The Conjuring: ransomware edition!!
summary
Shows concrete procedures not fluff: demonstrates a PHP server strain with weak repeatable key derivation that lets an analyst reproduce the per-victim symmetric key, dissects a Windows variant that uses CryptoAPI and AES symmetric keys, walks static disassembly and live debugging to confirm key generation and memory wiping, documents behavior that deletes shadow copies and drops ransom notes, and maps the underground economy (Empire Market affiliate model and 30% cut).
AI-written summary · about
chapters (8)
- 0:00Horror movies to ransomware
- 1:12Finding vulnerable hosts
- 2:24Encryption keys in attacks
- 3:54Symmetric vs asymmetric encryption
- 5:43Malware analyst's day
- 8:00Analyzing new variant
- 11:28Dark web ransomware market
- 13:00Why ransomware demand
related talks
54mVirtual Session: How to Perform Ransomware Analysis
15mTales from the Underground: Hilarious Cybercrime Fails!!
52mRansomware 101: Get Smart Understanding Real Attacks
19mThe Innerworkings of Ransomware
41mRansomware Incident Response - The Real-World Story of a Ransomware Attack
38mCracking a ransomware family
40mRansomware: New Recipe For An Old Dish
59mInnovation lessons we can learn from hackers