> For the complete documentation index, see [llms.txt](https://0xsec.gitbook.io/0xsec/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://0xsec.gitbook.io/0xsec/malware-analysis.md).

# Malware Analysis

- [WannaCry Analysis(Malware)](https://0xsec.gitbook.io/0xsec/malware-analysis/2025-12-18-wannacry.md)
- [NanoCore RAT Analysis](https://0xsec.gitbook.io/0xsec/malware-analysis/2025-12-23-nanocore_rat.md)
- [AgentTesla Analysis](https://0xsec.gitbook.io/0xsec/malware-analysis/2026-01-01-agenttesla.md)
- [Mirai Analysis](https://0xsec.gitbook.io/0xsec/malware-analysis/2026-01-09-mirai.md)
- [Remcos RAT Analysis](https://0xsec.gitbook.io/0xsec/malware-analysis/2026-01-19-remcos.md)
- [AndroRAT Android Malware Analysis](https://0xsec.gitbook.io/0xsec/malware-analysis/2026-02-01-androrat.md)
- [Analysis of GonePostal: APT28’s Custom VBA Backdoor for Microsoft Outlook](https://0xsec.gitbook.io/0xsec/malware-analysis/2026-02-09-gonepostal.md)
- [Operation Ghazwa: Disecting APT36's RAT](https://0xsec.gitbook.io/0xsec/malware-analysis/2026-02-14-apt36.md)
- [AppDomain Hijacking: Analyzing a LNK malware](https://0xsec.gitbook.io/0xsec/malware-analysis/2026-03-04-lnk_malware.md)
- [RustyWater: Reverse Engineering MuddyWater’s Rust Toolkit](https://0xsec.gitbook.io/0xsec/malware-analysis/2026-04-23-rustywater.md)
- [SakDriver: Reversing a Kernel Driver Rootkit](https://0xsec.gitbook.io/0xsec/malware-analysis/sakdriver-reversing-a-kernel-driver-rootkit.md)