Sergei Frankoff

Sergei Frankoff

Sergei is a co-founder of Open Analysis. When he is not reverse engineering malware Sergei is focused on building automation tools for malware analysis.

https://www.openanalysis.net

UnpacMe 8.7.0 – Malicious Python, AI Safety, and Binary Signature Hunting

Need to triage malicious Python – read the script! Or better yet, let AI analyze it for you. Our first release of 2025 introduces full PyInstaller unpacking, Python decompilation, and new hunting features.

UnpacMe PIVOT!

Introducing PIVOT our new graph-based search interface! With PIVOT it is easy to investigate links between malware files, artifacts, and network data, revealing a holistic threat picture.

UnpacMe 8.0.0 – YARA Rule Management, Shared Rules, AV Detects, .NET Analysis, Icons, and Much More

Our first big release of 2024 adds a completely redesigned YARA editor with rule versioning, rule management, AV detections, .NET metadata analysis and much more.

UnpacMe 2023 Year In Review: Malware Intel For Everyone

At the beginning of 2023 UnpacMe was strictly a malware unpacking platform with the capability to identify common malware families, and extract malware configuration information. By December 2023, we had transformed into an malware intelligence and hunting platform with a freemium model that allows us to provide the same powerful

Docs For The Holidays

UnpacMe release 7.6.0 integrates our new Support Portal with full documentation for all UnpacMe services. Over the years we have had many questions about the various features offered by UnpacMe and tool-tips just aren't cutting it anymore, so we have developed a full suite of docs!

UnpacMe 7.5.0 - Community Rules, Improved Hunting, Goodware Integration,

UnpacMe submissions are now scanned with open source community Yara rules, a new Hunt view can be used to quickly pivot on searchable data, and Goodware labels are automatically applied to unpacked samples.

UnpacMe 7.4.0 – SourceIntel, Go Symbols, Search Filters

Results are now enriched with SourceIntel OSINT data, Go samples are now processed with GoReSym symbol recovery, and both Search and Yara results now have customizable results filters.

Intezer x UnpacMe Integration

With Release 5.0.0 UnpacMe now supports direct integration with the community edition of the Intezer Analyze service!

AutoIt Extraction and More

With Release 2.7.0 UnpacMe now supports automatic extraction of embedded AutoIt scripts, URL extraction from VB6 Downloaders, and a lot of bug fixes!

Malpedia Integration

With Release 2.4.0 UnpacMe now supports tighter integration with Malpedia!