2026-09-22 19:37 UTC
Al ran this analysis end to end: unpacked and decoded the obfuscated batch script, rebuilt two hidden executables from fragments, decompiled Autolt scripts and wrote a decoder, recovered encrypted and compressed payload, matched it to the StealC malware family. 19 minutes, 39 tool calls, about $4 using Claude Opus 5. "Teaching Al to Analyze Malware: How to Encode Practitioner Expertise into an MCP Server" by Lenny Zeltser at #blueteamcon (3/n)
Replies (1)
-
@PwnieFan@infosec.exchange 2026-09-22 19:37
Three gaps for out of the box AI. AI knows the common tools, but the long tail of specialized ones takes practitioner expertise. AI states strong findings and weak guesses in the same confident voice. AI is non-deterministic, so two runs on the same sample can diverge. "Teaching Al to Analyze Malware: How to Encode Practitioner Expertise into an MCP Server" by Lenny Zeltser at #blueteamcon (4/n)