oalabs

Live Stream VOD: Matanbuchus Triage - Part 2 (Patreon)

Published:

2022-06-28 03:47:36

Imported:

Tags:

Live Stream Matanbuchus Python Twitch config extractor downloader malware triage yara

Content

In this twitch stream we take a second look at the Matanbuchus loader malware. We tighten our Yara rule, and refine our config extractor to work on all the samples we have collected, except one...

Samples

Each sample can be downloaded from MalwareBazaar.

b9b399dbb5d901c16d97b7c30cc182736cd83a7c53313194a1798d61f9c7501e
c41f7b7ec0909d5c21107ddebc2fe84dbc137f701b42943c1a5e69f5d50e05ab
b4e7710488c2b7aaa71688b8bd546410af07a215c2e835e8dfbe24887186bd4f
60f030597c75f9df0f7a494cb5432b600d41775cfe5cf13006c1448fa3a68d8d
58a673023bbc7f2726e3b7ac917a43d9306692dc87b638ee21b98705a3262ccd
4b87f95c4477fc66c58b8e16a74f9c47217913cb4a78dc69f27a364a099acd90
4eb85a5532b98cbc4a6db1697cf46b9e2b7e28e89d6bbfc137b36c0736cd80e2

Notes

Matanbuchus Triage Notes - Refining Our Config Extractor

Files

Live Stream VOD: Matanbuchus Triage - Part 2

This is "Live Stream VOD: Matanbuchus Triage - Part 2" by OALABS on Vimeo, the home for high quality videos and the people who love them.