FLOSS

a powerful tool developed by Mandiant that functions similarly to the Linux strings tool but is optimized for malware analysis, making it ideal for revealing any concealed details

PS C:> floss.exe C:\Tools\Malware\MerryChristmas.exe | Out-file analysis.txt
 * the floss cmd will scans for strings in the binary MerryChrismas.exe. 
   If any hardcoded variables were defined in the malware, Floss should find them
 * FLOSS is installed by default on FLAREVM

Last updated