Jaff Ransomware - A quick technical analysis

Автор: cybercdh

Загружено: 2017-05-16

Просмотров: 16077

Описание:

A very quick technical view of Jaff Ransomware, delivered as a malicious PDF which drops a .docm file to the users machine and then downloads the ransomware. Here, I show you how to get indicators from a behavioural standpoint and also how to rip apart the code to get all other network indicators from the sample.

Hash covered here is MD5: 2b2c0737949a56528b0834f642ff2635

Link to the bluecoat.py code here: https://github.com/m0atz/bluecoat

Key IOCs from this sample can be found here: https://pastebin.com/5LEivkSp

Follow me on twitter: / cybercdh and feel free to drop me your questions below.

Jaff Ransomware - A quick technical analysis

Доступные форматы для скачивания:

Скачать видео mp4

Информация по загрузке:

Скачать аудио mp3

Похожие видео

WannaCry 2.0 Ransomware

WannaCry 2.0 Ransomware

Автоматизированная распаковка вредоносных программ UnpacMe — как мы ее создали и зачем

Автоматизированная распаковка вредоносных программ UnpacMe — как мы ее создали и зачем

Quick Behavioural Analysis of NotPetya / Petrwrap Ransomware

Quick Behavioural Analysis of NotPetya / Petrwrap Ransomware

Analyzing Ransomware - Completing a FULL Analysis

Analyzing Ransomware - Completing a FULL Analysis

Analysing Obfuscated VBA - Extracting indicators from a Trickbot downloader

Analysing Obfuscated VBA - Extracting indicators from a Trickbot downloader

WannaCry Ransomware - Revisited. Behavioural and Static Analysis Techniques

WannaCry Ransomware - Revisited. Behavioural and Static Analysis Techniques

Extract Shellcode from Fileless Malware like a Pro

Extract Shellcode from Fileless Malware like a Pro

Malware Analysis - Unpacking Alpha Ransomware (Pt. 1)

Malware Analysis - Unpacking Alpha Ransomware (Pt. 1)

Misc Malware Analysis

Misc Malware Analysis

Technical Analysis of a Word Zero Day - CVE-2017-0262 / CVE-2015-2545

Technical Analysis of a Word Zero Day - CVE-2017-0262 / CVE-2015-2545

BadRabbit Ransomware - How to implement a vaccine to prevent infection

BadRabbit Ransomware - How to implement a vaccine to prevent infection

Reversing WannaCry Part 1 - Finding the killswitch and unpacking the malware in #Ghidra

Reversing WannaCry Part 1 - Finding the killswitch and unpacking the malware in #Ghidra

Malware Theory on Blackboard

Malware Theory on Blackboard

Unpacking Gootkit Malware With IDA Pro and X64dbg - Subscriber Request

Unpacking Gootkit Malware With IDA Pro and X64dbg - Subscriber Request

Lazy String Decryption Tips With IDA PRO and Shade Ransomware Unpacked!

Lazy String Decryption Tips With IDA PRO and Shade Ransomware Unpacked!

Analyzing Ransomware - Beginner Static Analysis

Analyzing Ransomware - Beginner Static Analysis

Реверсирование и взлом первой простой программы - bin 0x05

Реверсирование и взлом первой простой программы - bin 0x05

Анализ вредоносных программ — поиск и классификация вредоносных программ с помощью YARA

Анализ вредоносных программ — поиск и классификация вредоносных программ с помощью YARA

Three and a half ways to unpack malware using Ollydbg

Three and a half ways to unpack malware using Ollydbg

WannaCry 2.0 - Three ways to find the Kill Switch

WannaCry 2.0 - Three ways to find the Kill Switch