Malcat

Malcat

Mastodon @malcat@infosec.exchange
⚔ Compare ☆ Watch Own this channel?
🤝

Make a deal with Malcat

🔒 Paid proposals held safely in escrow — released only when the work's approved.

📣Sponsored postOne disclosed post (toot) with your link and message. $12→ 🧵Sponsored threadA multi-post explainer or story — the fediverse rewards dept… $30→ 📦Product seeding / honest reviewSend me your product — I post a disclosed, honest take. Auth… $16→ 📌Pinned sponsored postA disclosed post pinned to the top of my profile for the mon… $36/mo→ 🔗Profile link (bio field)Your link in one of my profile metadata fields for the month… $18/mo→ 🔁Boost packageI boost (repost) your account's toots through the month — di… $24/mo→ 🏛️Instance / community sponsorshipSponsor the server I run — a sponsor line in the About/rules… $30/mo→ 🤝Mutual boost collabWe boost each other across instances — a value swap between … Swap→

Every booking is a normal escrow-protected deal.

Followers
144
Account age
3 yrs

Known for

We had 9 LLMs battle on real-world #malware triage and static unpacking tasks, using only #Malcat MCP server. We compared not only their results, but also their speed and cost. Full write-up: https://malcat.fr/blog/benchmarking-llms-for-malware-triage-and-static-unpacking-with-malcat/5 views We had 9 LLMs battle on real-world #malware triage and static unpacking tasks, using only #Malcat MCP server. We compared not only their results, but also their speed and cost. Full write-up: https://malcat.fr/blog/benchmarking-llms-for-malware-triage-and-static-unpacking-with-malcat/ Quick peek at the upcoming 0.9.3 release. It will also feature a 100% headless MCP server for full and pro users.4 views Quick peek at the upcoming 0.9.3 release. It will also feature a 100% headless MCP server for full and pro users. #Malcat 0.9.14 is out! This is a maintenance build, with some bonuses: ● AccessDB parsing ● RAR unpacking ● UPX (static) unpacking ● Improved __noreturn detection ● ... and as usual, up-to-date signature, constants and Kesakode DBs. Happy reversing!3 views #Malcat 0.9.14 is out! This is a maintenance build, with some bonuses: ● AccessDB parsing ● RAR unpacking ● UPX (static) unpacking ● Improved __noreturn detection ● ... and as usual, up-to-date signature, constants and Kesakode DBs. Happy reversing! Learn how to deobfuscate #Latrodectus using #malcat's scripting engine: https://malcat.fr/blog/malcat-scripting-tutorial-deobfuscating-latrodectus/3 views Learn how to deobfuscate #Latrodectus using #malcat's scripting engine: https://malcat.fr/blog/malcat-scripting-tutorial-deobfuscating-latrodectus/

📊 Post engagement

3
Avg engagement / post
2.1%
Engagement vs followers
Nov 2022
On Mastodon since

🔥 Top post: We had 9 LLMs battle on real-world #malware triage and static un · 5 likes + reposts

📊 Activity & format

Posting cadence
0.29 / week
A lower-frequency account — each post lands with more weight.
Content mix
Mostly images
Recent: 0 text · 12 image · 0 video.

Recent posts

View on Mastodon ↗
🔥 Top post We had 9 LLMs battle on real-world #malware triage and static unpacking tasks, using only #Malcat MCP server. We compared not only their results, but also their speed and cost. Full write-up: https://malcat.fr/blog/benchmarking-llms-for-malware-triage-and-static-unpacking-with-… ★ 5
You like #capa but wish it would scan faster? Try out #Malcat 0.9.15, featuring a blazing fast native Capa scanner, among other improvements: https://malcat.fr/blog/0915-is-out-capa-scanning-at-native-speed/ In the upcoming 0.9.15 release, Malcat will embed its own 100% native #capa engine. So you get: - x10 .. up to x100 scan speedup - command line tool (using headless malcat lib) - embedded capa rule editor - additional architectures: arm, m… ★ 1 #Malcat 0.9.14 is out! This is a maintenance build, with some bonuses: ● AccessDB parsing ● RAR unpacking ● UPX (static) unpacking ● Improved __noreturn detection ● ... and as usual, up-to-date signature, constants and Kesakode DBs. Happy… ★ 3 In Malcat, hitting <Ctrl+M> will start the in-GUI MCP server (works in free version too). You can then interact with the current analysis using your LLM of choice. Here I renamed functions and variables of the C2 dispatcher function for an… ★ 1 We're happy to announce that #malcat 0.9.13 is out! You'll find a new Apple-silicon MacOS port, two integrated MCP servers (in-GUI +headless) for automated triage and an improved interface: https://malcat.fr/blog/0913-is-out-macos-port-mc… Quick peek at the upcoming 0.9.3 release. It will also feature a 100% headless MCP server for full and pro users. ★ 4 Sometimes, the absence of signature match is also interesting. Here the hashtag#Chrysalis sideloaded dll, where we can quickly spot the few interesting functions. Make sure to check "Show UNK" ! A quick update on Malcat's MacOS development (apple silicon): A couple of visual glitches, but the analysis & UI are now functional \o/ #Malcat tip: #Kesakode can be useful even when facing unknown/packed samples. Check "Show UNK" and focus on unique code and strings. Here a simple downloader: Learn how to deobfuscate #Latrodectus using #malcat's scripting engine: https://malcat.fr/blog/malcat-scripting-tutorial-deobfuscating-latrodectus/ ★ 3 #Malcat version 0.9.11 has been released, with support for ARM and Mach-O program analysis. More details below: https://malcat.fr/blog/0911-is-out-arm-and-macho-analysis/ ★ 1

