Live Stream VOD: Matanbuchus Triage - Part 1
Added 2022-06-24 03:03:30 +0000 UTCIn this twitch stream we begin our triage of the Matanbuchus loader malware. First, we resolve the API hashes, and decrypt the strings, then we attempt to build a Yara rule and and automated config extractor.
Stream Bookmarks
- 00:31:00 We conclude our research and begin reverse engineering.
- 01:09:00 We start using Dumpulator and run into some issues.
- 03:55:00 Duncan shows up and give us some code for Dumpulator and we finish our string extraction.
Sample
f8cc2cf36e193774f13c9c5f23ab777496dcd7ca588f4f73b45a7a5ffa96145e
Notes
Comments
learned a lot
Stanislaus Hoppe
2022-07-10 00:05:40 +0000 UTCIt will be posted later today : )
OALABS
2022-06-27 16:47:48 +0000 UTCGreat stream! I missed the second part though :(
RussianPanda
2022-06-27 12:53:12 +0000 UTCWatched the whole thing. Funny episode ;)
j0s3
2022-06-24 13:20:38 +0000 UTC
