Analyzing the FBI's Qakbot Takedown Code

[@meowisgoat]

accidentally stumped on your channel and it was a bless, this is Top Studio Quality tutorials from a professional Progressive instructions (without stuttering or waffling to fill the time with empty talks), to a clean video quality , to the Tools used in the video mentioned in description , to a clean Audio Quality and pronunciation , all boxes checked ✔ , you may wonder why i mention "good pronunciation", that is because 90% of the time on youtube we suffer from videos that you can't even understand what they saying "bad audio quality, and bad pronunciations with some hard accents" . its hard to find a channel that sticks to professional standards like yours . well done , you deserve millions of subscribers

[@sonianuj]

Wow, thank you so much for the kind words! 🙏

[@kar33m_01]

+ for deep dive into ghidra

[@rhinoferoce7250]

+1 for a Malcat deeper dive

[@sonianuj]

Thanks for this feedback. I'll definitely work on a future malcat video.

[@Inda_Wild]

I would welcome a comprehensive and up-to-date IDA Pro Playlist.

[@sonianuj]

Thanks for the suggestion. For now I’ve decided to focus on using Ghidra and Binary Ninja because they are now/low cost…but maybe one day!

[@mostwantedduck]

The bad thing about this video is that it has an end! Awesome content!!!

[@linuxinside6188]

Waah bhai wah 👏🏼

[@sonianuj]

This is my favorite comment

[@cemmidesem305]

Very nice insights to malware analysis,I would like to suggest that I believe there are lots of subscribers of your who are beginner in malware analysis or cyber security, if you could make some other beginner friendly videos explaining some of them terms or lets say some offsets are usually used in what cases etc. would be amazing. Also some explaining some tools you like to use for certain cases. I see many youtubers explaning logic behind the topics. Most of them tell you this is what and what it does but how or why it does that. As a ex teacher I find people who can explain things in simplest ways are the ones who truly understand what they doing. Thanks for insightful information

[@sonianuj]

Hi there! Thank you for taking the time to write a comment. I agree there is a huge demand for introductory videos. If you have any specific ideas on topics, please don't hesitate to let me know. Generating good ideas is probably the hardest part. Any feedback is welcome and appreciated.

[@cemmidesem305]

@@sonianuj well not going to specify any topic but whatever it is you explain I suggest including the logic part why it is like that and how etc it would be great

[@cemmidesem305]

If I need to specify there are lots of tools but no introduction anywhere explaining the logic behind and use cases. That can be a start

[@KevinFinnigin]

Awesome! Very informative and gotta admit I chuckled at the part where the MZ was being decoded. Get the same feeling every time. :)

[@sonianuj]

Thanks Kevin! Lol yes, the MZ rush is real.

[@ciaranbyrne7922]

Hi Anuj, brilliant video these are fantastic insights into malware analysis Just want to point out though that on my screen anyway, got flashbanged at 21:19 😅 Keep up the good work I’ve watched all these videos they are absolute gold

[@sonianuj]

Thank you! Sorry about the flashes, I did put a note in the description after someone notified me. Weird editing artifact I didn’t spot before upload.

[@kar33m_01]

thanks for all effort

[@mustaphaaitichou1519]

Thabkyou for valuable contents you share inisghful keep going !

[@sonianuj]

Thanks, will do!

[@anantP-ip8op]

Hi, Was awaiting for your video after crackdown! Great one. #happyreversing

[@sonianuj]

Happy to hear you enjoyed the video! If you have any ideas for future topics, please let me know.

[@jacktaubl48]

This is an awesome breakdown! Great video

[@sonianuj]

Thanks for this feedback, it’s wonderful to hear!

[@wise_one45]

Nicee! Really enjoy your video.

[@blueteams5495]

Hi Anuj, Thanks for another great video. Could you please have a video on how to identify, follow, analyze and gather information regarding latest malware or APT Campanians. It would be great if you share some insights on it

[@npawan888]

Keep up the good work sir, looking forward to learn a lot from u

[@sonianuj]

Thank you so much, more to come!

[@paritoshbhatt]

very informative video ! Thanks for sharing this man.

[@sonianuj]

You’re very welcome, thank you for watching! If you have any ideas for future videos, please let me know.

[@rob2rox]

great video

[@sonianuj]

Thanks for the visit

[@MartinBAYARD]

Great video, thanks for sharing and spreading knowledge :)

[@sonianuj]

My pleasure!

[@x0rZ15t]

Thanks for a wonderful video! Malcat looks very nice, will add it to my FlareVM setup. More videos with/about this tool would really be appreciated.

[@sonianuj]

Thanks, will do!

[@aaronsparling5895]

Malcat has CAPA feature built in, such a great tool

[@sonianuj]

I did see that shortly before recording, but didn’t have a chance to test yet. Very cool!

[@-Giuseppe]

Hi Anuj, love very much your content. If I might say something you could improve is, maybe to insert the timelapse so we can jump to the section we are interested in.

[@sonianuj]

Hi Giuseppe, thanks for watching! Thanks for this suggestion. Just to clarify, you are referring to adding chapters and timestamps in the video description, correct?

[@-Giuseppe]

@@sonianuj yes, exactly 🤗🤙

[@sonianuj]

Great idea, just added timestamps. Thank you for the suggestion!

[@inuyasha331]

What in the seizure happened at 21:17???

[@sonianuj]

Lol, not sure, camtasia glitch

[@davidpecoraro194]

Great Video. Can you provide some guidance on how to install runsc? I downloaded the zip and attempted to execute it from the unziped directory; however, no .exe is present to execute at the command line. Reading the gitgub documentation it appears it must be compiled. Can you explain how to accomplish that? Thank you.

[@sonianuj]

Hi there, you can find the compiled exe's in the zip file here: github.com/edygert/runsc/releases/tag/V1.0.0 After unzipping, you should be able to run runsc32.exe or runsc64.exe, which are contained within the zip (just confirmed this). Hope that helps!

[@davidpecoraro194]

Thank you. That is a great help. @@sonianuj

[@Meskalin_]

21:21 you should give an epilepsy warning. really not cool.

[@Meskalin_]

this could have given me a lot of trouble.

[@sonianuj]

Hi there, sorry about this. Unfortunately the video was already posted when someone told me about this issue. It didn’t appear in my local recording, so I didn’t see it at first. I’m not sure what caused this. I did add a comment in the time stamps in the description after someone alerted me to the issue. Again sorry, will try to catch this sort of thing sooner next time.

[@killandy01]

I have no clue whats going on man fml