It's Malware Time - A Bar Crawl from Skunked Homebrew to Rotten Apples
Explore the evolution of malware in this 41-minute conference talk from BSides Charm 2019. Delve into the intricacies of Shlayer malware, from its initial identification to its distribution methods. Learn about sample collection techniques, variant execution processes, and the various scripts involved in its operation. Analyze the URL components, network connection details, and authorization mechanisms employed by Shlayer. Gain insights into the use of ExecuteWithPrivileges() and understand the ATT&CK framework analysis of this threat. Examine the curl behaviors associated with Shlayer, both generic and specific, and access helpful resources for further investigation. Conclude with a Q&A session to address any remaining questions about this sophisticated malware strain.