Канал: MalwareAnalysisForHedgehogs

The real reason antivirus software detects cracks

The real reason antivirus software detects cracks

How to deal with bloated malware #malwareanalysis #debloat #shorts

How to deal with bloated malware #malwareanalysis #debloat #shorts

Malware Analysis - D3f@ck loader from Inno Setup to JPHP

Malware Analysis - D3f@ck loader from Inno Setup to JPHP

Reversing PyInstaller in 6 Steps #python #reverseengineering #pyinstaller #shorts

Reversing PyInstaller in 6 Steps #python #reverseengineering #pyinstaller #shorts

Can PDFs be Malware? #malware #pdf #exploits #shorts

Can PDFs be Malware? #malware #pdf #exploits #shorts

Malware Simulators cannot test Antivirus Software

Malware Simulators cannot test Antivirus Software

Triaging Files on VirusTotal

Triaging Files on VirusTotal

Malware Analysis - JS to PowerShell to XWorm with Binary Refinery

Malware Analysis - JS to PowerShell to XWorm with Binary Refinery

Malware Theory - Five Unpacking Methods and a Generic Unpacking Approach

Malware Theory - Five Unpacking Methods and a Generic Unpacking Approach

Binary Ninja - Fix unresolved stack pointer

Binary Ninja - Fix unresolved stack pointer

Malware Analysis - Unpacking AutoIt stub with large obfuscated script

Malware Analysis - Unpacking AutoIt stub with large obfuscated script

Malware Analysis - C2 extractor for Turla's Kopiluwak using Binary Refinery

Malware Analysis - C2 extractor for Turla's Kopiluwak using Binary Refinery

Malware Analysis - 3 ways to deobfuscate JScript and JavaScript malware

Malware Analysis - 3 ways to deobfuscate JScript and JavaScript malware

Malware Analysis - .NETReactor deobfuscation and configuration extraction of AgentTesla

Malware Analysis - .NETReactor deobfuscation and configuration extraction of AgentTesla

Malware Analysis - ZPAQ to .NET downloader to Injector DLL unpacking

Malware Analysis - ZPAQ to .NET downloader to Injector DLL unpacking

Hiding .NET IL code from DnSpy with R2R Stomping

Hiding .NET IL code from DnSpy with R2R Stomping

Reversing - .NET main is not the first thing executed

Reversing - .NET main is not the first thing executed

Malware Analysis Course for Hedgehogs is out

Malware Analysis Course for Hedgehogs is out

Malware Analysis - Agniane Stealer, Native Stub to .NET Unpacking

Malware Analysis - Agniane Stealer, Native Stub to .NET Unpacking

Why Windows system files have wrong compile timestamps

Why Windows system files have wrong compile timestamps

Malware Analysis - Unpacking Ageostealer built with Electron Framework

Malware Analysis - Unpacking Ageostealer built with Electron Framework

Malware Theory - Packer identifiers don"t tell you if a file is packed

Malware Theory - Packer identifiers don"t tell you if a file is packed

Malware Analysis - 3CX SmoothOperator C2 extraction with x64dbg and CyberChef

Malware Analysis - 3CX SmoothOperator C2 extraction with x64dbg and CyberChef

Malware Analysis - 3CX SmoothOperator Authenticode Abuse

Malware Analysis - 3CX SmoothOperator Authenticode Abuse

Malware Analysis - 3CX SmoothOperator ffmpeg.dll with Binary Ninja

Malware Analysis - 3CX SmoothOperator ffmpeg.dll with Binary Ninja

Malware Theory - How Packers Work, Polymorphism and Misconceptions

Malware Theory - How Packers Work, Polymorphism and Misconceptions

Does Writing Malware Help With Malware Analysis?

Does Writing Malware Help With Malware Analysis?

