Live Stream VOD: Hermetic Wizard WMI Spreader Reverse Engineering COM (Patreon)

Published:

2022-03-14 01:30:56

Imported:

2022-12

Content

In this Twitch stream we continue our analysis of the WMI spreader component of the Hermetic Wizard malware used in the recent cyber attacks on Ukraine. In this stream we focus on the COM component that is used to interface with WMI.

Sample: a259e9b0acf375a8bef8dbc27a8a1996ee02a56889cba07ef58c49185ab033ec

Research Notes: Hermetic Wizard Malware

COM Reverse Engineering

For more information on COM reverse engineering check out Mike Bailey's COM Presentation. He also has a nice (free) video on Pluralsight.

Files

Live Stream VOD: Hermetic Wizard WMI Spreader Reverse Engineering COM

This is "Live Stream VOD: Hermetic Wizard WMI Spreader Reverse Engineering COM" by OALABS on Vimeo, the home for high quality videos and the people who...