking, and a GitHub-based follow-on payload.
Threat Research
A source-qualified review of selected cyberespionage, data exposure, cyber-enabled fraud, and targeted malware reporting connected to Myanmar from 2016 to 2026.
Cybersecurity Awareness
A practical, source-based guide to malware types, major historical incidents, common infection paths, layered prevention, and responsible incident response.
Threat Research
An evidence-bounded static and isolated runtime analysis of Operation QUICSILVER's VHD delivery chain, split payload, Startup persistence, and MalwareINFO Pro scan result.
Product News
Malware INFO Free 1.2.1 is now available as the official Windows x64 MSI, with an exact SHA-256 checksum and clear unsigned-installer guidance.
Guides
A practical guide to capturing supported x86 and x64 process-memory evidence, reviewing coverage, and handling sensitive dumps responsibly.
Guides
Learn how Malware INFO inspects and traces supported native x86 and x64 DLLs while keeping static clues, observed activity, coverage gaps, and safety limits separate.
Technical Analysis
See how Payload & Memory Analyzer performs bounded local inspection, preserves evidence identity and coverage, and separates static clues from runtime observations.
Technical Analysis
Learn how Deep API Trace validates exact supported runtime observations, differs from Guided correlation, and should be used safely in an isolated lab.
Guides
Use Malware INFO's vendor-neutral Security Connector with an authorized HTTPS receiver, using Wazuh as one practical open-source deployment example.
Guides
A safety-first guide to Malware INFO—from initial triage and Live Protection through intelligence, memory, API and DLL analysis, verified evidence export, and executive reporting.
