Fumi's Box

Every morning I open my phone and there it is again.

In February/March 2021, A curious lightweight payload has been observed from a well-known load seller platform.

It’s been a while that I haven’t release some stuff here and indeed, it’s mostly caused by how fucked up 2020 was.

Whenever I reverse a sample, I am mostly interested in how it was developed, even if in the end the techniques employed are generally the same, I am always curious about what was the way to achieve a task, or just simply understand the code philosophy of a

Hi folks, It’s been one year that the tracker (https://tracker.fumik0.com) is now active and over this past months, I understood that maintaining this solo project was definitely not an easy task.

Loaders nowadays are part of the malware landscape and it is common to see on sandbox logs results with “loader” tagged on.

When you are a big fan of the Konosuba franchise, you are a bit curious when you spot a malware called “Megumin Trojan” (Written in C++) on some selling forums and into some results of sandbox submissions.

After some issues that kept me far away from my researches, it’s time to put my hands again on some sympathetic stuff.

Hi Folks, I’m not usually in this kind of paper, but this time, I am exceptionally writing a really short one about something related to some VM evasive PoC.

Sometimes when you are reading tons and tons of log of malware analysis, you are not expecting that some little changes could be in fact impactful.