2nd Meetup – Reversing and Decrypting the Communications of APT Malware

In this awesome presentation, Monnappa explained about Etumbot malware used in a Cyber Espionage attack.  He showcased the sandbox analysis, Reverse engineering and Decrypting the communications of Etumbot Backdoor using practical video demonstrations.
 

 Presentation:

Video Demo 1:

Video Demo 2:

Video Demo 3:

References:

• http://www.arbornetworks.com/asert/2014/06/illuminating-the-etumbot-apt-backdoor/
• http://www.fireeye.com/blog/technical/botnet-activities-research/2014/09/darwins-favorite-apt-group-2.html