u/nezza-_-in r/ReverseEngineering • Recommends
Reversing WannaCry in Ghidra Part 1 - Finding the killswitch and unpacking the malware
0:00 / 0:00
#ghidra#wannacry#malwareanalysis
Reversing WannaCry Part 1 - Finding the killswitch and unpacking the malware in #Ghidra
stacksmashing
229K subscribers • 13 videos on Hallway
- Recommended by 2 people: 2 in engineering communities.
Intermediate. Assumes working knowledge.
1.4M views7 years ago2 recommendations
SecurityReverse engineeringExploits and vulnerabilities
Analyze the infamous WannaCry ransomware to find its killswitch and unpack the malware using Ghidra.
Part 2 is out! youtube.com/watch?v=Q90uZS3taG0 In this first video of the "Reversing WannaCry" series we will look at the infamous killswitch and the installation and unpacking procedure of WannaCry. Twitter: twitter.com/ghidraninja Links: - Interview with MalwareTech: soundcloud.com/arrow-bandwidth/s3-episode-11-wannacry-interv… - MalwareTech's blogpost about the killswitch: malwaretech.com/2017/05/how-to-accidentally-stop-a-global-cy… Further reading - Wikipedia: en.wikipedia.org/wiki/WannaCry_ransomware_attack - LogRhythm Analysis: logrhythm.com/blog/a-technical-analysis-of-wannacry-ransomwa… - Secureworks Analysis: secureworks.com/research/wcry-ransomware-analysisWhy it's here
2 people recommend thisWhat people say. Recommended as an excellent step-by-step analysis of the WannaCry malware using Ghidra.
u/mario-m-in r/ReverseEngineering • Recommends
Reversing WannaCry Part 1 - Finding the killswitch and unpacking the malware in #Ghidra