UnpacMe 7.5.0 - Community Rules, Improved Hunting, Goodware Integration,

UnpacMe submissions are now scanned with open source community Yara rules, a new Hunt view can be used to quickly pivot on searchable data, and Goodware labels are automatically applied to unpacked samples.

UnpacMe 7.4.0 – SourceIntel, Go Symbols, Search Filters

Results are now enriched with SourceIntel OSINT data, Go samples are now processed with GoReSym symbol recovery, and both Search and Yara results now have customizable results filters.

UnpacMe Weekly: Hunting by Moonlight

Updated Yara Hunting to improve scan coverage and lookback, aded support for Yara 4.3, and updated support for bloated files

UnpacMe Weekly: Hunting Improvements & Threat Coverage

Updated capa to use the latest version 6.0.0, expanded Goodware corpus for testing Yara rules, and improved byte search performance.

UnpacMe Weekly: New IDA Search Plugin and RisePro on the Rise

This week we've launched a new IDA Search Plugin that allows analysts to efficiently search UnpacMe for related samples and overlapping code. The plugin can search through both malware samples and our collection of Goodware files.

UnpacMe Weekly: Malware Analysis at Scale!

Last month was somewhat of a milestone for us at UnpacMe as we onboarded our 10,000th user! To celebrate we are introducing a new Boosted plan.

UnpacMe Weekly: Search Sharing is Caring

Searches can now be shared with our new share search URL feature.

UnpacMe Weekly:It's Raining Redline

This week we've observed a substantial increase in Redline Stealer submissions. A large number of these are utilizing a hash-busted packer.

UnpacMe Weekly: New variants of in2al5dp3in4er and StrelaStealer

We have identified new variants of in2al5dp3in4er (invalid printer) packer being used to distribute Aurora Stealer and Vidar Stealer. These variants were observed to have low AV detection rates.

UnpacMe Weekly: New Version of IcedId Loader

This week we've updated coverage for IcedId and an IcedId fork based on a newly observed version.