c2-analysis

Static analysis and reverse engineering of Phantom Stealer V3 (SHA256: b1d8...). For educational purposes only.

TryHackMe Boogeyman 1 write-up covering phishing email analysis, malicious LNK investigation, PowerShell log analysis, C2 traffic, DNS exfiltration, and KeePass data recovery.

🔍 Technical analysis of "悦动空间" Android spyware - Exfiltrates contacts, SMS & images to C2 servers (156.224.170.230) | SHA-256: a1feefa...

TryHackMe Boogeyman 2 write-up covering phishing email analysis, malicious document macros, memory forensics, C2 investigation, and persistence detection.

PDF-only academic report analyzing a real multi-stage Windows malware sample, including anti-analysis behavior, process replacement, C2 communication, and data exfiltration in an isolated lab.

A comprehensive portfolio of Advanced Network Security laboratory projects, focusing on network forensics, threat hunting, C2 analysis, and automated security research using Python & Docker.”