u/askasmaniin r/ReverseEngineering • Recommends
Extract Comrat Malware Dll's from Powershell Dropper
0:00 / 0:00
#comrat#powershell#malware-analysis
Extract Comrat Malware Dll's from Powershell Dropper
AhmedS Kasmani
3.5K subscribers • 6 videos on Hallway
- Recommended by 1 person: 1 in engineering communities.
- Presented by AhmedS Kasmani
Intermediate. Assumes working knowledge.
857 views5 years ago1 recommendation
AhmedS Kasmani demonstrates how to analyze a PowerShell dropper to extract embedded x86 and x64 Comrat malware DLLs.
In this video we dive into the analysis of Comrat Malware Powershell Dropper, which has x86 and x64 Dll's embedded in it. Following are the hashes of the files being analyzed: 134919151466c9292bdcb7c24c32c841a5183d880072b0ad5e8b3a3a830afef8 Reference Article: us-cert.cisa.gov/ncas/analysis-reports/ar20-303a Malware Analysis Course Link: courses.null-char.com/courses/the-art-of-malware-analysis Academy Link: ask-academy.live/ Please provide feedback in the comments. To continue the conversation hit me up on twitter: 🐦 Twitter - twitter.com/nu11charb Music: S: Dark loops 202 piano with melody and bass short loop 60 bpm.wav by josefpres #malware #comrat #powershellWhy it's here
1 person recommends thisWhat people say. Recommended as a practical guide to extracting embedded malware payloads from PowerShell scripts.