Hellow guys, Welcome to my website, and you are watching Malware Analysis - D3f@ck loader from Inno Setup to JPHP. and this vIdeo is uploaded by MalwareAnalysisForHedgehogs at 2024-05-19T23:30:04-07:00. We are pramote this video only for entertainment and educational perpose only. So, I hop you like our website.
| Name | Malware Analysis - D3f@ck loader from Inno Setup to JPHP |
| Video Uploader | Video From MalwareAnalysisForHedgehogs |
| Upload Date | This Video Uploaded At 20-05-2024 02:30:04 |
| Video Discription | A new Malware as a Service named D3fack Loader ships as Inno Setup in its first stage and continues to download a JPHP executable. JPHP runs on the Java VM but it cannot be compiled by Java decompilers. How is it possible to reverse engineer this unusual language implementation? Udemy course: https://www.udemy.com/course/windows-malware-analysis-for-hedgehogs-beginner-training/?couponCode=FDC34C32653EE09B9E57 Esentire article: https://www.esentire.com/blog/d3f-ck-loader-the-new-maas-loader Inno Setup malware: https://bazaar.abuse.ch/sample/7409250e8be3bdcdaa756faff2150b13677ae066e42cefa52844c87451f6f60d ZIP archive: https://bazaar.abuse.ch/sample/e7cf02ad880e8ebb37134c5370189bd2620ce1bf60794aa8776db6ccc4d4f0f7/ Recaf: https://www.coley.software/Recaf/ Innounp: https://innounp.sourceforge.net/ Inno Setup Decompiler: https://download.cnet.com/inno-setup-decompiler/3000-2383_4-77452731.html?ex=BER-1275.2 Buy me a coffee: https://ko-fi.com/struppigel Follow me on Twitter: https://twitter.com/struppigel #malware #malwareanalysis #reverseengineering #jphp #innosetup 00:00 Intro 00:50 Triage 02:08 Inno Setup unpacking and decompilation 07:58 Decoding obfuscated strings 12:39 Inno Setup script analysis 19:47 Triage of downloaded archive 22:54 Analysing JPHP 30:25 Project idea? |
| Category | Science & Technology |
| Tags | malware analysis | reverse engineering | malware |
