YoVDO

BluePill - Neutralizing Anti-Analysis Behavior in Malware Dissection

Offered By: Black Hat via YouTube

Tags

Black Hat Courses Reverse Engineering Courses Malware Analysis Courses Dynamic Analysis Courses

Course Description

Overview

Explore a 20-minute Black Hat conference talk on BluePill, a tool designed to neutralize anti-analysis behavior in malware dissection. Discover how this customizable solution allows analysts to add hooks and leverage insights from dissection, making it particularly effective against targeted malware and new evasion techniques. Learn how BluePill overcomes semantic gaps and successfully defeats tricks employed by recent evasive samples and executable protectors. Gain insights into performing malware analysis on a standard VirtualBox installation alongside traditional analysis tools. The presentation covers dynamic analysis, DBI evasion, manual vs. automatic approaches, results, and future developments in this field.

Syllabus

Introduction
Dynamic Analysis
DBI Evasion
Manual vs Automatic
Results
Next steps


Taught by

Black Hat

Related Courses

Malicious Software and its Underground Economy: Two Sides to Every Story
University of London International Programmes via Coursera
Palo Alto Networks Cybersecurity Essentials II
Palo Alto Networks via Coursera
Introducción al Análisis del Malware en Windows
National Technological University – Buenos Aires Regional Faculty via Miríadax
Android Malware Analysis - From Zero to Hero
Udemy
How to Create and Embed Malware (2-in-1 Course)
Udemy