zhassulan zhussupov @cocomelonckz Twitter profile

Pinned Tweet

zhassulan zhussupov

2 years

Alhamdulillah! This book is dedicated to my wife, Laura, and my children, Yerzhan and Munira. Also, thanks to everyone who is helping me through these difficult times. The proceeds from the sale of this book will be used to treat Munira, #mdmzbook

Malware development book. First version

﷽

cocomelonc.github.io

2

32

92

Last Seen Profiles

@mysocute12

@chonsan0908

@BgBllr

@Kem_Daughg65

@03_snap

@forestmeerkat

@booyourblue

@MINIhappy113

@balbirpunj

@virtualfluorite

@juajung274093

@ImperialSeoh

@LeMaty_

@SK03010692

@ecocamere

@stw_pdg

@tamagotama10

@oberssbm

@Cfctheo1

@IZigger77

@LllLera

@nagathp

@77himalaya

@WiltseyDalton

@mflamm_reporter

@IamX2Y

@dwwclarke

@Carloss51646221

@Five_Star_Kabu

@INABadminton

@eastcentralisd

@manu_reina

@GurlSavagex

@CoupleNishiraaj

@HerejesP

@penocnton

zhassulan zhussupov

@cocomelonckz

1 month

I finally got my copy of the book #malware #hacking #cybersec #cybersecurity #infosec #informationsecurity #ethicalhacking #book #redteam #blueteam #purpleteam #programming #threathunting #cybercrime #threatintel #threatintelligence #packt

4

19

213

zhassulan zhussupov

@cocomelonckz

1 year

next trick in my blog. #cybersec #cybersecurity #informationsecurity #malware #malwaredev #malwareanalysis #hacking #redteam #blueteam #purpleteam #winapi #ethicalhacking #windows #windowssecurity #programming #research

Malware development trick - part 31: Run shellcode via SetTimer. Simple C++ example.

﷽

cocomelonc.github.io

1

30

113

zhassulan zhussupov

@cocomelonckz

9 months

Alhamdulillah, I finished writing this book today. The proceeds from the sale of this book will be used to treat childs. #cybersec #cybersecurity #cybercrime #malware #malwareanalysis #ransomware #hacking #purpleteam #research #threatintelligence #APT

Malware in the wild book.

﷽

cocomelonc.github.io

7

41

112

zhassulan zhussupov

@cocomelonckz

1 year

example of a created syscall in an assembly file. #cybersec #cybersecurity #informationsecurity #malware #malwaredev #malwareanalysis #malwareattacks #hacking #redteam #blueteam #purpleteam #windows #winapi #assembly #apt #cybercrime #programming #cpp

Malware development trick - part 33. Syscalls - part 2. Simple C++ example.

﷽

cocomelonc.github.io

3

13

83

zhassulan zhussupov

@cocomelonckz

1 year

my intro to syscalls. I love introductory posts =^..^= #cybersec #cybersecurity #informationsecurity #malware #malwaredev #malwareanalysis #redteam #blueteam #purpleteam #hacking #ethicalhacking #windows #winapi #win32api #programming #cpp #assembly #asm

Malware development trick - part 32. Syscalls - part 1. Simple C++ example.

﷽

cocomelonc.github.io

2

22

82

zhassulan zhussupov

@cocomelonckz

10 months

new post. Thanks to @yrevichus you are rock! You talk was amazing! #cybersecurity #malware #malwareanalysis #apt28 #apt29 #emotet #malwaredev #redteam #blueteam #hacking #ethicalhacking #programming #research #cybercrime #threatintelligence

Malware development: persistence - part 23. LNK files. Simple Powershell example.

﷽

cocomelonc.github.io

0

21

80

zhassulan zhussupov

@cocomelonckz

9 months

I want to start a series of my new research, ransomware dev #cybersecurity #hacking #malware #malwareanalysis #malwaredev #ransomware #research #cybercrime #cryptography #purpleteam #programming #ethicalhacking #winapi #encryption

Malware and cryptography 23: encrypt/decrypt file via TEA. Simple C/C++ example.

﷽

cocomelonc.github.io

2

28

82

zhassulan zhussupov

@cocomelonckz

4 months

source code and materials with exercises from my workshop on @BSidesPrishtina 2024 #hacking #malware #persistence #cybercrime #research #programming #threathunting #threatintel #redteam #blueteam #purpleteam #windows #infosec #informationsecurity

GitHub - cocomelonc/bsprishtina-2024-maldev-workshop: BSides Prishtina 2024 Malware Development and...

