UnpacMe Blog

Latest — Jun 5, 2025

AI Script Analysis, Hunting, and Decompilation Updates

With our latest updates to UnpacMe, we’ve improved AI-powered script summaries, enhanced decompilation capabilities, and optimized YARA performance. We’ve also upgraded to the latest stable release of YARA-X— bringing faster, more reliable scanning to the platform.

More issues

Malware Trends: Yearly 2024

Looking back on the past year’s public UnpacMe submissions, we have identified some interesting trends that offer a broader perspective on the 2024 malware landscape. This year's review is supported by our new ATIP Malware Trends tracker, which provides a concise overview of the top malware families

UnpacMe 8.7.0 – Malicious Python, AI Safety, and Binary Signature Hunting

Need to triage malicious Python – read the script! Or better yet, let AI analyze it for you. Our first release of 2025 introduces full PyInstaller unpacking, Python decompilation, and new hunting features.

ATIP – Introducing AI-Powered Threat Reporting and Analysis

With UnpacMe 8.6.0, we introduce ATIP, our AI-powered Automated Threat Intelligence Product. ATIP uses artificial intelligence to summarize malware analysis, generate threat reports, and provide insights into malware behavior, capabilities, and overall threat potential.

UnpacMe 8.5.0 – Lightning Fast MalwareID Mode

With the release of version 8.5.0, we introduce a new analysis mode for rapid triage of malware that doesn’t require unpacking. Using MalwareID, we provide malware identification and extracted configurations within seconds.

UnpacMe Weekly: Stealing Summer

This week, we observed an increase in Stealc and Vidar Stealer submissions, with a continued rise in .NET-based information stealers. UnpacMe’s enhanced analysis now more effectively handles corrupted PE files.

UnpacMe PIVOT!

Introducing PIVOT our new graph-based search interface! With PIVOT it is easy to investigate links between malware files, artifacts, and network data, revealing a holistic threat picture.

UnpacMe Support For YARA-X

We are excited to announce that UnpacMe has integrated support for YARA-X, a new project recently released by Google’s VirusTotal team. YARA-X is a complete rewrite of YARA developed in Rust. According to the announcement, future features and modules will be exclusively developed for YARA-X, rather than the existing

Zombieware: Malware That Never Dies...

Self-replicating malware, long abandoned by its operators, continues to contribute significant volume and noise to malware feeds. We investigate this trend, which we refer to as Zombieware.

UnpacMe 8.0.0 – YARA Rule Management, Shared Rules, AV Detects, .NET Analysis, Icons, and Much More

Our first big release of 2024 adds a completely redesigned YARA editor with rule versioning, rule management, AV detections, .NET metadata analysis and much more.