Malware INFO Blog https://www.malwareinfo.app/blog/ Product tutorials, safe malware-analysis workflows, evidence interpretation, and Malware INFO updates. en contact@malwareinfo.app (Malware INFO) Inside MalwareINFO Pro Crypto Lab: Decoding Strings and Recovering Malware Configuration https://www.malwareinfo.app/blog/posts/inside-malwareinfo-pro-crypto-lab/ https://www.malwareinfo.app/blog/posts/inside-malwareinfo-pro-crypto-lab/ Sun, 04 Oct 2026 00:00:00 GMT 2026-10-04T00:00:00.000Z Malware INFO Team A practical Crypto Lab walkthrough: identify encoded text, decode Base64 and XOR, recover a real GlobalProtect command with AES, and replay layered decoding with recipes. Beyond PE Files: Extracting Evidence from MSI and Legacy Word DOC Files with MalwareINFO Pro https://www.malwareinfo.app/blog/posts/extracting-msi-legacy-word-doc-evidence-malwareinfo-pro/ https://www.malwareinfo.app/blog/posts/extracting-msi-legacy-word-doc-evidence-malwareinfo-pro/ Wed, 23 Sep 2026 00:00:00 GMT 2026-09-23T00:00:00.000Z Malware INFO Team See how MalwareINFO Pro extracts MSI contents and recovers legacy Word VBA while preserving hashes, provenance, coverage, and non-execution boundaries. From a Pension-Themed Spear-Phishing Email to a GitHub-Backed Implant: Investigating a SideWinder Connection https://www.malwareinfo.app/blog/posts/dellheuristics-winhttp-github-api-runtime-memory-analysis/ https://www.malwareinfo.app/blog/posts/dellheuristics-winhttp-github-api-runtime-memory-analysis/ Thu, 10 Sep 2026 00:00:00 GMT 2026-09-11T00:00:00.000Z Malware INFO Research Team An evidence-led investigation traces a Myanmar pension lure from an encrypted Word attachment to an embedded implant and evaluates its overlap with regional SideWinder reporting. Ransomware: Beyond Encrypted Files https://www.malwareinfo.app/blog/posts/ransomware-beyond-encrypted-files/ https://www.malwareinfo.app/blog/posts/ransomware-beyond-encrypted-files/ Mon, 07 Sep 2026 00:00:00 GMT 2026-09-07T00:00:00.000Z Malware INFO Team A source-based guide to ransomware history, hidden data theft, variant-specific recovery opportunities, evidence preservation, and resilient preparation. Fake GlobalProtect MSI Targets Myanmar Using Cloudflare and Google Sheets as C2 https://www.malwareinfo.app/blog/posts/fake-globalprotect-msi-targets-myanmar-cloudflare-google-sheets-c2/ https://www.malwareinfo.app/blog/posts/fake-globalprotect-msi-targets-myanmar-cloudflare-google-sheets-c2/ Wed, 02 Sep 2026 00:00:00 GMT 2026-09-16T00:00:00.000Z Malware INFO Research Team Fake GlobalProtect MSI analysis covering a Myanmar guardrail, Cloudflare-delivered Google credentials, Sheets tasking, and a GitHub-based follow-on payload. Myanmar Cyber Threat Landscape, 2016–2026: A Public-Source Review https://www.malwareinfo.app/blog/posts/myanmar-cyber-threat-landscape-2016-2026/ https://www.malwareinfo.app/blog/posts/myanmar-cyber-threat-landscape-2016-2026/ Tue, 01 Sep 2026 00:00:00 GMT 2026-09-01T00:00:00.000Z Malware INFO Team A source-qualified review of selected cyberespionage, data exposure, cyber-enabled fraud, and targeted malware reporting connected to Myanmar from 2016 to 2026. Understanding Malware: Types, History, Impact, Prevention, and Response https://www.malwareinfo.app/blog/posts/understanding-malware-types-history-impact-prevention-response/ https://www.malwareinfo.app/blog/posts/understanding-malware-types-history-impact-prevention-response/ Tue, 01 Sep 2026 00:00:00 GMT 2026-09-01T00:00:00.000Z Malware INFO Team A practical, source-based guide to malware types, major historical incidents, common infection paths, layered prevention, and responsible incident response. Operation QUICSILVER: Reconstructing and Testing the VHD-Delivered