$
malwareconfig
config-extraction archive · technical writeups · yara rule notes
status:
archive
est:
2014
archived:
2019
resumed:
2026
index
about
aptnotes
viper
dridex
rss
config-extraction
2026-09-01
Static config extraction without detonating the sample: a walkthrough
config-extraction · tutorial · ghidra · ida · reverse-engineering
2026-05-06
Modern stealer config formats: how Lumma, Atomic, and DanaBot store their C2 data
config-extraction · stealers · lumma · atomic · danabot
2026-04-27
What I use instead of malwareconfig.com (notes from the new operator)
config-extraction · tooling · sandboxes · archive