hobune Channels Contact About Donate

Reversing WannaCry Part 2 - Diving into the malware with #Ghidra

View comments (124)

Description YT

In the second video of the "Reversing WannaCry" series we continue to dive into the malware and find some encrypted components and the first traces of the decryption & encryption functionality of the ransomware. We also learn how to use OOAnalyzer to easily reverse engineer C++ code in Ghidra!

Part 1: https://www.youtube.com/watch?v=Sv8yu12y5zM

The scripts and Ghidra projects can be found here: https://github.com/ghidraninja/ReversingWannacry

Twitter: https://twitter.com/ghidraninja

Links:
- OOAnalyzer: https://insights.sei.cmu.edu/sei_blog/2019/07/using-ooanalyzer-to-reverse-engineer-object-oriented-code-with-ghidra.html
- My Ghidra Scripts: https://github.com/ghidraninja/ghidra_scripts