Skip to Content

thetrueartist

thetrueartist

  • Home
  • About
Malware Infostealer RAT Reverse Engineering

Arechclient2 (SectopRAT) / Hijackloader Analysis; A Steganography (Doge) Based RAT + Infostealer

xande 17 January 2026 No Comments

What is Arechclient2 (SectopRAT)? Arechclient2 (SectopRAT) is a RAT and Infostealer Arechclient2, also known as SectopRAT, is a remote access trojan and infostealer initially observed in 2019. It’s primarily used…

Reverse Engineering Malware Ransomware

Lynx Ransomware Analysis; An Advanced Post-Exploitation Ransomware

xande 9 March 2025 No Comments

What is Lynx Ransomware? Lynx ransomware is a “fork” of another popular ransomware called “INC”, its source code was supposedly sold on an onion site at some point in the…

Ransomware Mal-Dev Malware Windows Internals

A Simple Yet Effective Windows Defender Bypass (Other AV Engines Too!)

xande 13 February 2025 No Comments

Recently when researching different tactics threat actors use to bypass AV (Anti-Virus) engines I discovered this very simple yet effective “bypass”. After learning how to build a relatively basic C++…

Reverse Engineering Malware

Reverse Engineering and Cataloging Vidar (Info stealer/Loader) | Malware Analysis

xande 1 February 2025 No Comments

What is Vidar? Before I discuss my analysis of the sample, here is a quick synopsis and explanation of Vidar and how it functions in the ecosystem of malicious software…

Vulnerability Research

Understanding the Impact of CVE-2024-25227: What You Need to Know and How It was Discovered

xande 8 December 2024 No Comments

I will start by detailing the vulnerability for everyone interested in the specifics, and later discuss how I discovered it and some information about the vendor. ABO.CMS-Login-SQLi-CVE-2024-25227 CVE-2024-25227 Date: 23/02/2024…

Recent Posts

  • Arechclient2 (SectopRAT) / Hijackloader Analysis; A Steganography (Doge) Based RAT + Infostealer
  • Lynx Ransomware Analysis; An Advanced Post-Exploitation Ransomware
  • A Simple Yet Effective Windows Defender Bypass (Other AV Engines Too!)
  • Reverse Engineering and Cataloging Vidar (Info stealer/Loader) | Malware Analysis
  • Understanding the Impact of CVE-2024-25227: What You Need to Know and How It was Discovered

Archives

  • January 2026
  • March 2025
  • February 2025
  • December 2024

Categories

  • Infostealer
  • Mal-Dev
  • Malware
  • Ransomware
  • RAT
  • Reverse Engineering
  • Vulnerability Research
  • Windows Internals

Unread

Malware Infostealer RAT Reverse Engineering

Arechclient2 (SectopRAT) / Hijackloader Analysis; A Steganography (Doge) Based RAT + Infostealer

Reverse Engineering Malware Ransomware

Lynx Ransomware Analysis; An Advanced Post-Exploitation Ransomware

Ransomware Mal-Dev Malware Windows Internals

A Simple Yet Effective Windows Defender Bypass (Other AV Engines Too!)

Reverse Engineering Malware

Reverse Engineering and Cataloging Vidar (Info stealer/Loader) | Malware Analysis

[email protected]
Mastodon Icon Follow me on Mastodon

thetrueartist