IRC Botnet Reverse Engineering Part 1 - Preparing Binary for Analysis in IDA PRO
Автор: OALabs
Загружено: 2020-05-30
Просмотров: 17633
The first part of our in-depth malware reverse engineering series analyzing an IRC worm from 2010. In this part we use IDA Pro and Python to decrypt the strings and resolved the dynamic imports to prepare the binary for analysis....
-----
OALABS DISCORD
/ discord
OALABS PATREON
/ oalabs
OALABS TIP JAR
https://ko-fi.com/oalabs
OALABS GITHUB
https://github.com/OALabs
UNPACME - AUTOMATED MALWARE UNPACKING
https://www.unpac.me/#/
-----
Automated Malware Unpacking
https://www.unpac.me/
Unpacked binary (malshare)
https://malshare.com/sample.php?actio...
SHA256 hash:
4eb33ce768def8f7db79ef935aabf1c712f78974237e96889e1be3ced0d7e619
IDA Pro string decryption script
https://gist.github.com/herrcore/72b0...
Hex Copy IDA plugin for fast data copy-paste
https://gist.github.com/herrcore/0176...
In-depth string decryption and import resolving video series with REvil ransomware:
• REvil Ransomware Unpacked - Cheeky Hack To...
MalwareAnalysisForHedgehogs - Network Worm Basics
• Malware Theory - Network Worm Basics
Feedback, questions, and suggestions are always welcome : )
Sergei / herrcore
Sean / seanmw
As always check out our tools, tutorials, and more content over at https://www.openanalysis.net
#IDAPro #Botnet #MalwareAnalysis
Доступные форматы для скачивания:
Скачать видео mp4
-
Информация по загрузке: