Live Stream VOD: BlackCat Ransomware (Rust) Reverse Engineering Fail (Patreon)

In this Twitch stream we take a look at the latest version of BlackCat ransomware which is written in Rust. We learn that Rust is a pain to analyze and in the end we discover that we can't statically extract the ransomware config because it requires a decryption key to be passed at runtime. This was a struggle stream!

Sample: 6dd995d896a9a593b2c48d09da60bd83866d8577273f36d38788d83ad8173e68 

Research Notes: BlackCat Ransomware