Скачать с ютуб APT41 - StealthVector IDA Pro deep dive в хорошем качестве

APT41 - StealthVector IDA Pro deep dive

In this video, I go over the StealthVector C/C++ loader. I will walk you through the configuration decryption and extraction process, as well as how the configuration guides the execution flow. Additionally, I cover some of the interesting techniques they're using to maintain stealth and evasiveness. Content: -configuration decryption and extraction - ETW patching (bypass windows ETW) -CFG (Control Flow Guard) bypass and patching -Module stomping(DLL hollowing) References: Github: https://github.com/Blu3Eye/Malware-analysi... Zscalar Threatlabz blog post: https://www.zscaler.com/blogs/security-res...