BSides Prishtina 2024 Malware Development and Persistence workshop - cocomelonc/bsprishtina-2024-maldev-workshop

github.com

2

25

74

zhassulan zhussupov

@cocomelonckz

1 year

new post on my blog #cybersecurity #cybersec #malwaredev #malware #malwareanalysis #hacking #redteam #blueteam #purpleteam #research #programming #cybercrime

Malware development trick - part 36: Enumerate process modules. Simple C++ example.

﷽

cocomelonc.github.io

0

20

72

zhassulan zhussupov

@cocomelonckz

1 year

next one in my blog. Used by #apt29 and #apt32 #malware #malwaredev #malwareanalysis #malwareattacks #cybersec #cybersecurity #infosec #hacking #redteam #blueteam #purpleteam #persistence #windows #cybercrime #programming #cpp

Malware development trick - part 35: Store payload in alternate data streams. Simple C++ example.

﷽

cocomelonc.github.io

1

22

69

zhassulan zhussupov

@cocomelonckz

11 months

next one. Interesting implementation. #cybersec #malware #maldev #malwareanalysis #blueteam #redteam #purpleteam #hacking #research #programming #windows #cryptography #cybercrime

Malware and cryptography 21: encrypt/decrypt payload via WAKE. Simple C++ example.

﷽

cocomelonc.github.io

0

15

67

zhassulan zhussupov

@cocomelonckz

4 months

Alhamdulillah, I'm pleased to announce that my book is available for pre-order on Amazon. #cybersecurity #malware #malwaredevelopment #hacking #threathunting #threatintel #programming #research #windowssecurity #ransomware #cybercrime #apt

2

16

69

zhassulan zhussupov

@cocomelonckz

8 months

next one. Since I’m a little busy writing my book for the Packt, I haven’t been writing as often lately. But I’m still working on researching and simulating ransomware. #cybersecurity #informationsecurity #malware #cryptography #ransomware #hacking

Malware and cryptography 24: encrypt/decrypt file via Madryga. Simple C/C++ example.

﷽

cocomelonc.github.io

3

15

67

zhassulan zhussupov

@cocomelonckz

1 year

used by Iranian #copykittens #apt in the wild #cybersec #cybersecurity #infosec #malware #malwaredev #malwareanalysis #hacking #redteam #blueteam #purpleteam #winapi #windows #programming #cpp #cybercrime #apt #research

Malware development trick - part 34: Find PID via WTSEnumerateProcesses. Simple C++ example.

﷽

cocomelonc.github.io

0

19

59

zhassulan zhussupov

@cocomelonckz

3 months

just in case, next one on my blog #malware #malwaredev #malwareanalysis #hacking #redteam #blueteam #purpleteam #ethicalhacking #threathunting #threatintel #cybersecurity #infosec #programming #cpp #nim #winapi #research

Malware development trick 39: Run payload via EnumDesktopsA. Simple Nim example.

﷽

cocomelonc.github.io

0

18

56

zhassulan zhussupov

@cocomelonckz

1 year

new post in my blog. More #math , more #cryptography =^..^= #cybersec #cybersecurity #infosec #malware #malwareanalysis #malwareattacks #cybercrime #hacking #redteam #blueteam #purpleteam #research #programming #windows #cpp

Malware and cryptography 20: encrypt/decrypt payload via Skipjack. Simple C++ example.

﷽

cocomelonc.github.io

0

14

55

zhassulan zhussupov

@cocomelonckz

3 months

next one from my blog. I continue to answer questions from my readers #hacking #malware #research #programming #cybercrime #malwaredev #malwareanalysis #redteam #blueteam #purpleteam #ethicalhacking #threathunting #threatintel #cryptography #apt

Malware development trick 42: Stealing data via legit Discord Bot API. Simple C example.

﷽

cocomelonc.github.io

1

13

55

zhassulan zhussupov

@cocomelonckz

1 year

another one #cybersec #infosec #informationsecurity #malware #malwaredev #malwareanalysis #redteam #blueteam #purpleteam #winapi #windowssecurity #ethicalhacking #programming

Malware AV/VM evasion - part 16: WinAPI GetProcAddress implementation. Simple C++ example.

﷽

cocomelonc.github.io

0

20

55

zhassulan zhussupov

@cocomelonckz

3 months

I hope it will be interesting blog series. #malware #linux #hacking #programming #kernel #malwaredev #kernelhacking #research #redteam #blueteam #purpleteam #cybercrime #infosec #cybersec #cybersecurity

Linux malware development 1: Intro to kernel hacking. Simple C example.

