ViewTube

This video is part of the computer/information/cyber security and ethical hacking lecture series; by Z. Cliffe Schreuders at Leeds ...

We create a C2 extractor for APT malware Kopiluwak. For that we need to unpack two layers of code (JScript, VBA) and remove ...

Malware analysis courses: https://malwareanalysis-for-hedgehogs.learnworlds.com/courses Buy me a coffee: ...

Rabbit holes are the arch enemy of reverse engineers. Some simple habits will help you to avoid them. We analyse a sample that ...

If you would like to support the channel and I, check out Kite! Kite is a coding assistant that helps you code faster, on any IDE offer ...

To obtain more IoCs we analyse the second stage DLL that we decrypted in the first 3CX video. With IDA Free we determine the ...

We analyse the polymorphic virus Virut. In part 1 we write an API resolver for Ghidra, deal with self-modifying code, custom calling ...

We analyze a trojanized setup file. The analysis of this sample is pretty straightforward if you know where to look. But as a ...

We construct a Binary Refinery pipeline to extract the download URL of a multi-layered loader that uses JScript and PowerShell.

Malware analysis courses: https://malwareanalysis-for-hedgehogs.learnworlds.com/ Use this coupon for -30% on the courses ...

GooLoad is delivered via SEO poisoning of malicious websites and delivered as JScript in a ZIP archive, often disguised as ...

Automatic sandbox systems like Hybrid-Analysis are a great way to speed up malware analysis. We find a file flagged as ...

This talk was performed on 22 August 2020 at Camp++ 0x7e4, MP4 downloads and presentation slides are available at ...

Many applications have thousands of files, making even non-obfuscated malware sometimes challenging. This malware is based ...

How I got into malware analysis and what disassemblers I recommend for a newbie 00:16 - How did you get into malware ...

For more content, subscribe on Twitch! https://twitch.tv/johnhammond010 If you would like to support me, please like, comment ...

To try everything Brilliant has to offer—free—for a full 30 days, visit https://brilliant.org/GnarCoding/ . You'll also get 20% off an ...

I found this gem on Virustotal. It crashes and we use Fiddler to make it dance. Malware analysis courses: ...

Learn how to write code based signatures. Become proficient in detecting malware samples that have no plain text strings.

The newest ROKRAT variant injects its shellcode into cmd.exe, which will in turn decrypt a PE image. We debug the injected code ...