Video Tutorial

Deobfuscate Emotet PowerShell – Part 0x2

May 26, 2018

Deobfuscation, Downloader, Emotet, PowerShell, Video Tutorial

We will deobfuscate PowerShell and extract CC from the PowerShell cmd extracted from the Emotet downloader macro discussed in the previous article. If you want to learn how to deobfuscate and analyse the malicious macro code, please check this article and video. Video Tutorial Let see how to use this above…

Deobfuscate malicious macro – Part 0x1

May 20, 2018

Deobfuscation, Doc, Downloader, Emotet, Macro analysis, Video Tutorial

We will concentrate on malicious macro embedded in Emotet downloader office documents and see how to deobfuscate the macro code. In the next post we will deobfuscate the PowerShell executed by Word Doc. Why do we need to do this? Malicious code embedded in macro instead of exploit Clean up…

Important Wireshark filters

May 5, 2018

Filter, Video Tutorial, Wireshark

We will look into some of the Wireshark display filters which can be used in malware analysis. We can use this Wireshark display filter after we capture pcap during dynamic malware analysis. Why do we need to do this? Help us to remove the noise from pcap Easy to extract…