Hatching

Thank you to everyone who has applied so far! We've already had a much bigger response than we expected but the openings are still up if you want to send in your CV for either role 👇

Hatching is hiring! We've opened up 2 new positions with our team as we look to our plans for 2025 and beyond: 🔸Senior Software Engineer 🔸Malware Analyst Both are remote roles; ideally in The Netherlands or Sweden, but same timezone is also possible hatching.io/jobs/

#tgToxic Android banker first popped up in early 2023 targeting users in SE Asia. Now it's back, featuring more advanced techniques and capabilities. Join @JunWei__Song for a breakdown of the new samples in our latest blogpost: hatching.io/blog/triage-in…

In our latest blogpost, @JunWei__Song takes a deep-dive into some techniques we've seen recently to prevent static analysis of #Android APKs Check it out for a walkthrough of the methods, how to deal with them, and relevant IOCs 👇 hatching.io/blog/triage-in…

In today's updates we've added initial support for extracting QR codes from PDF submissions Check it out in our latest Triage Thursday blog 👇 hatching.io/blog/tt-2024-0…

@dms1899 :))

@hatching_io I am so sorry ;)

This isn't an AI generated year book. This is vendors assigning new names to malware strains. We're currently working on an extractor for Ashelîîǵynne Loader (related to Bhuioem Botnet)

AgentTesla Threat Actor(s) hardcoded credentials use the same password formula as enterprise environments 😭

@ilbaroni_ Our first order of business is to improve website performance. Here is a proof-of-concept of the new site design. It is fast.

Hello, how are you? We have a lot of exciting news coming in the following months. We think you will enjoy it. Have a nice day.

You may have noticed some new things in the Replay Monitor this week👀 🔸Timeline of processes and network connections 🔸Take screenshots during playback 🔸See total analysis duration Check out the new blogpost for more details and detections! hatching.io/blog/tt-2024-0…

amazing training course🤩! also cool to see Triage here xD

Blogpost is a little late this week, but you can now check out the latest detection updates deployed to the sandbox yesterday 👇 hatching.io/blog/tt-2024-0…

Short Triage Thursday update blogpost today to start off the year! Check out what detections we've added here👇 hatching.io/blog/tt-2024-0…

Instead of our usual changelog blog, today we've published the first episode of our new Triage Insights series! Check it out for a deep-dive into the #Octo Android #banker, and how to get the most out of the sandbox when looking at Android threats 👇 hatching.io/blog/triage-in…

You might have noticed a couple of additions to Triage this week👀 We now support analysis in Window 11 and Android 13! Check out our latest update blogpost for details: hatching.io/blog/tt-2023-1…

Due to a power issue at one of our datacentres macOS analysis is currently unavailable within the sandbox. We are investigating and will get everything back online as soon as possible, apologies for any inconvenience caused in the meantime

Triage now supports QR code submissions! Just upload an image or #phishing email containing a QR code and the sandbox will extract the URL automatically. You can then start a new analysis for it with a single click! More details in our latest blog 👇 hatching.io/blog/qr-codes/

@JAMESWT_MHT The yara rule is triggering on one of the Miro.exe files that is written during the analysis, and it has a different hash and larger file size vs. the version that was originally submitted/referenced on VT. I suspect it's a legit detection but will verify that, thanks

@hatching_io False Positive? tria.ge/s?q=377d81cb9c… virustotal.com/gui/file/0d713…