FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.

FLARE floss applied to all unpacked+dumped samples in Malpedia, pre-processed for further use.

Bypass detection from Flare-floss

Resources for testing FLOSS by the FLARE team.

No description available

A vvvv wrapper for FLOSS, Mandiant's FLARE Obfuscated String Solver. Basically it's like strings.exe but better.

compile time string obfuscation. bypass flare-floss

No description available

https://github.com/fireeye/flare-floss dockerized

No description available

Flare-Floss helper for fast strings searching

No description available

Latest version of flare-floss in a docker container

Expanded malware analysis of Malware.Unknown.exe.malz in FLARE VM — combining static (PEview, FLOSS, hashes) and dynamic (Procmon, network capture) methods. Identified as a two-stage trojan/downloader fetching a secondary payload. Includes technical details, forensic artifacts, risk assessment, containment, and remediation steps.

This project showcases a malware analysis case study performed in a controlled lab using FLARE VM on a Windows virtual machine. The exercise was based on a TryHackMe challenge and involved both static and behavioral analysis using tools such as PE Studio, FLOSS, Sysmon, Autoruns, and more.