Writing malware while the blue team is staring at you

Presented at DerbyCon 6.0 Recharge (2016), Sept. 23, 2016, 1 p.m. (50 minutes)

Malware authors and reverse engineers have been playing cat and mouse for a number of years now when it comes to writing and reversing of malware. From nation state level malware to the mass malware that infects out of date grandmas and grandpas the different types of malware employ a myriad of techniques to stop those who look at it from guessing the true intent. This talk will be about some of the unorthodox methods employed by some malware to stay hidden from, or out right ignore the reverse engineering community.

Presenters:

• Rob Fuller / mubix   as Mubix “Rob” Fuller

Similar Presentations:

• 44CON 2016 / The Malware CAPE: Automated Extraction of Configuration and Payloads from Sophisticated Malware
• GrrCON 2019 / Reverse Engineering Malware for N00bs
• DerbyCon 3.0 All in the Family (2013) / The Malware Management Framework, a process you can use to find advanced malware. We found WinNTI with it!