﷽

cocomelonc.github.io

2

10

53

zhassulan zhussupov

@cocomelonckz

4 months

next one on my blog. First Nim example on my blog #malware #malwaredev #malwareresearch #malwareanalysis #hacking #cybercrime #redteam #blueteam #purpleteam #programming #threathunting #threatintel #threatintelligence #research #winapi #nimlang #cpp

Malware and cryptography 28: RC4 payload encryption. Simple Nim example.

﷽

cocomelonc.github.io

1

17

50

zhassulan zhussupov

@cocomelonckz

1 year

next one in my blog. #cybersec #cybersecurity #infosec #malware #malwaredev #malwareanalysis #malwareattacks #hacking #redteam #blueteam #purpleteam #cybercrime #programming #research #cryptography #windows #winapi #apt

Malware AV/VM evasion - part 18: encrypt/decrypt payload via modular multiplication-based block...

﷽

cocomelonc.github.io

1

14

48

zhassulan zhussupov

@cocomelonckz

2 years

next one in my blog. #cybersec #cybersecurity #infosec #informationsecurity #malware #malwaredev #malwareattack #malwareattacks #malwareanalysis #hacking #redteam #blueteam #purpleteam #pentest #winapi #win32api #cpp #cplusplus #windows #programming

Malware development tricks: part 24. Listplanting. C++ example.

﷽

cocomelonc.github.io

1

16

46

zhassulan zhussupov

@cocomelonckz

1 year

#cybersec #infosec #malware #malwaredev #malwareanalysis #redteam #blueteam #purpleteam #hacking #cryptography #winapi #programming

Malware AV/VM evasion - part 14: encrypt/decrypt payload via A5/1. Bypass Kaspersky AV. Simple C++...

﷽

cocomelonc.github.io

1

9

45

zhassulan zhussupov

@cocomelonckz

1 year

next one on my blog. #cybersecurity #infosec #informationsecurity #malware #malwaredev #persistence #redteam #blueteam #purpleteam #hacking #ethicalhacking #pentest #windowssecurity #win32api #programming #cpp #cybercrime #research

Malware development: persistence - part 22. Windows Setup. Simple C++ example.

﷽

cocomelonc.github.io

0

14

44

zhassulan zhussupov

@cocomelonckz

2 months

next one. #malware #cybersec #cybersecurity #hacking #malwaredev #redteam #blueteam #purpleteam #cybercrime #ethicalhacking #math #cryptography #research #programming

Malware and cryptography 29: LOKI payload encryption. Simple C example.

﷽

cocomelonc.github.io

3

11

45

zhassulan zhussupov

@cocomelonckz

3 months

next one. At the request of most of my readers #malware #malwaredev #malwareanalysis #hacking #redteam #blueteam #purpleteam #programming #cpp #win32api #telegram #ethicalhacking #research #windows #threathunting #threatintel #cybersec #infosec

Malware development trick 40: Stealing data via legit Telegram API. Simple C example.

﷽

cocomelonc.github.io

0

20

36

zhassulan zhussupov

@cocomelonckz

1 year

next one. #malware #cybersec #infosec #informationsecurity #malwaredev #malwareattacks #malwareanalysis #redteam #blueteam #purpleteam #hacking #ethicalhacking #windows #winapi #programming

Malware AV/VM evasion - part 15: WinAPI GetModuleHandle implementation. Simple C++ example.

﷽

cocomelonc.github.io

0

11

34

zhassulan zhussupov

@cocomelonckz

1 year

new post in my blog. Used by #APT3 and #cobaltstrike in the wild #cybersec #cybersecurity #informationsecurity #malware #malwaredev #malwareanalysis #hacking #redteam #blueteam #purpleteam #windows #ethicalhacking #win32api #programming #cpp #cybercrime

Malware development trick - part 28: Dump lsass.exe. Simple C++ example.

﷽

cocomelonc.github.io

1

6

34

zhassulan zhussupov

@cocomelonckz

2 months

next one on my blog. Interesting VT result #malware #hacking #cybersecurity #infosec #malwaredev #malwareanalysis #malwareresearch #research #redteam #blueteam #purpleteam #ethicalhacking #cryptography #winapi #cybercrime #ransomware #programming

Malware and cryptography 31: CAST-128 payload encryption. Simple C example.

