Utilizando LLMs para Facilitar a Analise de Malwares 🇧🇷

Malware analysis with LLMs: live IDA/Ghidra + AI to rename functions, generate YARA, and reconstruct readable source in real time.

Information

 Rafael FĂ©lix

 Hakai

Talk

Public

 2025-11-19T19:00:00-03:00

 1:00

Rafael Félix delivers an advanced, hands‑on demonstration of how Large Language Models (LLMs) are reshaping malware analysis. As Offensive Development Lead at HAKAI, Rafael shows live integrations between classic reverse‑engineering tools, such as IDA Pro and Ghidra, and AI models, turning obfuscated assembly into clear, annotated, and actionable analysis.

Using a real sample from MalwareBazaar, the session demonstrates live identification of evasion techniques (like process injection), intelligent function renaming, useful explanatory comments, automated YARA rule generation, and reconstruction of a readable C++ (or other systems language) source version. This is practical work, not theory, designed to drastically speed up reverse engineering, democratize expertise, and equip attendees to implement these techniques immediately.