$sealk.is_the_new_klaes
~/notes/research

Reverse engineering,
malware analysis,
and other curiosities.

Cybersecurity Engineer specializing in malware research, offensive security, reverse engineering, and threat hunting. Research interests include system internals, cloud security, and modern attack techniques.

Read articles $ whoami

// latest

all articles →
01/12/2025en

User consent bypass by browser extension : an adware case study

This article provides a comprehensive analysis of a little-documented threat, which is a Chrome extension distributed by a powershell script. Its objective is not to compromise the workstation, but to monetize user traffic...

#Malware#C2#Reverse#Browser
22/10/2024en

Incident Response: Analysis of recent version of BRC4

During our latest incident response case we have discovered a recent sample of Brute Ratel C4 packed with Themida. BRC4 is a powerful Command and Control (C2) tool which allows to control targeted workstations through an executable agent...

#Malware#Detection#Reverse#C2
09/09/2024en

WinAPI Hooking

This article focuses on the study of injection for hooking Windows API functions. We'll explore what hooking is, how it works and how it's implemented...

#Malware#Hooking#Detection#Programming
10/10/2023en

Brute Ratel BRC4

This article will not be a detailed malware analysis report on the features of Brute Ratel (BRC4), but rather a study focusing on several samples of the same version...

#Reverse#Malware#C2
06/01/2023en

PEB Parsing & API Hashing

In this article we will look at how the API hashing technique works and how to defeat it...

#Reverse#Technique#Obfuscation
22/11/2021en

Kardon

This is my first article on malware analysis. The sample analyzed is Kardon...

#Reverse#Malware