﷽

cocomelonc.github.io

0

7

35

zhassulan zhussupov

@cocomelonckz

1 year

next one in my blog. #cybersec #infosec #informationsecurity #cybersecurity #hacking #malware #malwaredev #malwareanalysis #malwareattacks #redteam #blueteam #purpleteam #programming #research #cpp #windows #winapi #cybercrime

Malware and cryptography 1: encrypt/decrypt payload via RC5. Simple C++ example.

﷽

cocomelonc.github.io

1

7

33

zhassulan zhussupov

@cocomelonckz

7 months

next one on my blog. #cybersecurity #hacking #malware #malwaredev #malwareanalysis #redteam #blueteam #purpleteam #ethicalhacking #research #cybercrime #cryptography #cyberwarfare #apt #win32api #windows

Malware and cryptography 25: encrypt/decrypt payload via RC6. Simple C/C++ example.

﷽

cocomelonc.github.io

5

10

31

zhassulan zhussupov

@cocomelonckz

2 months

next one on my blog. Enjoy! #malware #cybercrime #apt #hacking #malwaredev #malwareanalysis #ethicalhacking #redteam #blueteam #purpleteam #winapi #cybersec #infosec #cybersecurity #informationsecurity #programming #cpp #clang #research

Malware development: persistence - part 25. Create symlink from legit to evil. Simple C example.

﷽

cocomelonc.github.io

0

11

31

zhassulan zhussupov

@cocomelonckz

2 years

next one. #cybersec #infosec #cybersecurity #malwaredev #malware #malwareanalysis #hacking #redteam #blueteam #purpleteam #virustotal #windowssecurity #programming #cpp

Malware AV/VM evasion - part 13: encrypt/decrypt payload via Madryga. Simple C++ example.

﷽

cocomelonc.github.io

0

10

31

zhassulan zhussupov

@cocomelonckz

5 months

Eid Mubarak! next one in my blog: #malware #malwaredev #malwareanalysis #cybersecrurity #infosec #cybercrime #hacking #ethicalhacking #redteam #blueteam #purpleteam #programming #research #threatintel #threathunting #winapi #research #cryptography

Malware and cryptography 26: encrypt/decrypt payload via SAFER. Simple C/C++ example.

﷽

cocomelonc.github.io

2

5

29

zhassulan zhussupov

@cocomelonckz

10 months

next one, interesting VT result. #cybersec #cybersecurity #infosec #malware #malwaredev #malwareanalysis #cybercrime #purpleteam #redteam #blueteam #research #hacking #cryptography #programming #cpp #windows #kaspersky

Malware and cryptography 22: encrypt/decrypt payload via XTEA. Simple C++ example.

﷽

cocomelonc.github.io

1

2

30

zhassulan zhussupov

@cocomelonckz

1 year

next one in my blog. used by #glubteba malware in the wild #cybersec #informationsecurity #redteam #blueteam #malware #malwareanalysis #malwaredev #malwareattacks #cybercrime #hacking #hack #purpleteam #programming #windows #cpp #research #win32api

Malware AV/VM evasion - part 17: bypass UAC via fodhelper.exe. Simple C++ example.

﷽

cocomelonc.github.io

0

9

29

zhassulan zhussupov

@cocomelonckz

3 months

next one in my blog. Thanks to @d1rkmtr to reminded me of this technique some times ago. #hacking #cybersec #infosec #malware #redteam #blueteam #purpleteam #threatintel #threathunting #cybercrime #research #cryptography #winapi #programming

Malware development trick 41: Stealing data via legit VirusTotal API. Simple C example.

﷽

cocomelonc.github.io

0

7

28

zhassulan zhussupov

@cocomelonckz

2 months

next one on my blog. Interesting VirusTotal result #cryptography #hacking #cybersecurity #cybersec #infosec #malware #malwaredev #malwareanalysis #redteam #blueteam #purpleteam #threathunting #threatintel #research #programming #cpp #clang

Malware and cryptography 30: Khufu payload encryption. Simple C example.

