Jeff Archer

Tutorials. Various Tutorials

rat_king_parser. A robust, multiprocessing-capable, multi-family RAT config parser/config extractor for AsyncRAT, DcRAT, VenomRAT, QuasarRAT, XWorm, Xeno RAT, and cloned/derivative RAT families.

IoCs. A collection of Indicators of Compromise (IoCs), most aligning with samples derived from the signatures in the YARA-Signatures repo

YARA-Signatures. A collection of my public YARA signatures for various malware families

Malware-Writeups. A collection of my reverse engineering and malware analysis write-ups

yarix. C

CAPEv2. Malware Configuration And Payload Extraction