41554 blogs · [ { "id": "01a087cd-5a73-720c-b071-c67320902091", "title": "SLEEPWALKER: A Passive Backdoor With Its Own Command Language", "url": "https://r136a1.dev/2026/08/24/sleepwalker-a-passive-backdoor-with-its-own-command-language/", "published_at": "2026-08-24T10:00:00+00:00" }, { "id": "01a087cd-5a73-720c-b071-c67320f54e2e", "title": "Where Have All the Complex Windows Malware and Their Analyses Gone?", "url": "https://r136a1.dev/2026/05/07/where-have-all-the-complex-malware-and-their-analyses-gone/", "published_at": "2026-05-07T10:00:00+00:00" }, { "id": "01a087cd-5a73-720c-b071-c67321b474f6", "title": "🇷🇺 COMmand & Evade: Turla’s Kazuar v3 Loader", "url": "https://r136a1.dev/2026/01/14/command-and-evade-turlas-kazuar-v3-loader/", "published_at": "2026-01-14T10:00:00+00:00" }, { "id": "01a087cd-5a73-720c-b071-c67321cf4a08", "title": "Malware Sideloading via MFC Satellite DLLs", "url": "https://r136a1.dev/2025/12/03/malware-sideloading-via-mfc-satellite-dlls/", "published_at": "2025-12-03T10:00:00+00:00" }, { "id": "01a087cd-5a73-720c-b071-c6732207f585", "title": "🇺🇦 The ZeroAccess Developer and His Windows Kernel-Mode Debugger", "url": "https://r136a1.dev/2025/10/28/zeroaccess-developer-and-his-kernelmode-debugger/", "published_at": "2025-10-28T10:00:00+00:00" }, { "id": "01a087cd-5a73-720c-b071-c67322aea1f0", "title": "🇨🇳 More on DreamLand", "url": "https://r136a1.dev/2023/09/22/more-on-dreamland/", "published_at": "2023-09-22T10:00:00+00:00" }, { "id": "01a087cd-5a73-720c-b071-c67323ad26f5", "title": "🇷🇺 A look into APT29’s new early-stage Google Drive downloader", "url": "https://r136a1.dev/2022/07/19/a-look-into-apt29s-new-early-stage-google-drive-downloader/", "published_at": "2022-07-19T10:00:00+00:00" }, { "id": "01a087cd-5a73-720c-b071-c67324424e73", "title": "Using dotnetfile to get a Sunburst timeline for intelligence gathering", "url": "https://r136a1.dev/2022/06/18/using-dotnetfile-to-get-a-sunburst-timeline-for-intelligence-gathering/", "published_at": "2022-06-18T10:00:00+00:00" }, { "id": "01a087cd-5a73-720c-b071-c673246c0633", "title": "Introduction of a PE file extractor for various situations", "url": "https://r136a1.dev/2022/05/25/introduction-of-a-pe-file-extractor-for-various-situations/", "published_at": "2022-05-25T10:00:00+00:00" }, { "id": "01a087cd-5a73-720c-b071-c67324ef4d46", "title": "Hello World", "url": "https://r136a1.dev/2022/05/09/hello-world/", "published_at": "2022-05-09T14:32:27+00:00" }, { "id": "01a0e55b-5083-701d-8c20-f344214b6f8c", "title": null, "url": "https://r136a1.dev/about/", "published_at": null }, { "id": "01a0e55b-5083-701d-8c20-f344214bbdb7", "title": null, "url": "https://r136a1.dev/archive/", "published_at": null }, { "id": "01a0e55b-5083-701d-8c20-f34421a300b3", "title": null, "url": "https://r136a1.dev/", "published_at": null }, { "id": "01a0e55b-5083-701d-8c20-f34422376084", "title": null, "url": "https://r136a1.dev/teampcp_cargo_env_parser_compromise/", "published_at": null }, { "id": "01a0e55b-5083-701d-8c20-f3442237fd94", "title": null, "url": "https://r136a1.dev/links/", "published_at": null }, { "id": "01a0e55b-5083-701d-8c20-f344223a48da", "title": null, "url": "https://r136a1.dev/categories/tool/", "published_at": null }, { "id": "01a0e55b-5083-701d-8c20-f344230eceff", "title": null, "url": "https://r136a1.dev/categories/malware/", "published_at": null }, { "id": "01a0e55b-5083-701d-8c20-f34423eeadaa", "title": null, "url": "https://r136a1.dev/categories/threat-intelligence/", "published_at": null }, { "id": "01a0e55b-5083-701d-8c20-f34424c99079", "title": null, "url": "https://r136a1.dev/posts/2/", "published_at": null } ] posts Claim your blog

Back to r136a1.dev

Blog · corpus.blog/blogs/r136a1.dev/posts

r136a1.dev

r136a1.dev

2026

SLEEPWALKER: A Passive Backdoor With Its Own Command Language original ↗

24 Aug 2026

Where Have All the Complex Windows Malware and Their Analyses Gone?original ↗

7 May 2026

🇷🇺 COMmand & Evade: Turla’s Kazuar v3 Loader original ↗

14 Jan 2026

2025

Malware Sideloading via MFC Satellite DLLs original ↗

3 Dec 2025

🇺🇦 The ZeroAccess Developer and His Windows Kernel-Mode Debugger original ↗

28 Oct 2025

2023

🇨🇳 More on DreamLand original ↗

22 Sept 2023

2022

🇷🇺 A look into APT29’s new early-stage Google Drive downloader original ↗

19 Jul 2022

Using dotnetfile to get a Sunburst timeline for intelligence gathering original ↗

18 Jun 2022

Introduction of a PE file extractor for various situations original ↗

25 May 2022

Hello World original ↗

9 May 2022

Undated

https://r136a1.dev/about/original ↗

—

https://r136a1.dev/archive/original ↗

—

https://r136a1.dev/original ↗

—

https://r136a1.dev/teampcp_cargo_env_parser_compromise/original ↗

—

https://r136a1.dev/links/original ↗

—

https://r136a1.dev/categories/tool/original ↗

—

https://r136a1.dev/categories/malware/original ↗

—

https://r136a1.dev/categories/threat-intelligence/original ↗

—

https://r136a1.dev/posts/2/original ↗

—