﷽

cocomelonc.github.io

0

13

26

zhassulan zhussupov

@cocomelonckz

1 year

contains the results of all my research on cybersec practical cases from my blog #cybersecurity #cybersec #malware #malwareanalysis #blueteam #redteam #hacking #research #cybercrime #cryptography #programming

GitHub - cocomelonc/meow: Cybersecurity research results. Simple C/C++ and Python implementations

Cybersecurity research results. Simple C/C++ and Python implementations - cocomelonc/meow

github.com

1

13

26

zhassulan zhussupov

@cocomelonckz

10 months

Alhamdulillah, I hope my talk was useful for cybersecurity community! Many thanks to organizers #bhmea23 #blackhatmea @Blackhatmea @BlackHatEvents Thanks to my family for the support #research #malware #cybersecurity #cybersec #hacking #cryptography #ransomware #blackhat

2

25

zhassulan zhussupov

@cocomelonckz

3 months

Djuma Mubarak! - code - book on Amazon #malware #malwaredev #cybersec #packt #redteam #blueteam #hacking #programming #clang #winapi #research #apt #cybercrime #threathunting #threatintel #ethicalhacking

1

4

23

zhassulan zhussupov

@cocomelonckz

6 months

Ramadan Mubarak! Next post on my blog #hacking #cybersecurity #infosecurity #malware #malwaredev #malwareanalysis #redteam #blueteam #purpleteam #cyberwarfare #apt #cybercrime #persistence #winapi #windows #research

Malware development: persistence - part 24. StartupApproved. Simple C example.

﷽

cocomelonc.github.io

3

6

21

zhassulan zhussupov

@cocomelonckz

5 months

This wonderful @BSidesPrishtina conference has ended. @dprebreza thank you for the hospitality, atmosphere and help! Speakers you are really cool and great persons! #cybersec #malware #hacking #research #cryptography #windows #ransomware #threatintel #threathunting #cybercrime

0

4

19

zhassulan zhussupov

@cocomelonckz

2 months

Since I had to leave out some deep topics in my books, I started working on a new one where I also include my #research on #cryptography . I hope for your support and patience. #malware #cybersecurity #cybersec #hacking #programming #book #redteam #blueteam #threatintel #apt

1

3

21

zhassulan zhussupov

@cocomelonckz

11 months

I hope my speak was interesting and useful. Thanks to @hack_lu for such an interesting event, @mssplab for support. Thanks to my family for patience, they are really missing and waiting for me. #conference #malware #maldev #malwareanalysis #purpleteam #research

1

17

zhassulan zhussupov

@cocomelonckz

2 years

next one. used by #conti and #win32Potao in the wild #cybersecurity #infosec #informationsecurity #malware #malwaredev #malwareanalysis #redteam #blueteam #purpleteam #hacking #ethicalhacking #windowssecurity #win32api #programming #ransomware #cybercrime

Malware analysis: part 8. Yara rule example for MurmurHash2. MurmurHash2 in Conti ransomware

﷽

cocomelonc.github.io

0

4

17

zhassulan zhussupov

@cocomelonckz

3 months

I was glad to speak at a #2600kz meetup in Kazakhstan and announced my book again! Thanks for the invitation! #hacking #redteam #blueteam #purpleteam #malware #cybercrime #ethicalhacking #research #frida #android #pnpt #programming #kazakhstan

1

16

zhassulan zhussupov

@cocomelonckz

2 months

On the first Friday of August, I gave a talk at the #2600kz Almaty chapter. Thank you all for the invitation, and thank you to everyone who came. #hacking #malware #cybercrime #dataleak #threathunting #threatintel #shodan #binaryedge #purpleteam #cyberespionage #cyberwarfare

0

2

14

zhassulan zhussupov

@cocomelonckz

1 year

Alhamdulillah, I am excited to be presenting my work at Black Hat Middle East and Africa 2023. Join me 14-16 November 2023 in Riyadh. . #cybersec #cybersecurity #malware #malwaredev #malwareanalysis #cryptography #hacking #research #blackhat #blackhatmea

2

1

14

zhassulan zhussupov

@cocomelonckz

3 months

@eMVee_NL Thank you for buying my book, I hope that it will be of great benefit to you. I’m already thinking about the second edition or the release of a new book, since many of the things that I wanted to cover in this book I cut out and shortened :)

1

0

13

zhassulan zhussupov

@cocomelonckz

1 year

Alhamdulillah! Thanks to my family and colleagues for support! Thanks @eLearnSecurity for great exam #hacking #cybersecurity #blueteam #cybersec #infosec #threatintelligence #threathunting #threatdetection #ethicalhacking #redteam #blueteam #purpleteam #elearnsecurity

2

0

12

zhassulan zhussupov

@cocomelonckz

7 months

Alhamdulillah, I was glad to speak at the @bsideszagreb conference! It was very interesting and inspiring! Thanks for the invitation @bsideszagreb I was glad to meet you #cybersecurity #bsides #conference #hacking #malware #APT #redteam #blueteam #zagreb #croatia #research

