https://xss3cut10n3r.com/tags/malware-analysis/Recent content in Malware Analysis on XSS3cut10n3rHugoen-USSat, 03 Oct 2026 00:04:00 +0100https://xss3cut10n3r.com/posts/nsa-codebreaker-2025-task-4/Sat, 03 Oct 2026 00:04:00 +0100https://xss3cut10n3r.com/posts/nsa-codebreaker-2025-task-4/<p><a href="https://xss3cut10n3r.com/posts/nsa-codebreaker-2025/">← Series overview</a></p> <h2 id="task-4---unpacking-insight---malware-analysis">Task 4 - Unpacking Insight - (Malware Analysis)</h2> <blockquote> <p>Once back at NSA the team contacts the NSA liaison at FBI to see if they have any information about what was discovered in the configuration data. FBI informs us that the facility registered to host that domain is on a watchlist for suspected criminal activity. With this tip, the FBI acquires a warrant and raids the location. Inside the facility, the server is discovered along with a suspect. The suspect is known to the FBI as a low-level malware actor. During questioning, they disclose that they are providing a service to host malware for various cybercrime groups, but recently they were contacted by a much more secretive and sophisticated customer. While they don&rsquo;t appear to know anything about who is paying for the service, they provide the FBI with the malware that was hosted.</p>