Skip to content
Hallway
0:00 / 0:00

#remcosrat#vb6#x64dbg

Remcos RAT Unpacked From VB6 With x64dbg Debugger

OALabs

52K subscribers • 40 videos on Hallway

YouTube
  • Recommended by 1 person: 1 in engineering communities.

Intermediate. Assumes working knowledge.

12K views7 years ago1 recommendation

SecurityReverse engineeringDebugging

How to unpack a Remcos RAT payload from a Visual Basic 6 packer using a single breakpoint in x64dbg.

We rip apart a VB6 packer with a single breakpoint and x64dbg! Exposing Remcos RAT! Expand for more... ----- OALABS DISCORD discord.gg/6h5Bh5AMDU OALABS PATREON patreon.com/oalabs OALABS TIP JAR ko-fi.com/oalabs OALABS GITHUB github.com/OALabs UNPACME - AUTOMATED MALWARE UNPACKING unpac.me/#/ ----- Old VB6 unpacking tutorial: youtu.be/ylWInOcQy2s Packed sample: 88a02967d6fa5c0eff65f71b9fae969b8125a20115c2d2ee21053832fdc2fc2b malshare.com/sample.php?action=detail&hash=15fdc5c025e9d1645… Unpacked sample: 76f21c59dad19f6ed2793e0b744346b9b46dfdd275ad8875365f83b4a84adf1c malshare.com/sample.php?action=detail&hash=a2cc4bfb996c892cc… Feedback, questions, and suggestions are always welcome : ) Sergei twitter.com/herrcore Sean twitter.com/seanmw As always check out our tools, tutorials, and more content over at openanalysis.net #x64dbg #Remcos #Unpacking

Why it's here

1 person recommends this

What people say. Recommended as a quick tip for unpacking VB6-packed malware using x64dbg.

u/herrcorein r/ReverseEngineering • Recommends

Remcos RAT Unpacked From VB6 With x64dbg Debugger (OALabs quick tip)
29View on Reddit