Malware Analysis - Decrypt NighHawk Strings with Ghidra Scripting

Malware Analysis - Decrypt NighHawk Strings with Ghidra Scripting

Malware Analysis - Ghidra vs Cutter vs Binary Ninja vs IDA Free

Malware Analysis - Ghidra vs Cutter vs Binary Ninja vs IDA Free

Malware Analysis - Kernel Mode Driver Emulation with Speakeasy

Malware Analysis - Kernel Mode Driver Emulation with Speakeasy

Malware Analysis - Hybrid Analysis for Malware Assessment

Malware Analysis - Hybrid Analysis for Malware Assessment

Book Review - Malware Analysis and Detection Engineering

Book Review - Malware Analysis and Detection Engineering

Malware Theory - Overview to Malware Vaccines

Malware Theory - Overview to Malware Vaccines

Reversing - Writing an EXE4J Configuration Extractor

Reversing - Writing an EXE4J Configuration Extractor

Malware Theory - Trojan Horse is not a Malware Type

Malware Theory - Trojan Horse is not a Malware Type

Malware Theory - Process Injection

Malware Theory - Process Injection

Malware Theory - Imphash algorithm explained

Malware Theory - Imphash algorithm explained

Malware Theory - Understanding .NET Streams and Metadata

Malware Theory - Understanding .NET Streams and Metadata

Malware Analysis - Fileless GooLoad static analysis and unpacking

Malware Analysis - Fileless GooLoad static analysis and unpacking

Malware Analysis - Simple Habits to Stop Going Down the Rabbit Hole

Malware Analysis - Simple Habits to Stop Going Down the Rabbit Hole

Most controversial files on VirusTotal

Most controversial files on VirusTotal

Malware Analysis - Dumping COVID-19.jar with Java Instrumentation

Malware Analysis - Dumping COVID-19.jar with Java Instrumentation

Malware Theory - Network Worm Basics

Malware Theory - Network Worm Basics

Malware Theory - PE Malformations and Anomalies

Malware Theory - PE Malformations and Anomalies

Malware Theory - Why There Is No Perfect Antivirus Scanner

Malware Theory - Why There Is No Perfect Antivirus Scanner

Malware Analysis - DOSfuscation Deobfuscation

Malware Analysis - DOSfuscation Deobfuscation

Malware Theory - Oligomorphic, Polymorphic and Metamorphic Viruses

Malware Theory - Oligomorphic, Polymorphic and Metamorphic Viruses

Malware Theory - Memory Mapping of PE Files

Malware Theory - Memory Mapping of PE Files

Malware Theory - Portable Executable Resources

Malware Theory - Portable Executable Resources

Malware Theory - Basic Structure of PE Files

Malware Theory - Basic Structure of PE Files

Writing Malware Analysis Papers and Blog Articles

Writing Malware Analysis Papers and Blog Articles

Malware Analysis - When De4dot fails, Removing Anti Tamper from NullShield

Malware Analysis - When De4dot fails, Removing Anti Tamper from NullShield

Malware Analysis - Deobfuscating .NET Assemblies with De4Dot

Malware Analysis - Deobfuscating .NET Assemblies with De4Dot

Malware Analysis - Unpack and Decompile PyInstaller Malware

Malware Analysis - Unpack and Decompile PyInstaller Malware

Malware Analysis - ROKRAT Unpacking from Injected Shellcode

Malware Analysis - ROKRAT Unpacking from Injected Shellcode

Ask An Analyst - How did I get Into Malware Analysis?

Ask An Analyst - How did I get Into Malware Analysis?

Malware Analysis - Finding Fresh Samples Without Paid Account

Malware Analysis - Finding Fresh Samples Without Paid Account

Malware Analysis - What is a Scantime Crypter?

Malware Analysis - What is a Scantime Crypter?