Backdoor https://www.malwareinfo.app/blog/posts/operation-quicsilver-vhd-backdoor-malwareinfo-lab-analysis/ https://www.malwareinfo.app/blog/posts/operation-quicsilver-vhd-backdoor-malwareinfo-lab-analysis/ Tue, 25 Aug 2026 00:00:00 GMT 2026-08-25T00:00:00.000Z Malware INFO Research Team An evidence-bounded static and isolated runtime analysis of Operation QUICSILVER's VHD delivery chain, split payload, Startup persistence, and MalwareINFO Pro scan result. Malware INFO Free 1.2.1 Is Now Available https://www.malwareinfo.app/blog/posts/malwareinfo-free-version-launch-august-22-2026/ https://www.malwareinfo.app/blog/posts/malwareinfo-free-version-launch-august-22-2026/ Sat, 22 Aug 2026 00:00:00 GMT 2026-08-22T00:00:00.000Z Malware INFO Team Malware INFO Free 1.2.1 is now available as the official Windows x64 MSI, with an exact SHA-256 checksum and clear unsigned-installer guidance. Process Memory Capture: Preserving and Analyzing Live-Process Evidence https://www.malwareinfo.app/blog/posts/process-memory-capture-live-process-evidence/ https://www.malwareinfo.app/blog/posts/process-memory-capture-live-process-evidence/ Wed, 12 Aug 2026 00:00:00 GMT 2026-08-12T00:00:00.000Z Malware INFO Team A practical guide to capturing supported x86 and x64 process-memory evidence, reviewing coverage, and handling sensitive dumps responsibly. DLL Behavior Trace: Investigating Supported Native x86 and x64 DLLs https://www.malwareinfo.app/blog/posts/dll-behavior-trace-supported-native-dlls/ https://www.malwareinfo.app/blog/posts/dll-behavior-trace-supported-native-dlls/ Mon, 03 Aug 2026 00:00:00 GMT 2026-08-03T00:00:00.000Z Malware INFO Team Learn how Malware INFO inspects and traces supported native x86 and x64 DLLs while keeping static clues, observed activity, coverage gaps, and safety limits separate. From Captured Memory to Defensible Evidence: Understanding Malware INFO Payload & Memory Analyzer https://www.malwareinfo.app/blog/posts/understanding-payload-memory-analyzer-evidence/ https://www.malwareinfo.app/blog/posts/understanding-payload-memory-analyzer-evidence/ Mon, 03 Aug 2026 00:00:00 GMT 2026-08-15T00:00:00.000Z Malware INFO Team See how Payload & Memory Analyzer performs bounded local inspection, preserves evidence identity and coverage, and separates static clues from runtime observations. From Correlated Telemetry to Exact Runtime Evidence: Understanding Malware INFO Deep API Trace https://www.malwareinfo.app/blog/posts/understanding-deep-api-trace-runtime-evidence/ https://www.malwareinfo.app/blog/posts/understanding-deep-api-trace-runtime-evidence/ Mon, 03 Aug 2026 00:00:00 GMT 2026-08-03T00:00:00.000Z Malware INFO Team Learn how Deep API Trace validates exact supported runtime observations, differs from Guided correlation, and should be used safely in an isolated lab. Connect Malware INFO to an External Security Platform: Wazuh Deployment Example https://www.malwareinfo.app/blog/posts/connect-malwareinfo-to-wazuh/ https://www.malwareinfo.app/blog/posts/connect-malwareinfo-to-wazuh/ Sun, 26 Jul 2026 00:00:00 GMT 2026-07-26T00:00:00.000Z Malware INFO Team Use Malware INFO's vendor-neutral Security Connector with an authorized HTTPS receiver, using Wazuh as one practical open-source deployment example. How to Use Malware INFO Safely: Complete Investigation Workflow and Feature Guide https://www.malwareinfo.app/blog/posts/how-to-use-malwareinfo-safely/ https://www.malwareinfo.app/blog/posts/how-to-use-malwareinfo-safely/ Sat, 18 Jul 2026 00:00:00 GMT 2026-08-15T00:00:00.000Z Malware INFO Team A safety-first guide to Malware INFO—from initial triage and Live Protection through intelligence, memory, API and DLL analysis, verified evidence export, and executive reporting.