Track 3 Saturday·37 min
Mark Embrich
Walks through a VBScript dropper that randomizes array decoding to produce many different file hashes for one payload.
malware-analysisransomwarewindows+2
DEF CON 34 talks are here: 354 talks, summarized and searchable.
Browse DEF CON 341 talk in the archive.
1–1 of 1 talk
Track 3 Saturday·37 min
Mark Embrich
Walks through a VBScript dropper that randomizes array decoding to produce many different file hashes for one payload.