CASE / 04 — Malware analysis / Arctic Wolf — 2025

BSides Presentation

Code Noir: Malware in Layers – Reverse Engineering

BSides @Arctic Wolf, sharing insights into "Code Noir: Malware in Layers – Reverse Engineering"

🕵️‍♂️ My presentation focused on dissecting the Nanocore RAT, a resilient and evolving threat used by state-sponsored and emerging cyber threat groups. Through a multi-layered reverse engineering approach, I demonstrated how uncovering hidden payloads and understanding evasion techniques directly contribute to enhancing threat intelligence.

Identifying Zero-Day Exploits: By analyzing Nanocore’s layers, I showcased how to detect previously unknown threats and extract critical Indicators of Compromise (IOCs).

Generating Actionable Threat Intelligence: Reverse engineering allowed us to map threat actor intentions and behaviors, feeding valuable data into threat intelligence platforms to predict and mitigate future threats.

Supporting Proactive Defense: The session emphasized the importance of threat hunting and leveraging IOCs and BIOCs to improve threat detection and response strategies.

💡 This process of peeling back the layers of malware not only aids in immediate threat mitigation but also strengthens long-term security postures by enriching threat intelligence repositories with high-fidelity data.