0

1

11

zhassulan zhussupov

@cocomelonckz

1 year

fast track. At this time it will be in Russian #cybersec #infosec #cybersecurity #hacking #malware #malwaredev #malwareanalysis #cryptography #redteam #blueteam #purpleteam #cybercrime #ransomware #programming #cpp #assembly #research

1

2

11

zhassulan zhussupov

@cocomelonckz

6 months

Alhamdulillah, I shared my knowledge at the @SecurityBSides Sofia 2024 conference. Thank you so much for the hospitality @OmarMorando Lachezar Uzunov Iliyan Velikov Gergana Karadzhova-Dangela @TalosSecurity you are rock! Nice to meet you guys #conference #research #malware

2

0

10

zhassulan zhussupov

@cocomelonckz

2 years

another cryptography example. #cybersecurity #infosec #informationsecurity #malware #malwaredev #malwareanalysis #redteam #blueteam #purpleteam #hacking #ethicalhacking #pentest #windowssecurity #programming #cpp #ransomware #cybercrime #cryptography

Malware AV/VM evasion - part 12: encrypt/decrypt payload via TEA. Simple C++ example.

﷽

cocomelonc.github.io

0

2

10

zhassulan zhussupov

@cocomelonckz

2 years

next post in my blog. Used by #apt3 #apt29 #apt41 in the wild. #cybersec #CyberSecurity #infosec #informationsecurity #malware #Hacking #redteam #blueteam #persistence #ethicalhacking #pentest #Pentesting #windows #programming #win32api #cpp

Malware development: persistence - part 12. Accessibility Features. Simple C++ example.

﷽

cocomelonc.github.io

0

5

10

zhassulan zhussupov

@cocomelonckz

2 months

Today it has been two years since the release of my first book: MD MZ Book. I am grateful to the #cybersecurity #community in particular to the Russian-speaking hacker community there are so many of them that it is impossible to list them all. #malware #research #book

1

0

10

zhassulan zhussupov

@cocomelonckz

2 years

I hope this post useful for entry level cybersec specialists and possibly even professionals #cybersecurity #cybersec #infosec #redteam #blueteam #hacking #purpleteam #pentest #privilegeescalation #ethicalhacking #winapi #windows #apt28 #fin8 #apt

APT techniques: Access Token manipulation. Token theft. Simple C++ example.

﷽

cocomelonc.github.io

0

3

9

zhassulan zhussupov

@cocomelonckz

1 year

Alhamdulillah, I hope it will be useful for cybersec community! #infosec #cybersec #hacking #redteam #blueteam #purpleteam #malware #malwareanalysis #cybercrime #programming #arabsecurity #conference #research

zhassulan zhussupov | Arab Security Conference Speaker 2023

www.arabsecurityconference.com

0

7

zhassulan zhussupov

@cocomelonckz

1 year

next one. Used by #comrat and #turla APT. #cybersec #cybersecurity #infosec #hacking #cybercrime #malware #malwareanalysis #malwareattacks #redteam #blueteam #purpleteam #winapi #windows #programming

Malware development trick - part 29: Store binary data in registry. Simple C++ example.

﷽

cocomelonc.github.io

0

4

7

zhassulan zhussupov

@cocomelonckz

1 year

new part on my blog. #cybersecurity #infosec #informationsecurity #malware #malwaredev #malwareanalysis #redteam #blueteam #purpleteam #hacking #ethicalhacking #pentest #windowssecurity #win32api #programming #cpp #ransomware #cybercrime

Malware development trick - part 27: WinAPI LoadLibrary implementation. Simple C++ example.

﷽

cocomelonc.github.io

0

7

zhassulan zhussupov

@cocomelonckz

1 year

djuma mubarak. next one. #cybersec #cybersecurity #informationsecurity #malware #malwaredev #malwareanalysis #hacking #redteam #blueteam #purpleteam #research #windowsinternals #programming #cybercrime #ethicalhacking #windows #windowssecurity

Malware development trick - part 30: Find PID via NtGetNextProcess. Simple C++ example.

﷽

cocomelonc.github.io

0

7

zhassulan zhussupov

@cocomelonckz

2 years

the next one in my blog. Interesting trick #cybersec #infosec #cybersecurity #informationsecurity #hacking #malware #malwareanalysis #redteam #blueteam #purpleteam #ethicalhacking #pentest #pentesting #windows #win32api #persistence #programming #cpp

Malware development: persistence - part 14. Event Viewer help link. Simple C++ example.

