iiinova — where your digital self keeps evolving

Jesko Hüttenhain @rattle.im · 23/02/2026

Announcing #BinaryRefinery 0.10.0 [BR]. Includes some (hopefully) notable performance improvements and quite a few bug fixes. It also adds a prototype batch parser/emulator which aspires to become a proper batch deobfuscator in future releases. [BR] github.com/binref/refin...

github.com

GitHub - binref/refinery: High Octane Triage Analysis

High Octane Triage Analysis. Contribute to binref/refinery development by creating an account on GitHub.

000

Reposted by Jesko Hüttenhain

Karsten Hahn @struppigel.bsky.social · 23/01/2026

If you like binary refinery, check out this sample It's also mostly undetected yet on VT: samplepedia.cc/sample/361f2...

041

Jesko Hüttenhain @rattle.im · 24/01/2026

There is an open position on my team: crowdstrike.wd5.myworkdayjobs.com/en-CA/crowds... While this is not currently listed here, I am certain that U.S. remote is an option and if you're in Canada, I strongly expect that this would work as well.

crowdstrike.wd5.myworkdayjobs.com

Security Researcher, Malware Triage (Remote)

As a global leader in cybersecurity, CrowdStrike protects the people, processes and technologies that drive modern organizations. Since 2011, our mission hasn’t changed — we’re here to stop breaches, ...

000

Reposted by Jesko Hüttenhain

Karsten Hahn @struppigel.bsky.social · 04/01/2026

I have created a website, where you can share your sample analysis (via links or posts) and search samples for training based on tags and difficulty. If you write analysis blogs, you can share them there. samplepedia.cc

0147

Jesko Hüttenhain @rattle.im · 25/11/2025

Let's talk #windows #registry. ⚠️ HKLM\Reg\Key\Value Value could be a subkey 😭 ⚠️ HKLM\Reg\Key:Value Key names can contain colons 😭 💎 HKLM\Reg\Key\\Value This works unambiguously 🤩 (not the first to realize) BUT WHY ISN'T THIS STANDARD NOTATION 😭

000

Jesko Hüttenhain @rattle.im · 17/10/2025

The amazing @cxiao.net is offering training at decoderloop.com for #Rust #Malware #ReverseEngineering 😱 Her insight is absolutely priceless, she's taught me all I know about this. If you are organizing an event: This is the state-of-the-art training you are looking for.

decoderloop.com

Decoder Loop | Reverse Engineering Training

163

Reposted by Jesko Hüttenhain

Karsten Hahn @struppigel.bsky.social · 04/08/2025

Good news, the intermediate malware analysis course is almost finished. I have currently a test student working through the course to get rid of mistakes that I do not notice.

161

Reposted by Jesko Hüttenhain

Karsten Hahn @struppigel.bsky.social · 29/06/2025

Tips for newcomers to malware blog articles: ➡️You don't need to document every malware function. Focus on key areas ➡️Your text must be factually correct and it is okay to skip those details you are unsure about ➡️When you are done, just stop writing

151

Jesko Hüttenhain @rattle.im · 20/06/2025

I just pushed out #BinaryRefinery v0.8.24 which fixes all the issues I encountered during my recent live stream =D.

110