Malware Analysis #1 - Hacked Channel Distributes Redline Stealer! скачать в хорошем качестве

Malware Analysis #1 - Hacked Channel Distributes Redline Stealer!

Apologies for the low/inconsistent microphone volume, I'll make sure this is fixed the next time I upload. In this video, I find a hacked YouTube channel distributing Redline Stealer. I unpack the first .NET stage, which drops a second stage DLL. I proceed to analyze the dropped second stage which is an OLLVM-obfuscated process hollowing DLL, and in the process extract a RedLine Stealer payload. It's interesting to note that the threat actor provided two separate binaries, and lets the user choose which one. Both binaries are not the same, one of them has a different payload that is heavily obfuscated (but from a brief glance still appears to be RedLine). The de4dot fork I mentioned: https://github.com/ViRb3/de4dot-cex GendelfWhiteV1.exe: 2BBB5AE3B4D66C6E9889B8BF129FCA9AE42E0772B542AD30C5113836EFAAF9F9 GendelfWhiteV2.exe: AAC002DD948974B8D4E49B21C3B83D22D157B3F2335ACDFCD126169685C47B59 Thumbnail by www.masonbrown.design