Live Stream VOD: Pandora Ransomware Unpacking and Control Flow Deobfuscation Part 1 (Patreon)
Published:
2022-03-21 20:16:20
Imported:
2022-12
Content
In this Twitch stream we unpack Pandora Ransomware and begin analyzing the control flow obfuscation used in the payload. The obfuscation is a type of control flow flattening that we begin to remove with a combination of IDA scripts and emulation with dumpulator.
Sample: 5b56c5d86347e164c6e571c86dbf5b1535eae6b979fede6ed66b01e79ea33b7b
Research notes are available with code: Pandora Ransomware