Finally, my research on Gracewire and a P2P malware that used the same VFS.

https://blog.codsec.com/posts/malware/gracewire_adventure/

https://github.com/y0ug/gracewire_research/

After so long, this took way more time than expected to compile my notes and scripts.

A lot of python scripts, some @qiling too

@RolfRolles@twitter.com post https://www.msreverseengineering.com/blog/2021/3/2/an-exhaustively-analyzed-idb-for-flawedgrace was a saver, thank you.

#malware #malwareanalysis #threatintel #qiling #gracewire #flawedgrace

RT @ke_0z@twitter.com

First post in a very long while , #qiling #ctf #arm #exploitdev and
#ReverseEngineering , an ARM exploit dev challenge/write up using IDA PRO, GDB and Qiling (@qiling_io@twitter.com)

https://0z.ke/arm-qiling-ctf/

🐦🔗: https://twitter.com/ke_0z/status/1592160963561668609