https://davigsantana.github.io/Research, analyses and documentation of malware, exploits and cyber operations. 2026-08-19T11:35:14-03:00 Davi Santana https://davigsantana.github.io/ Jekyll © 2026 Davi Santana /assets/img/favicons/favicon.ico /assets/img/favicons/favicon-96x96.png 2026-08-16T17:00:00-03:00 2026-08-16T17:00:00-03:00 https://davigsantana.github.io/posts/operation-silentserpent/ Davi Santana

Introducion A senior researcher at South Korea’s Ministry of Science opened a mali… The Lure Scenario: An employee reported a strange email attachment. Your task is to analyze the extracted files and uncover the initial attack vector. Question 1 What is the SHA256 hash of the decoy file? R: 1D01EAB612DA7D635E6B92395EAD126E3E07B7987B3A38C8831E25CBCD5456B7 Question 2 What is the SHA-...

2026-08-14T17:00:00-03:00 2026-08-14T17:00:00-03:00 https://davigsantana.github.io/posts/pma-lab6/ Davi Santana

In this post, I continue my studies of the book “Practical Malware Analysis” and begin working on Lab 6. The goal is to apply practical static and dynamic analysis techniques to understand the behavior of real samples, reinforcing fundamental concepts used in malware analysis environments. This content is part of my study routine and documentation of the learning steps. LAB 07-01 Lab06-01.ex...

2026-08-11T17:00:00-03:00 2026-08-15T15:20:41-03:00 https://davigsantana.github.io/posts/wannacry/ Davi Santana

Introduction WannaCry, also known as WannaCrypt, was a ransomware that became famous in May 2017 for spreading quickly around the world. The malware is widely linked to the Lazarus Group, a group associated with North Korea. One of the main culprits for its spread was EternalBlue, an exploit developed by the NSA and later leaked by the Shadow Brokers group. The exploit took advantage of a vul...

2026-07-26T17:00:00-03:00 2026-07-28T17:39:04-03:00 https://davigsantana.github.io/posts/pma-lab3/ Davi Santana

In this post, I continue my studies of the book “Practical Malware Analysis” and begin working on Lab 3. The goal is to apply practical static and dynamic analysis techniques to understand the behavior of real samples, reinforcing fundamental concepts used in malware analysis environments. This content is part of my study routine and documentation of the learning steps. LAB 03-01 Lab03-01.exe ...

2026-02-20T17:00:00-03:00 2026-07-17T16:09:42-03:00 https://davigsantana.github.io/posts/veletrix/ Davi Santana

Introduction Throughout my ongoing studies in Malware Analysis and Reverse Engineering, I have had the opportunity to analyze different malicious campaigns associated with broader, more structured operations. These analyses, which often cover only the fundamental elements of the kill chain and some specific components of the arsenal used by threat actors, have served as a starting point for a ...