Reversing WannaCry Part 1 - Finding the killswitch and unpacking the malware in #Ghidra
1,341,404
Published 2019-03-27
In this first video of the "Reversing WannaCry" series we will look at the infamous killswitch and the installation and unpacking procedure of WannaCry.
Twitter: twitter.com/ghidraninja
Links:
- Interview with MalwareTech: soundcloud.com/arrow-bandwidth/s3-episode-11-wanna…
- MalwareTech's blogpost about the killswitch: www.malwaretech.com/2017/05/how-to-accidentally-st…
Further reading
- Wikipedia: en.wikipedia.org/wiki/WannaCry_ransomware_attack
- LogRhythm Analysis: logrhythm.com/blog/a-technical-analysis-of-wannacr…
- Secureworks Analysis: www.secureworks.com/research/wcry-ransomware-analy…