Malware Analysis - Deobfuscating Loyeetro Trojan-Spy

Malware Analysis - Deobfuscating Loyeetro Trojan-Spy

Malware Analysis - Unpacking RunPE Loyeetro Trojan

Malware Analysis - Unpacking RunPE Loyeetro Trojan

Malware Analysis - Creating a Decrypter for Alpha Ransomware Pt. 3

Malware Analysis - Creating a Decrypter for Alpha Ransomware Pt. 3

Anti-Reversing - Anti-Dump Trick "Header Erase"

Anti-Reversing - Anti-Dump Trick "Header Erase"

Malware Analysis - Getting Started with High-Level Petna / Petya

Malware Analysis - Getting Started with High-Level Petna / Petya

Malware Analysis - Encryption Algorithm of Alpha Ransomware (Pt. 2)

Malware Analysis - Encryption Algorithm of Alpha Ransomware (Pt. 2)

Malware Analysis - Unpacking Alpha Ransomware (Pt. 1)

Malware Analysis - Unpacking Alpha Ransomware (Pt. 1)

Malware Analysis - Code Injection via CreateRemoteThread & WriteProcessMemory

Malware Analysis - Code Injection via CreateRemoteThread & WriteProcessMemory

Malware Analysis - Hook Injection PoC by Robert Kuster

Malware Analysis - Hook Injection PoC by Robert Kuster

Malware Analysis - Process Hollowing

Malware Analysis - Process Hollowing

Ask An Analyst - Becoming a Malware Analyst With Sarah and Fabian

Ask An Analyst - Becoming a Malware Analyst With Sarah and Fabian

Malware Analysis - Exploring Spora's Encryption Procedure

Malware Analysis - Exploring Spora's Encryption Procedure

Ask An Analyst - Frustrating and Exciting Sides of our Job

Ask An Analyst - Frustrating and Exciting Sides of our Job

Ask an Analyst - Fabian and Sarah Explain their Polar Bear Obsession

Ask an Analyst - Fabian and Sarah Explain their Polar Bear Obsession

MalwareAnalysisForHedgehogs Live Stream

MalwareAnalysisForHedgehogs Live Stream

Malware Analysis - Fun With Fiddler

Malware Analysis - Fun With Fiddler

Malware Analysis - Malware Hunting and Classification with YARA

Malware Analysis - Malware Hunting and Classification with YARA

Anti-Reversing - A Way to Learn Anti-Reversing Tricks

Anti-Reversing - A Way to Learn Anti-Reversing Tricks

Anti-Reversing - Anti-Debug Trick SetUnhandledExceptionFilter

Anti-Reversing - Anti-Debug Trick SetUnhandledExceptionFilter

Malware Analysis - Batch2Exe Wrapped Ransomware

Malware Analysis - Batch2Exe Wrapped Ransomware

Malware Analysis - Macro Malware Analysis

Malware Analysis - Macro Malware Analysis

Malware Analysis - Unpacking njRAT Protected by Confuser v.1.9 and others

Malware Analysis - Unpacking njRAT Protected by Confuser v.1.9 and others

Malware Analysis - HolyCrypt and PowerWare Ransomware

Malware Analysis - HolyCrypt and PowerWare Ransomware

Malware Analysis - Unpacking Flash Malware using HxD

Malware Analysis - Unpacking Flash Malware using HxD

Malware Analysis - Unpacking NetWiredRC With DnSpy

Malware Analysis - Unpacking NetWiredRC With DnSpy

Malware Analysis - Java Malware Deobfuscation

Malware Analysis - Java Malware Deobfuscation

Malware Analysis - Unpacking a Multilayered VBScript Worm

Malware Analysis - Unpacking a Multilayered VBScript Worm

Lab Setup - Convenience Tricks for your Lab

Lab Setup - Convenience Tricks for your Lab

Malware Analysis - Unpacking Locky with VirtualAlloc

Malware Analysis - Unpacking Locky with VirtualAlloc

Malware Analysis - .NET Unpacking

Malware Analysis - .NET Unpacking

Malware Analysis - Unpacking with HxD and Python

Malware Analysis - Unpacking with HxD and Python