Click here to download all references as Bib-File.
| 2023-06-23 ⋅ Medium (Cryptax) ⋅ Inside KangaPack: the Kangaroo packer with native decryption FluHorse |
| 2023-06-21 ⋅ Fortinet ⋅ Fortinet Reverses Flutter-based Android Malware “Fluhorse” FluHorse |
| 2022-10-24 ⋅ Youtube (Virus Bulletin) ⋅ Hunting the AndroidBianLian botnet BianLian |
| 2022-06-27 ⋅ Medium (Cryptax) ⋅ Unpacking a JsonPacker-packed sample Xenomorph |
| 2022-06-20 ⋅ Medium (Cryptax) ⋅ Tracking Android/Joker payloads with Medusa, static analysis (and patience) Joker |
| 2022-06-09 ⋅ Medium (Cryptax) ⋅ Quick look into a new sample of Android/BianLian BianLian Hydra |
| 2022-05-12 ⋅ Medium (Cryptax) ⋅ Reversing an Android sample which uses Flutter |
| 2022-04-29 ⋅ Fortinet ⋅ Warning: GRIM and Magnus Android Botnets are Underground |
| 2022-03-08 ⋅ Medium (Cryptax) ⋅ Live reverse engineering of a trojanized medical app — Android/Joker Joker |
| 2022-01-25 ⋅ Medium (Cryptax) ⋅ BianLian C&C domain name BianLian Hydra |
| 2022-01-21 ⋅ Medium (Cryptax) ⋅ Creating a safe dummy C&C to test Android bots BianLian Hydra |
| 2022-01-17 ⋅ Medium (Cryptax) ⋅ Android/BianLian payload BianLian Hydra |
| 2022-01-14 ⋅ Medium (Cryptax) ⋅ Multidex trick to unpack Android/BianLian BianLian |
| 2021-05-18 ⋅ Medium (Cryptax) ⋅ A native packer for Android/MoqHao MoqHao |
| 2021-03-29 ⋅ Medium (Cryptax) ⋅ Android/Flubot: preparing for a new campaign? FluBot |
| 2020-12-15 ⋅ Medium (Cryptax) ⋅ Unpacking an Android malware with Dexcalibur and JEB |
| 2020-12-13 ⋅ Medium (Cryptax) ⋅ Decrypting strings with a JEB script |
| 2020-09-25 ⋅ Medium cryptax ⋅ Into Android Meterpreter and how the malware launches it - part 2 Meterpreter |
| 2020-09-18 ⋅ Medium cryptax ⋅ Locating the Trojan inside an infected COVID-19 contact tracing app Meterpreter |
| 2017-03-15 ⋅ Fortinet ⋅ Teardown of Android/Ztorg (Part 2) Ztorg |