YoVDO

BluePill - Neutralizing Anti-Analysis Behavior in Malware Dissection

Offered By: Black Hat via YouTube

Tags

Black Hat Courses Reverse Engineering Courses Malware Analysis Courses Dynamic Analysis Courses

Course Description

Overview

Explore a 20-minute Black Hat conference talk on BluePill, a tool designed to neutralize anti-analysis behavior in malware dissection. Discover how this customizable solution allows analysts to add hooks and leverage insights from dissection, making it particularly effective against targeted malware and new evasion techniques. Learn how BluePill overcomes semantic gaps and successfully defeats tricks employed by recent evasive samples and executable protectors. Gain insights into performing malware analysis on a standard VirtualBox installation alongside traditional analysis tools. The presentation covers dynamic analysis, DBI evasion, manual vs. automatic approaches, results, and future developments in this field.

Syllabus

Introduction
Dynamic Analysis
DBI Evasion
Manual vs Automatic
Results
Next steps


Taught by

Black Hat

Related Courses

Dal Reverse engineering alla stampa 3D
University of Naples Federico II via Federica
Rapid Manufacturing
Indian Institute of Technology Kanpur via Swayam
Generative Design for Industrial Applications
Autodesk via Coursera
Fundamentos de Ciberseguridad: un enfoque práctico
Inter-American Development Bank via edX
Functional And Conceptual Design
Indian Institute of Technology Madras via Swayam