216.73.216.6

Steganography Analysis With pngdump.py

· Published 26/04/2025 09:40 · Modified 28/04/2025 08:51

Export JSON

Essential information

Published
26/04/2025 09:40
Modified
28/04/2025 08:51
Tags
2025-04-26 data extraction file analysis malware pe file png pngdump python steganography
Related entities
4 techniques (mitre)

Description

This article discusses the analysis of a file containing hidden malicious content using the .py tool. The image, 31744 pixels wide and 1 pixel high, was found to have a embedded in its pixel data. The author demonstrates how to extract the hidden file using various tools and techniques, including slicing the raw pixel data to isolate the second channel where the was concealed. The extracted , identified as a .NET executable, had 49 detections on VirusTotal, while the original file had none, showcasing the effectiveness of this technique in evading detection.

External references