🐘 Community & instance

Home server
infosec.exchange
A cybersecurity & infosec server — its members and audience skew toward that niche, so expect a community-aligned, engaged following.
On Mastodon since
Nov 2022
Joined in the Twitter-exodus wave of late 2022 — part of the migration that made Mastodon a real destination.

💡 Facts

🗓️Joined Mastodon in 2022 — 3 years ago.
👁️Averages 3 views per post.
📤Posts about 0.3× per week.

🛡️ Audience credibility

80/100 Excellent
  • Est. 87% real, active audience · Low fake-follower risk.
  • Strong content engagement (~2.1% of followers) — an active, real audience.
  • Established account (3+ years old).
Est. authentic audience
87%
Fake-follower risk
Low

Heuristic estimate from view-through, engagement vs size and recent growth — a screening signal, not a guarantee.

About

Malcat, a binary analysis software for #cybersecurity professionals. #malware #malwareanalysis #reverseengineering #dfir #soc

📸 Gallery

You like #capa but wish it would scan faster? Try out #Malcat 0.9.15, featuring a blazing fast native Capa scanner, among other improvements: https://malcat.fr/blog/0915-is-out-capa-scanning-at-native-speed/ In the upcoming 0.9.15 release, Malcat will embed its own 100% native #capa engine. So you get: - x10 .. up to x100 scan speedup - command line tool (using headless malcat lib) - embedded capa rule editor - additional architectures: arm, mips and even ... python: We had 9 LLMs battle on real-world #malware triage and static unpacking tasks, using only #Malcat MCP server. We compared not only their results, but also their speed and cost. Full write-up: https://malcat.fr/blog/benchmarking-llms-for-malware-triage-and-static-unpacking-with-malcat/ #Malcat 0.9.14 is out! This is a maintenance build, with some bonuses: ● AccessDB parsing ● RAR unpacking ● UPX (static) unpacking ● Improved __noreturn detection ● ... and as usual, up-to-date signature, constants and Kesakode DBs. Happy reversing! In Malcat, hitting <Ctrl+M> will start the in-GUI MCP server (works in free version too). You can then interact with the current analysis using your LLM of choice. Here I renamed functions and variables of the C2 dispatcher function for an unknown malware: We're happy to announce that #malcat 0.9.13 is out! You'll find a new Apple-silicon MacOS port, two integrated MCP servers (in-GUI +headless) for automated triage and an improved interface: https://malcat.fr/blog/0913-is-out-macos-port-mcp-server-and-dark-mode Quick peek at the upcoming 0.9.3 release. It will also feature a 100% headless MCP server for full and pro users. Sometimes, the absence of signature match is also interesting. Here the hashtag#Chrysalis sideloaded dll, where we can quickly spot the few interesting functions. Make sure to check "Show UNK" !

🔀 Audience overlap

Estimated

Estimated shared audience with similar creators — useful for avoiding overlap (or doubling down) when planning a campaign.

François Caron 🇨🇦 François Caron 🇨🇦 18% Sea Cow Sea Cow 16% Tycho Brahe Tycho Brahe 14% TwoThirds TwoThirds 14% Thomas Rauscher Thomas Rauscher 12% Fabian McMütend Fabian McMütend 10%

More like this

Find more →
Mastodon
François Caron 🇨🇦
François Caron 🇨🇦
@milnoc@mstdn.ca
144 Followers
Mastodon
Tycho Brahe
Tycho Brahe
@tychobrahe@muenchen.social
144 Followers
Mastodon
Sea Cow
Sea Cow
@seacow@mastodon.art
144 Followers
Mastodon
Thomas Rauscher
Thomas Rauscher
@rauscherthomas@mastodon.online
144 Followers
Mastodon
TwoThirds
TwoThirds
@rarely_typical@wetdry.world
144 Followers
Mastodon
Fabian McMütend
Fabian McMütend
@fabianseyfried@mstdn.social
144 Followers

✉ Message Malcat

Reaching out to influencers is a Pro feature. Upgrade to message any influencer directly — perfect for brands and agencies booking sponsorships.

  • ✓ Message any influencer from their listing
  • ✓ The influencer gets notified by email
  • ✓ Manage every conversation in one inbox
See Pro $9.95/mo →

Already Pro? Log in.

🎤 Event / appearance with Malcat

Booking an event / appearance is a Pro feature. Upgrade to book Malcat for an in-person or virtual appearance — payment held safely in escrow until the event is done.

  • ✓ Book them for events, livestreams, panels & more
  • ✓ Malcat gets notified by email
  • ✓ Fee held in escrow, released after the appearance
See Pro $9.95/mo →

Already Pro? Log in.