BlueTeamCoolTeam

Malware analysis and detection engineering for defenders

HOME
CATEGORIES
TAGS
ARCHIVES
ABOUT

Home Categories

Categories

Categories

Malware Analysis 12 posts

Site 1 post

Recently Updated

Telegram Handles, Binary-Encoded PHP, and a Relay Shell: Inside a WordPress Webshell Compromise
Fake captcha, five layers of RC4, and a Rust stealer with LSA session enumeration and AD recon
They built a dictionary to hide their shellcode: the pishbini90ai ClickFix loader
The Node.js loader that locks its own strings to the folder it lives in
Seven layers of obfuscation, one 1970s LOLBIN: pulling apart a ClickFix chain through finger.exe

Trending Tags

application-control lolbin c2 defense-evasion powershell clickfix obfuscation amsi-bypass javascript persistence

© 2026 Luke Wilkinson. Some rights reserved.

Using the Chirpy theme for Jekyll.

Trending Tags

application-control lolbin c2 defense-evasion powershell clickfix obfuscation amsi-bypass javascript persistence

A new version of content is available.