VMAttack Project
 

An interesting IDA plugin to deal with VM based obfuscations - haven't tried it myself, yet, but certainly looks powerful.

Won 2nd prize in 2016 Hex-Ray plugin contest

Despite some limitations (for example single threaded and stack based VMs) is a very interesting concept and does several advanced analysis. By the way there is someone who tried to use it with real targets and got some results?

Thanks,
Shub

that is a good question.

recently seen a talk of the author of this plugin and once again I confirm that apparently works very well, but despite everything I didn't see any application so far and probably will never see because authors of VMs got their countermeasures to avoid these types of attacks.

Is his talk available online?

the only paper I found is "VMAttack: Deobfuscating Virtualization-Based Packed Binaries Anatoli Kalysch, Johannes Götzfried and Tilo Müller"
https://www1.cs.fau.de/content/vmattack direct link https://www1.cs.fau.de/filepool/publications/unpacking-dynamic-static.pdf
they submitted it to (ARES '17: Proceedings of the 12th International Conference on Availability, Reliability and Security) no video though :mad: