Paper: Not a GAMe maKER

Raul Alvarez performs low-level analysis of information-stealing trojan.

The Gamker information-stealing trojan (also known as Shiz) has been around for a few years. It made the news back in 2013 when it was found to

target

SAP applications.

Today, we publish an article by

Fortinet

researcher Raul Alvarez who performed a low-level analysis of the trojan, in which he focused on its code injection and API-hooking routines.

You can read the article

here

in HTML format or download it

here

as a PDF.

If you enjoy this kind of low-level malware analysis, make sure to check out previous articles Raul has written for

VB

, including analyses of

Vawtrak

and

Neshta

.

Posted on 26 August 2015 by

Martijn Grooten