Million Dollar Malware: Using the Viper Framework to Investigate and Track Ryuk’s Success

No ratings

Presented at GrrCon 2019 by

Colin Cowie

Ever since it was first discovered in 2018, Ryuk ransomware has been extremely profitable and is known for expensive ransom payouts. Ryuk has changed in functionality the variety of Ryuk ransomware samples has been increasing. This talk explores what attributes make Ryuk successful and how custom modules for the Viper Framework can be leveraged to perform similarity analysis and track malware development.