0:00 / 0:00

Unpacking Ursnif

Name: Unpacking Ursnif
Uploaded: 2018-03-19T23:51:47Z
Duration: 8 min 46 s
Channel: hasherezade
Description: hasherezade demonstrates how to unpack Ursnif malware and identify it using YARA rules and PE-sieve.

hasherezade

12K subscribers • 1 video on Hallway

YouTube

Recommended by 1 person: 1 in engineering communities.
Presented by hasherezade
Linked in the descriptionfideliscyber/indicators hasherezade/pe-sieve

Intermediate. Assumes working knowledge.

6.7K views8 years ago1 recommendation

Security Reverse engineering

hasherezade demonstrates how to unpack Ursnif malware and identify it using YARA rules and PE-sieve.

UPDATE (Nov 12, 2018): see a follow up to this video: youtube.com/watch?v=rH4XzNwgVoo sample: hybrid-analysis.com/sample/008c4bd6ee834d113cfc693af0ea90396… ; beta.virusbay.io/sample/browse/e6d118192fc848797e15dc0600834… identification (YARA rule): github.com/fideliscyber/indicators/blob/master/yararules/urs… PE-sieve: github.com/hasherezade/pe-sieve/blob/master/README.md

Why it's here

1 person recommends this

What people say. Recommended as a concise demonstration of unpacking Ursnif malware.

u/CuteLittlePolarBearin r/ReverseEngineering • 8 years agoRecommends

Unpacking Ursnif - hasherezade

59View on Reddit