oalabs

Live Stream VOD: Pandora Ransomware Unpacking and Control Flow Deobfuscation Part 1 (Patreon)

Published:

2022-03-21 20:16:20

Imported:

2022-12

⚑ Flagged

Content

In this Twitch stream we unpack Pandora Ransomware and begin analyzing the control flow obfuscation used in the payload. The obfuscation is a type of control flow flattening that we begin to remove with a combination of IDA scripts and emulation with dumpulator.

Sample: 5b56c5d86347e164c6e571c86dbf5b1535eae6b979fede6ed66b01e79ea33b7b

Research notes are available with code: Pandora Ransomware

Files

Live Stream VOD: Pandora Ransomware Unpacking and Control Flow Deobfuscation Part 1

This is "Live Stream VOD: Pandora Ransomware Unpacking and Control Flow Deobfuscation Part 1" by OALABS on Vimeo, the home for high quality videos and...