Documentation of things I’ve built, technical implementations, and weekend experiments. These posts focus on the “how” - implementation details, challenges faced, and solutions discovered.
Currently building out project documentation. More coming soon!
Introduction This is meant to be an outline of what I found while reversing the LazyCargo malware sample. This malware sample is one part of the five pipedream/INCONTROLLER malware framework components discovered by several cybersecurity firms and government agencies. The LazyCargo malware is a Windows dropper for another module in the framework. I don’t have access to any of the other components, so I wrote a payload to run the LazyCargo malware at the end of the analysis to verify my findings from the static analysis. ...