﷽

cocomelonc.github.io

0

3

6

zhassulan zhussupov

@cocomelonckz

2 years

next part. #cybersecurity #cybersec #infosec #informationsecurity #redteam #blueteam #redteaming #blueteaming #hacking #purpleteam #pentest #privesc #privilegeescalation #penetrationtesting #ethicalhacking #winapi #windows #apt #CPP #programming

APT techniques: Token theft via UpdateProcThreadAttribute. Simple C++ example.

﷽

cocomelonc.github.io

0

5

6

zhassulan zhussupov

@cocomelonckz

8 months

@CyberWarship @hack_lu Luxembourg 2024 @BSidesDublin 2024

2

1

5

zhassulan zhussupov

@cocomelonckz

2 years

next post. I hope this post will be helpful for blue and red teamers for better understanding theirs “cat =^..^= and mouse <:3 )~~~” game (or war?). #cybersec #cybersecurity #infosec #malware #malwareanalysis #hacking #Math #pythonprogramming #python

Malware analysis: part 6. Shannon entropy. Simple python script.

﷽

cocomelonc.github.io

0

2

3

zhassulan zhussupov

@cocomelonckz

2 years

the next one. Used by #turla apt in the wild. #cybersec #infosec #cybersecurity #informationsecurity #malware #redteam #blueteam #purpleteam #hacking #ethicalhacking #ethicalhacker #pentest #win32api #windows #programming #cybercrime

Malware development: persistence - part 11. Powershell profile. Simple C++ example.

﷽

cocomelonc.github.io

0

1

4

zhassulan zhussupov

@cocomelonckz

2 years

next one at my blog. #cybersecurity #infosec #informationsecurity #malware #malwaredev #persistence #redteam #blueteam #purpleteam #hacking #ethicalhacking #pentest #windowssecurity #win32api #programming #cpp #cybercrime

Malware development: persistence - part 21. Recycle Bin, My Documents COM extension handler. Simple...

﷽

cocomelonc.github.io

0

2

3

zhassulan zhussupov

@cocomelonckz

2 years

next post. #cybersec #infosec #cybersecurity #informationsecurity #hacking #malware #malwaredev #malwareanalysis #malwareattacks #redteam #blueteam #purpleteam #ethicalhacking #pentest #windows #windows10 #win32api #persistence #programming #cpp

Malware development: persistence - part 18. Windows Error Reporting. Simple C++ example.

﷽

cocomelonc.github.io

0

1

4

zhassulan zhussupov

@cocomelonckz

2 years

next post in my blog. Worked on Windows 10 and Windows 11. #cybersec #CyberSecurity #infosec #informationsecurity #Malware #malwareanalysis #hacking #ethicalhacking #redteam #BlueTeam #pentesting #persistence #windows #Windows10 #Windows11

Malware development: persistence - part 15. Internet Explorer. Simple C++ example.

﷽

cocomelonc.github.io

0

3

zhassulan zhussupov

@cocomelonckz

2 years

next post #cybersec #cybersecurity #infosec #informationsecurity #hacking #malware #malwaredev #malwareanalysis #redteam #blueteam #purpleteam #ethicalhacking #pentest #pentesting #windows #winapi #win32api #persistence #programming #cpp #cplusplus

Malware development: persistence - part 13. Hijacking uninstall logic for application. Simple C++...

﷽

cocomelonc.github.io

0

1

4

zhassulan zhussupov

@cocomelonckz

2 years

Djuma Mubarak! next one. #cybersec #infosec #cybersecurity #informationsecurity #malware #malwaredev #malwareanalysis #hacking #redteam #blueteam #purpleteam #windows #ethicalhacking #persistence #win32api #programming #cpp

Malware development: persistence - part 19. Disk Cleanup Utility. Simple C++ example.

﷽

cocomelonc.github.io

1

4

zhassulan zhussupov

@cocomelonckz

2 years

next one. Used by #apt28 in the wild. #cybersec #infosec #cybersecurity #informationsecurity #malware #malwaredev #malwareanalysis #hacking #redteam #blueteam #purpleteam #windows #ethicalhacking #persistence #win32api #programming #cpp #apt28 #cybercrime

Malware development: persistence - part 20. UserInitMprLogonScript (Logon Script). Simple C++...

