0xSilent_Root·Aug 9Inside Emotet: Deconstructing a VBA Macro Dropper from Document_Open to Encoded PowerShellHow a single malicious Word document chains auto-exec macros, hidden document-body payloads, Base64 + UTF-16LE PowerShell encoding, and a…
0xSilent_Root·Aug 9Inside Ryuk: A Complete Static, Dynamic & Memory Forensics Tear-Down of an Obsidium-Packed…How a 361 KB binary defeats static analysis, kills every recovery surface on Windows, and encrypts an entire enterprise in minutes —…
