Course Information
Course Overview
Static and dynamic analysis. Reverse engineering. Writing Decryptors
The aim of this course is to provide a practical approach to analyzing ransomware. Working with real world samples of increasing difficulty, we will:
Deep dive into identifying the encryption techniques,
Navigate through various evasion tricks used by malware writers,
Have fun discovering flaws in their logic or the implementation and
Work out automated ways to recover the affected files.
If you're already familiar with the basics and want to dive straight into advanced samples, navigate anti-virtualisation and anti-analysis tricks, and write C and Python decryptors for custom crypto algorithms, please check out our Advanced Reverse Engineering Ransomware course!
Course Content
- 3 section(s)
- 9 lecture(s)
- Section 1 Course Introduction
- Section 2 Under the hood of a simple cryptor
- Section 3 More disassembling and writing decryptors
What You’ll Learn
- The lectures, videos and other resources will provide relevant information about current malware analysis tricks, How to use disassemblers and other security tools, How to identify flaws in ransomware code or encryption logic, Practice on progressively difficult samples which illustrate different concepts each, Practice acquired knowledge via quizzes for each section, How to write simple decrpytors in a high-level language (source code provided)
Skills covered in this course
Reviews
-
JJan Henk Kanon
Nog iets meer uitleg over de relaties tussen de punten van onderzoek
-
TTino Martinez
As someone who has some experience in RE, this course was great. Cristina did a great job of explaining the content and the tasks required to RE the binaires. One recommendation to suggest is to present the "Practice Blue 1 Analysis" before "Practice Blue Decryption. Would probably help with the flow of the content.
-
GGiulio Ruzzi
There are a many things that are not explained, but for those with some knowledge it's not bad.
-
JJacob Woodby
The meat of the course is in the scripts that were prewritten and not explained during the course. The course did not provide the content expected or any depth. It was a high level overview. After taking x86 and C courses from Udemy, I expected much more than this.