The MAZE ransomware team has been operating for roughly one year, targeting hospital infrastructure and pioneering data theft for extortion.
Bitdefender malware researchers have documented how MAZE ransomware works, what defense mechanisms it employs to stay hidden and how it unleashes its destructive behavior on the target system.
This white paper outlines how to defeat the evasion techniques built into the MAZE ransomware.
Key takeaways:
• How the MAZE ransomware should be unpacked
• How MAZE uses anti-disassembly tricks to mislead analysts
• How MAZE ransomware encrypts files and deletes backups to maximise destruction
