Malware Theory - Overview to Malware Vaccines
Channel: MalwareAnalysisForHedgehogs
Date: 2022-02-12

What are malware vaccines and how do they work? What types of vaccines exist? What are their pros and cons?

My malware analysis course for beginners: https://www.udemy.com/course/windows-malware-analysis-for-hedgehogs-beginner-training/?referralCode=EE0E2DC9FA7388FF25B7
Buy me a coffee: https://ko-fi.com/struppigel
Follow me on Twitter: https://twitter.com/struppigel

EmoCrash, Emotet vaccine: https://www.binarydefense.com/emocrash-exploiting-a-vulnerability-in-emotet-malware-for-defense/
STOP/DJVU ransomware vaccine: https://github.com/struppigel/STOP-DJVU-Ransomware-Vaccine
Paper: A. Wichmann and E. Gerhards-Padilla, "Using Infection Markers as a Vaccine against Malware Attacks," 2012 IEEE International Conference on Green Computing and Communications, 2012, pp. 737-742, doi: 10.1109/GreenCom.2012.121.

00:00 intro
00:05 definition
00:46 paper about infection marker extraction
01:30 vaccine ingredients
04:25 vaccine taxonomy
07:11 STOP/DJVU ransomware vaccine
08:10 pros and cons of vaccines
10:16 train your analysis skills by finding vaccines