Unraveling a Multi-Stage Downloader with Binary Refinery

Dive into practical malware analysis through a live demonstration where cybersecurity expert Jesko Hüttenhain dissects a sophisticated multi-stage malware delivery chain using Binary Refinery, a powerful command-line analysis tool. Follow along as the analysis traces a malicious RTF document that exploits CVE-2017-11882, working through layers of obfuscated shellcode and an AutoIT script to ultimately reveal the final .NET payload—AgentTesla. Master essential triage techniques for decoding complex threats and develop hands-on skills in reverse engineering malware components. Learn to navigate through multiple stages of obfuscation, understand how attackers structure their delivery mechanisms, and gain proficiency with Binary Refinery's capabilities for automated malware unpacking and analysis. Perfect for both cybersecurity beginners looking to understand malware analysis fundamentals and experienced professionals seeking to enhance their reverse engineering toolkit with practical, real-world examples of modern threat actor techniques.