Категории

Malware Analysis - Process Hollowing

Опубликовано: 13 Апрель 2026
на канале: MalwareAnalysisForHedgehogs
15,854
309

We unpack a Dridex sample that uses process hollowing for memory execution.

Malware analysis courses: https://malwareanalysis-for-hedgehogs...
Buy me a coffee: https://ko-fi.com/struppigel
Follow me on Twitter:   / struppigel  

Sample on MalwareBazaar: https://bazaar.abuse.ch/sample/e30b76...
Sample on Hybrid: https://www.hybrid-analysis.com/sampl...
Dridex article: https://countuponsecurity.com/2015/12...
Process hollowing: http://www.autosectools.com/Process-H...
API Monitor: http://www.rohitab.com/apimonitor

play_arrow
102
2

00:00:00

[FREE] Dope Slow melodic trap Beat 2022

[FREE] Dope Slow melodic trap Beat 2022
play_arrow
314
16

00:00:00

*КАК* ПОФИКСИТЬ ПОПУЛЯРНЫЕ ОШИБКИ В ССО? || вылет игры и бесконечная загрузка

*КАК* ПОФИКСИТЬ ПОПУЛЯРНЫЕ ОШИБКИ В ССО? || вылет игры и бесконечная загрузка

play_arrow
628
16

00:00:00

В Уфе имитировали отлов бездомных собак. Рассказ бывшего сотрудника ООО

В Уфе имитировали отлов бездомных собак. Рассказ бывшего сотрудника ООО "Актив".
play_arrow
3,301
5

00:00:00

Trio Emanuel - Que importan las penas

Trio Emanuel - Que importan las penas
play_arrow
36,047
136

00:00:00

💫 Children's Books Read Aloud | 🐶🐾🐾 Hilarious and Silly Story About Cute Puppies 😋

💫 Children's Books Read Aloud | 🐶🐾🐾 Hilarious and Silly Story About Cute Puppies 😋
play_arrow
2,937
71

00:00:00

#264

#264
play_arrow
11,206
301

S.T.A.L.K.E.R. Anomaly. Где найти документы завода Юпитер.

S.T.A.L.K.E.R. Anomaly. Где найти документы завода Юпитер. "Послесвечение" Охраняемые секреты
play_arrow
1,808
9

Hands On: Romain Jerome Steampunk Metal Auto REF. RJ.T.AU.SP.001.01

Hands On: Romain Jerome Steampunk Metal Auto REF. RJ.T.AU.SP.001.01
Похожие видео
play_arrow
Malware Analysis - ConfuserEx 2 Deobfuscation with Python and dnlib, BBTok Loader

Malware Analysis - ConfuserEx 2 Deobfuscation with Python and dnlib, BBTok Loader
play_arrow
Writing an unpacker for a 3-stage stub with emulation via speakeasy

Writing an unpacker for a 3-stage stub with emulation via speakeasy
play_arrow
IDA vs Binary Ninja vs Ghidra after 1.5 years using them

IDA vs Binary Ninja vs Ghidra after 1.5 years using them
play_arrow
The real reason antivirus software detects cracks

The real reason antivirus software detects cracks
play_arrow
Malware Analysis - D3f@ck loader from Inno Setup to JPHP

Malware Analysis - D3f@ck loader from Inno Setup to JPHP
play_arrow
Malware Simulators cannot test Antivirus Software

Malware Simulators cannot test Antivirus Software
play_arrow
Triaging Files on VirusTotal

Triaging Files on VirusTotal
play_arrow
Malware Analysis - JS to PowerShell to XWorm with Binary Refinery

Malware Analysis - JS to PowerShell to XWorm with Binary Refinery
play_arrow
Malware Theory - Five Unpacking Methods and a Generic Unpacking Approach

Malware Theory - Five Unpacking Methods and a Generic Unpacking Approach
play_arrow
Binary Ninja - Fix unresolved stack pointer

Binary Ninja - Fix unresolved stack pointer
play_arrow
Malware Analysis - Unpacking AutoIt stub with large obfuscated script

Malware Analysis - Unpacking AutoIt stub with large obfuscated script
play_arrow
Malware Analysis - C2 extractor for Turla's Kopiluwak using Binary Refinery

Malware Analysis - C2 extractor for Turla's Kopiluwak using Binary Refinery