
covirt
An x86-64 code virtualizer for VM based obfuscation
binary-analysiscode-analysisdynamic-analysis-sandboxing+3
253

An x86-64 code virtualizer for VM based obfuscation

"Reverse engineering analysis of a fileless Remcos RAT variant that injects into svchost.exe via Native API calls. Covers obfuscated payload…

Deobfuscation via optimization with usage of LLVM IR and parsing assembly.