Reversing a Polymorphic File-Infecting Ransomware - DefCamp - 2016

Explore the intricacies of reversing a polymorphic file-infecting ransomware in this DefCamp 2016 conference talk. Delve into debugging tools, common malware types, and on-demand polymorphic techniques. Learn about metamorphic malware, decryption processes, and their impact. Examine decrypted and polymorphic code, understand how the ransomware functions, and discover decryptor methods. Gain insights into the Billofus malware and participate in a real-time Q&A session to enhance your understanding of advanced malware analysis techniques.

Intro
About Me
Agenda
Debugging Tools
Common Malware
OnDemand Polymorphic
Metamorphic
Decryption
Impact
Decrypting
Decrypted code
Polymorphic code
How it works
Decryptor
Billofus
Realtime
Questions