Unraveling LukaLocker Ransomware | Tradecraft Tuesday

Join Huntress team members Jonny Johnson, Principal Product Researcher, and Alden Schmidt Sr. Detection Engineer for a deep dive into LukaLocker Ransomware.

00:00 Unraveling LukaLocker Ransomware
02:23 Introductions
03:33 LukaLocker Walkthrough
06:10 Observed Attacked Behavior
08:04 Initial Triage Via PowerParse
12:50 Main Function
15:50 Function Jump Table
17:22 Killing Important Processes & Services
21:46 Observed Patching Functions
26:05 Function Patching
30:32 Ransomware Arguments
34:28 Identifying Crypto Routines
39:20 Telemetry & Detection Opportunities
42:48 Behavioral Detections
47:45 Huntress Upcoming Events

Get more Tradecraft Tuesday:    • Tradecraft Tuesday  

Register for the next live episode: https://www.huntress.com/tradecraft-t...