Skip to content
0:00 / 0:00

#dnspy#de4dot#malwareanalysis

Malware Analysis - Unpacking Alpha Ransomware (Pt. 1)

MalwareAnalysisForHedgehogs

30K subscribers • 11 videos on Hallway

YouTube

Intermediate. Assumes working knowledge.

10K views9 years ago1 recommendation

SecurityReverse engineeringExploits and vulnerabilitiesWeb and application security

A step-by-step tutorial on unpacking a .NET-based ransomware using tools like dnSpy and de4dot.

In this first part we unpack a .NET based ransomware that uses a DLL to inject its payload. The ransomware was crypted by Codelux according to MalwareHunterTeam. Malware analysis courses: malwareanalysis-for-hedgehogs.learnworlds.com/courses Buy me a coffee: ko-fi.com/struppigel Follow me on Twitter: twitter.com/struppigel Sample: hybrid-analysis.com/sample/fc21ac155de398cba7c44085751c5719b… DnSpy: github.com/0xd4d/dnSpy/releases De4Dot: github.com/0xd4d/de4dot Process Explorer: technet.microsoft.com/en-us/sysinternals/processexplorer.asp…

Why it's here

1 person recommends this

What people say. Recommended as a helpful guide to reverse engineering and unpacking .NET malware.

u/Struppigelin r/ReverseEngineering • Recommends

Video: Alpha Ransomware Analysis