I wanted my first foray into reverse engineering to cover a malware sample from beginning to end – from initial download to the final payload. As I am just getting started on the RE learning journey, I also wanted to find a sample which wasn’t too difficult. Lucky for me, it has been the season of malicious Google ads, and samples from a large variety of malware families have been easy to find.In this post, I will outline my process for working through this sample, the difficulties encountered, and the useful resources I found along the way.
Source: Google Ad Leads To SectopRAT :: Reverse Engineering and Analysis — Reverse Engineering and Analysis