Binary Emulation for Malware Analysis

During my journey into reverse engineering, I stumbled upon a valuable technique: partial binary emulation while dissecting the Mirai IoT Botnet. This malicious software utilized a custom algorithm to obfuscate both its configuration and all strings within it. As the malware executed, it dynamically decrypted these strings through a specific function.

As I delved deeper into the project, a thought crossed my mind: Could I decode all the obscured strings without having to run the malware itself? Was it possible …

algorithm analysis binary botnet configuration emulation engineering function iot iot botnet journey malicious malicious software malware malware analysis mirai partial reverse reverse engineering software strings