﷽

cocomelonc.github.io

1

3

zhassulan zhussupov

@cocomelonckz

2 years

the next one in my blog. #malwaredev #malware #cybersec #cybersecuirty #infosec #redteam #blueteam #hacking #windows #win32api #programming #cpp #cobaltstrike

Malware development tricks: parent PID spoofing. Simple C++ example.

﷽

cocomelonc.github.io

0

2

3

zhassulan zhussupov

@cocomelonckz

2 years

next one. Used by #apt29 at the wild. #infosec #cybersecurity #cybercrime #malware #redteam #windows #Hacking #Pentesting #PenTest Alhamdulillah thanks to everyone who continues to support me and my book!

Malware development: persistence - part 10. Using Image File Execution Options. Simple C++ example.

﷽

cocomelonc.github.io

0

1

3

zhassulan zhussupov

@cocomelonckz

2 years

next one. used by #conti and #hellokitty ransomwares in the wild #cybersecurity #infosecurity #malware #malwaredev #redteam #blueteam #purpleteam #hacking #ethicalhacking #pentest #windowssecurity #win32api #programming #cpp #ransomware #cybercrime

Malware development tricks: part 26. Mutex. C++ example.

﷽

cocomelonc.github.io

0

1

3

zhassulan zhussupov

@cocomelonckz

2 years

Djuma mubarak! Next one. Interesting experiment. #cybersec #infosec #CyberSecurity #informationsecurity #hacking #malware #malwareanalysis #redteam #blueteam #purpleteam #ethicalhacking #pentest #pentesting #windows #win32api #persistence #programming

Malware development: persistence - part 16. Cryptography Registry Keys. Simple C++ example.

﷽

cocomelonc.github.io

0

2

zhassulan zhussupov

@cocomelonckz

2 years

next one on my blog. #cybersecurity #infosec #informationsecurity #malware #malwaredev #malwareanalysis #redteam #blueteam #purpleteam #hacking #ethicalhacking #pentest #windowssecurity #win32api #programming #cpp #cybercrime #revil #ransomware

Malware analysis: part 7. Yara rule example for CRC32. CRC32 in REvil ransomware

﷽

cocomelonc.github.io

0

2

zhassulan zhussupov

@cocomelonckz

2 years

@reverseame

0

1

2

zhassulan zhussupov

@cocomelonckz

2 years

next one. #cybersecurity #infosec #informationsecurity #malware #malwaredev #malwareanalysis #redteam #blueteam #purpleteam #hacking #ethicalhacking #pentest #windowssecurity #win32api #programming #cpp #ransomware #cybercrime

Malware AV/VM evasion - part 11: encrypt payload via DES. Simple C++ example.

﷽

cocomelonc.github.io

0

1

2

zhassulan zhussupov

@cocomelonckz

2 years

next post in my blog. This trick is used by SILENTTRINITY in the wild #cybersec #cybersecurity #infosec #malware #hacking #redteam #blueteam #purpleteam #ethicalhacking #cybercrime #win32api #windows

Malware development: persistence - part 9. Default file extension hijacking. Simple C++ example.

﷽

cocomelonc.github.io

0

1

2

zhassulan zhussupov

@cocomelonckz

6 months

@2301firoz Honestly, I try to write as often as my free time allows me, since now I devote all my free time to my family and writing a book about #malware #development that will be published by #packt this year in sha Allah

1

0

1

zhassulan zhussupov

@cocomelonckz

2 years

Djuma mubarak! New post. #cybersec #infosec #cybersecurity #informationsecurity #malware #evasion #redteam #blueteam #purpleteam #hacking #ethicalhacking #pentest #pentesting #win32api #windows #programming #cybercrime

Malware AV/VM evasion - part 10: anti-debugging. NtGlobalFlag. Simple C++ example.

﷽

cocomelonc.github.io

0

1

zhassulan zhussupov

@cocomelonckz

3 months

@DKidolle Thank you! You are welcome! Enjoy!

0

1

zhassulan zhussupov

@cocomelonckz

1 year

@reenz0h I just mean in my case in this implementation for SetTimer function :)

0

1

zhassulan zhussupov

@cocomelonckz

3 months

@2301firoz I get a lot of questions about book delivery to different parts of the world, except Europe and North America. So I will buy a batch of books and deliver them to a conference where I plan to speak in the future.

1

0

1

zhassulan zhussupov

@cocomelonckz

9 months

@xiulan31337 payload encryption/decryption trick

Malware AV/VM evasion - part 12: encrypt/decrypt payload via TEA. Simple C++ example.

﷽

cocomelonc.github.io

0

1