Malware Analysis #3 - A Malicious YouTube Video with over 150,000 Views 

I hope i gave an understandable explanation of why I used a hardware breakpoint. Let me know if there was anything you didn’t understand

Basically, if you are decrypting some bytes that are going to be executed and you put a normal breakpoint on those bytes intending to be hit once the instruction pointer is there, it will end up decrypting incorrectly since what a software breakpoint does is it injects an int3 instruction behind the scenes. So you are actually temporarily changing the content of whats there. So when it goes to decrypt, its going to try and decrypt the changed instruction and will decrypt to the wrong value.

G413 Carbon

Promise I’ll find a solution to the microphone issue next video :)

Thats what i was thinking

Thank you!