Analyzing Ransomware - Beginner Static Analysis

[@stephen7715]

This man is a legend. We need more people like you. Thanks for the help man.

[@mailtoleki666]

Yep he is awesome. he helped me too bro

[@sahilgupta7499]

I came across these videos just at the right time when I was not able to find the much content over it. Looking forward to more uploads on this from you. Thanks for doing this.

[@OALABS]

Hey this is great! Subscribed! Hope you make more of these : )

[@OALABS]

Also blob analyzer looks rad! Looking forward to you releasing it!!

[@Atykifobia]

Fantastic, exactly what I was looking for as a curious beginner. Thank you!

[@mailtoleki666]

You are awesome man. Thank you for cracking the keys.

[@kienmanowar]

Thanks for your video! Can you share the link about CryptoTester tool? I try GG but can not find...

[@MassimilianoDalCero]

twitter.com/demonslay335/status/1225819538652061696

[@gustavoaguilar3394]

Hi Michael, how are your? I fine, I wanted to know if you have a sample malware static analysis report in PDF. docx. Thanks

[@4SecuriTI]

Thanks for sharing. Excellent work!

[@abdulkareemkudaisi25]

Hi. Pls I was attacked by a virus with the .itrz file extension. Can u help me out?

[@berrahayat1645]

I need Axcrypt decrypt. Please help me

[@Demonslay335]

That one uses a legit third-party encryption program that is secure. No way to break it. Restore from backups.

[@kunalpatel7482]

Hello sir my files are converted into . Lalo extension please give me a tool to decrypt those files please.

[@Demonslay335]

Do not spam me. I replied to your other comment on another video. Read. It.

[@kirillstarodubtsev6125]

Thanks!

[@ahmedbellil5161]

thanks

[@coyzor]

Thank you

[@AlejandroSanchezz]

Thanks for sharing

[@4SecuriTI]

Esa herramienta para verificar la clave publica se ve muy útil.

[@kannthu]

Hey, isn't it dangerous to test malware on virtual machine? In some cases malware can escape virtual machine, so better question is " is there safe way to test malware"?

[@Demonslay335]

It's certainly "safe-er" than running on your own system. There are technically some VM escape exploits out there, but they are usually patched pretty quick. Also, I have honestly never ran into a malware using one so far; I tend to focus on the "simpler" ones. There are steps for hardening your VM a bit more out there. Ideally, it probably would be argued that you should analyse on separate hardware entirely, but I'm no expert on that subject. :)

[@MalwareAnalysisForHedgehogs]

If you have a host machine using a different operating system than the VM you are pretty safe, e.g. you might have a linux distro for your host machine and Windows for your VM. I have never encountered malware so far that is multipartite AND can escape from a VM to infect the OS of the host and it would probably not be worth it making. Apart from that, a dedicated machine to analyse malware on it, is ideal.

[@BrunoMedeiros-lh6bm]

I need your help please i need contact you