Beginner-friendly Malcat walkthrough of a 32-bit sideloader that pretends to be a task-scheduler helper for ASUS, hides its config as base64 wrapped in a circular XOR, and uses api.telegram.org as its command channel. Covers the summary view, section entropy, exports, strings, anomalies, config decryption, and the getUpdates/sendMessage/sendDocument flow — all statically, without ever executing the sample.

Malcat 0.9.15 introduces a multithreaded C++ capa engine that reduces typical scan times from hours/minutes to seconds. It also brings integrated ATT&CK and MBC summaries, rule browsing and editing, s...

Ever wondered which LLM model is the best to analyse malware? Well, we did, and put them to the test. By strapping 9 state-of-the-art large language models to Malcat's powerful MCP server, we made the...

Malcat version 0.9.13 is out! In this release, we have added 3 features that were asked a lot: a MacOS port of Malcat, an integrated MCP server for LLMs to analyse malware with malcat and finally a pr...

Malcat version 0.9.12 is out! This time we have focused on python and dotnet disassembly, with a new stack analysis that should improve their disassembly listing readability. We have also added suppor...

In this tutorial, we will learn how to leverage Malcat's scripting and patching capabilities to deobfuscate an unpacked Latrodectus sample.

Malcat version 0.9.11 is out! With this release, Malcat is now able to analyse MacOS programs. That means: addition of Armv7, Armv8 and Aarch64 disassemblers and decompilers as well as MachO, DMG and...

YouTube video

What started like an easy unpacking session to fill a Friday afternoon lead us to a singular black-SEO campaign. Together, we will unravel 4 different malicious loaders written in 4 different programm...

Advanced malware analysis and threat intelligence solutions by RationalEdge

YouTube video by Invoke RE

Malcat is a powerful binary file dissector that's essential for Windows and Linux IT-security professionals. As both a feature-rich hexadecimal editor and a ...

Malcat version 0.9.10 is out! In this release, we have improved Malcat's CFG recovery algorithm and compared its performances against other reversing software. A new CPU architecture (MIPS) has also b...

Malcat version 0.9.10 is out! In this release, we have improved Malcat's CFG recovery algorithm and compared its performances against other reversing software. A new CPU architecture (MIPS) has also b...

Malcat version 0.9.9 is out! Say hello to the offline version of Kesakode, which lets you identify malware even faster and without uploading any hash! You will also see several UI improvements, python...

Malcat version 0.9.9 is out! Say hello to the offline version of Kesakode, which lets you identify malware even faster and without uploading any hash! You will also see several UI improvements, python...

Malcat version 0.9.8 is out! You will find many quality-of-life improvements, such as an improved transform dialog, better scripting support, better data preview and many more.