Malware traffic portfolio

PCAP write-ups, IOCs, and network forensics from hands-on reverse engineering work.

A public portfolio of malware traffic analysis: PCAP dissection, IOC extraction, and network forensics write-ups. Includes LovelyMalware, a full static and dynamic analysis of a PE32+ ransomware/stealer at HackTheBox Insane difficulty: reverse-engineered AES-256-CBC and XOR key obfuscation via radare2, decoded dual C2 from PCAP, recovered key material to decrypt victim files, and produced a kill-chain report with MITRE ATT&CK mappings and a full IOC table.

Highlights

• HackTheBox Insane ransomware/stealer with dual-C2 reverse engineering
• Recovered file decryption keys from intercepted C2 buffers
• Kill-chain report with MITRE ATT&CK mappings and operator-facing IOCs