oalabs
patreon
Live Stream VOD: BlackCat Ransomware (Rust) Reverse Engineering Fail
🕑 Added 2022-03-19 02:44:41 +0000 UTCIn this Twitch stream we take a look at the latest version of BlackCat ransomware which is written in Rust. We learn that Rust is a pain to analyze and in the end we discover that we can't statically extract the ransomware config because it requires a decryption key to be passed at runtime. This was a struggle stream!
Sample: 6dd995d896a9a593b2c48d09da60bd83866d8577273f36d38788d83ad8173e68
Research Notes: BlackCat Ransomware
