0:00 / 0:00
#processhollowing#malwareanalysis#dridex
Malware Analysis - Process Hollowing
MalwareAnalysisForHedgehogs
30K subscribers • 11 videos on Hallway
- Recommended by 1 person: 1 in engineering communities.
Intermediate. Assumes working knowledge.
16K views9 years ago1 recommendation
SecurityReverse engineeringExploits and vulnerabilitiesWeb and application security
An analysis of a Dridex malware sample that uses process hollowing for memory execution, demonstrating how to unpack and monitor it.
We unpack a Dridex sample that uses process hollowing for memory execution. Malware analysis courses: malwareanalysis-for-hedgehogs.learnworlds.com/courses Buy me a coffee: ko-fi.com/struppigel Follow me on Twitter: twitter.com/struppigel Sample on MalwareBazaar: bazaar.abuse.ch/sample/e30b76f9454a5fd3d11b5792ff93e56c52bf5… Sample on Hybrid: hybrid-analysis.com/sample/e30b76f9454a5fd3d11b5792ff93e56c5… Dridex article: countuponsecurity.com/2015/12/07/malware-analysis-dridex-pro… Process hollowing: autosectools.com/Process-Hollowing.pdf API Monitor: rohitab.com/apimonitorWhy it's here
1 person recommends thisWhat people say. Recommended as a practical walkthrough of analyzing process hollowing techniques in malware.