Malware analysis (hybrid) of RAT and Keylogger

Автор: CyberSecAdventures

Загружено: 2023-07-08

Просмотров: 322

Описание: This video demonstrates hybrid malware analysis tools and techniques using a new tool in my arsenal - Noriben. We analyze a two stage RAT (Remote Access Trojan) and keylogger using process logs, windows registry logs, ILSpy decompiler and more. We primarily use Remnux and FlareVM for studying this malware sample.

00:00 Intro
01:25 Setting up Noriben
02:54 Detonating stage1 bad.vbs
04:12 Stage1 Noriben Logs
04:59 Stage2 links from Powershell
08:06 Stage2 dll decrypt
09:14 Stage2 logs
10:27 UDP 2 C2?
11:21 Registry persistence
12:30 Strings
12:49 Get Functions
15:18 ILSpy
16:10 C2 address and port
18:40 dnlib
19:40 End

Не удается загрузить Youtube-плеер. Проверьте блокировку Youtube в вашей сети.
Повторяем попытку...

Malware analysis (hybrid) of RAT and Keylogger

Доступные форматы для скачивания:

Скачать видео

Информация по загрузке:

Скачать аудио

Похожие видео

REMOTE ACCESS TROJAN Malware Analysis (4 stage) - Stormkitty

REMOTE ACCESS TROJAN Malware Analysis (4 stage) - Stormkitty

Kill Chain Analysis: Anatomy of an Evolving Threat (Gootloader)

Kill Chain Analysis: Anatomy of an Evolving Threat (Gootloader)

Коллекция Ultimate Luxury для глубокой релаксации и учебы

Коллекция Ultimate Luxury для глубокой релаксации и учебы

ИГРОВОЙ ПК с OZON за 63 тысячи рублей

ИГРОВОЙ ПК с OZON за 63 тысячи рублей

HackTheBox Sherlock – Meerkat Walkthrough

HackTheBox Sherlock – Meerkat Walkthrough

Deep House Radio 2025 🔴 Chill & Intimate Feelings Mix 24/7 | Live Stream

Deep House Radio 2025 🔴 Chill & Intimate Feelings Mix 24/7 | Live Stream

Silent Malware Analysis - 1 - LokiBot

Silent Malware Analysis - 1 - LokiBot

Sprawa dla Mentzena: Chrupki w polewie

Sprawa dla Mentzena: Chrupki w polewie

Malware Hunting with Mark Russinovich and the Sysinternals Tools

Malware Hunting with Mark Russinovich and the Sysinternals Tools

I Bought 12 Broken Ryzen CPUs for $10 Each - Can I Profit?

I Bought 12 Broken Ryzen CPUs for $10 Each - Can I Profit?

Information Stealer - Malware Analysis (PowerShell to .NET)

Information Stealer - Malware Analysis (PowerShell to .NET)

Cozy Winter Jazz Cafe Atmosphere ❄️ Gentle Jazz Music for Relaxation, Studying & Concentration 🎵

Cozy Winter Jazz Cafe Atmosphere ❄️ Gentle Jazz Music for Relaxation, Studying & Concentration 🎵

Malware Analysis - Static VBS Deobfuscation | Dynamic Analysis | PS Stager | C2 Revelation

Malware Analysis - Static VBS Deobfuscation | Dynamic Analysis | PS Stager | C2 Revelation

⚠️NVIDIA ОСТАНОВИЛА ПРОИЗВОДСТВО ВИДЕОКАРТ?⚠️

⚠️NVIDIA ОСТАНОВИЛА ПРОИЗВОДСТВО ВИДЕОКАРТ?⚠️

Deep & Melodic House 24/7: Relaxing Music • Chill Study Music

Deep & Melodic House 24/7: Relaxing Music • Chill Study Music

Cities Skylines II Malware [FULL REVERSE ENGINEERING ANALYSIS]

Cities Skylines II Malware [FULL REVERSE ENGINEERING ANALYSIS]

Кейлоггер Python обходит Защитника Windows 11 // Конвертируем WIFI py в EXE

Кейлоггер Python обходит Защитника Windows 11 // Конвертируем WIFI py в EXE

SVCHOST MALWARE recruits you into a botnet | BlackNET RAT deep dive malware analysis

SVCHOST MALWARE recruits you into a botnet | BlackNET RAT deep dive malware analysis

ВРЕДОНОСНОЕ ПО OnlyFans: Remcos Infostealer VBScript Stager

ВРЕДОНОСНОЕ ПО OnlyFans: Remcos Infostealer VBScript Stager

Malware Analysis For Beginners - isDebuggerPresent | Cybersecurity Tutorial

Malware Analysis For Beginners - isDebuggerPresent | Cybersecurity Tutorial