Unpacking Terdot A Zloader

Media Summary: TURN ON SUBTITLES FOR MORE INFO* This malware was identified as TURN ON SUBTITLES FOR MORE INFO* PE_unmapper is my new tool. You can find it here: ... TURN ON SUBTITLES FOR MORE INFO* Please see the part 1 first:

Unpacking Terdot A Zloader - Detailed Analysis & Overview

TURN ON SUBTITLES FOR MORE INFO* This malware was identified as TURN ON SUBTITLES FOR MORE INFO* PE_unmapper is my new tool. You can find it here: ... TURN ON SUBTITLES FOR MORE INFO* Please see the part 1 first: Open Analysis Live! We demonstrate a quick trick to

Photo Gallery

Unpacking Terdot.A/Zloader.

Unpacking Ursnif variant

Unpacking Ursnif variant

Unpacking PrincessLocker in 5 minutes - using ImmunityDbg and pe_unmapper

Zloader Malware Analysis - 1. Unpacking First stage.

Unpacking a self-overwriting PE (Zbot)

PE_unmapper demo: unpacking TrickBot and FlokiBot

Unpacking YoungLotus malware

Unpacking TrickBot and decoding config

Unpacking Dreambot (aka ISFB, Ursnif)

4 Reversing Second Stage Loaders Zloader

Unpacking a MalPack with multiple payloads - part 2

View Detailed Profile

Unpacking Terdot.A/Zloader.

Unpacking Terdot.A/Zloader.

TURN ON SUBTITLES FOR MORE INFO* This malware was identified as

Unpacking Ursnif variant

Unpacking Ursnif variant

Sample: https://virustotal.com/en/file/4eb1f9e1a8c3da2ceac3cbda8f8432c7c5f43d185d655a0a850a34ce9df76cfa/analysis/ ...

Unpacking Ursnif variant

Unpacking Ursnif variant

Sample: https://virustotal.com/en/file/4eb1f9e1a8c3da2ceac3cbda8f8432c7c5f43d185d655a0a850a34ce9df76cfa/analysis/ ...

Unpacking PrincessLocker in 5 minutes - using ImmunityDbg and pe_unmapper

Unpacking PrincessLocker in 5 minutes - using ImmunityDbg and pe_unmapper

Tools: ImmunityDbg and pe_unmapper (https://github.com/hasherezade/malware_analysis/tree/master/pe_unmapper).

Zloader Malware Analysis - 1. Unpacking First stage.

Zloader Malware Analysis - 1. Unpacking First stage.

In this video we analyze the

Unpacking a self-overwriting PE (Zbot)

Unpacking a self-overwriting PE (Zbot)

Sample: ...

PE_unmapper demo: unpacking TrickBot and FlokiBot

PE_unmapper demo: unpacking TrickBot and FlokiBot

TURN ON SUBTITLES FOR MORE INFO* PE_unmapper is my new tool. You can find it here: ...

Unpacking YoungLotus malware

Unpacking YoungLotus malware

Sample: https://www.hybrid-analysis.com/sample/9f8527b268d5df1d24d3579d96f9f33f00f45878a32bbe0849da0235fd47048e?

Unpacking TrickBot and decoding config

Unpacking TrickBot and decoding config

Sample: https://virustotal.com/en/file/2ebeef906142f328168e7e62e8be7fbaee48e3521853d76ea778005ada6e938a/analysis/ ...

Unpacking Dreambot (aka ISFB, Ursnif)

Unpacking Dreambot (aka ISFB, Ursnif)

Unpacking

4 Reversing Second Stage Loaders Zloader

4 Reversing Second Stage Loaders Zloader

4 Reversing Second Stage Loaders Zloader

Unpacking a MalPack with multiple payloads - part 2

Unpacking a MalPack with multiple payloads - part 2

TURN ON SUBTITLES FOR MORE INFO* Please see the part 1 first: https://www.youtube.com/watch?v=ykql9o4DMJE

Fast Malware Unpacking With CryptDecrypt and RtlDecompressBuffer

Fast Malware Unpacking With CryptDecrypt and RtlDecompressBuffer

Open Analysis Live! We demonstrate a quick trick to