Home
Artists
Search
Recent
Random
Posts
DMs
Tags
Random
Importer
Import
FAQ
Account
Register
Favorites
Login
Live Stream VOD: Reversing Dridex Loader Imports, String Decryption, and Code Injection (Patreon)
Published:
2021-12-01 14:01:07
Edited:
2022-01-13 21:41:46
Imported:
Content
Twitch live stream VOD. We take a look at the (doppeldridex) Dridex loader binary and prepare it for full static analysis. We resolve the imports, decrypt the strings, and decrypt the embedded shell code.
Sample available on Malshare:
c7990f1e72fdfa84552f02f9d11cabb74251b0508291af5366fefcee646f9c91
Lab Notes - includes code samples:
